$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: ieGMwsxHwif1qVioetL6LtwYSMVDAKcskrREyStSoHs= Subject key identifier: 8C:EE:1F:6B:7F:FB:E8:67:A8:C1:95:15:6E:5E:DC:AD:F1:28:37:A8 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 33E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 33D1 Signing time: Tue 30 Apr 2024 14:51:35 +0000 Manifest this update: Tue 30 Apr 2024 14:51:35 +0000 Manifest next update: Tue 07 May 2024 14:51:35 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: gVrMHccaJ00wRNLMrcmDHd3LqNm/Tz6ws7qjup7RQv4=) 2: 0232AA081A5A11EE89B07267C4F9AE02.roa (hash: E8aCWI5va6H/40DfS+TkQOoU/nMICN5p7NAnAXpdfVw=) 3: B028DBE894C811EAB8C45A7BC4F9AE02.roa (hash: 2ndC2bbzio3DRuJpcnV7jJ43hv7qBpllb/Kb7sC9yE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13280 (0x33e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Apr 30 14:51:35 2024 GMT Not After : May 7 14:51:35 2024 GMT Subject: CN=66310577-1efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:a9:09:55:cc:4c:00:95:15:70:72:e0:9b: 8d:9e:81:93:88:c8:e0:c9:fe:5d:b3:44:ed:b9:21: fb:74:58:a1:38:69:4c:f7:9a:65:3e:2c:40:c4:8d: 85:58:08:5d:65:2d:38:4a:47:07:91:1a:fc:01:1f: 22:e2:ae:1c:ba:a7:08:5d:ee:b0:db:43:fb:a2:1d: 1c:fe:ee:b4:b1:4c:d9:4e:72:02:d1:64:17:f7:b0: a6:55:8f:05:3c:62:c8:ba:e8:ca:e0:4f:7e:b1:ba: 56:c3:c2:ff:15:89:bf:9c:3c:28:e0:65:9f:66:c2: b5:e2:66:01:1c:ca:45:d4:30:36:2c:58:05:7d:39: 4f:ce:b3:79:6d:91:00:2e:ca:88:08:75:99:b3:63: 0c:51:4d:70:27:4a:19:05:0c:02:b1:3b:03:b1:28: aa:e8:05:d6:eb:6f:7e:0a:de:cc:63:79:ec:d6:29: 11:45:b0:31:0b:b1:24:5d:d7:f6:cb:c2:b9:25:4d: c3:5d:a5:13:9c:a7:d6:75:16:ee:e7:db:9b:60:ae: 53:9e:2b:c1:cd:77:19:eb:fb:a6:8f:da:3b:b1:b8: a0:e7:d7:35:09:85:cf:e9:a7:28:54:d9:1f:5f:f2: f4:33:8c:8a:8b:7b:84:ae:d3:2a:56:38:3f:72:24: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EE:1F:6B:7F:FB:E8:67:A8:C1:95:15:6E:5E:DC:AD:F1:28:37:A8 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1c:79:e3:92:4e:fd:08:be:7a:3b:ba:b0:2d:83:87:ec:ae: 63:6d:bd:16:50:fb:6f:f2:57:13:39:6b:c5:44:d7:aa:d5:33: 66:84:89:fe:53:d5:5f:04:0d:f0:55:f2:cc:dd:68:f0:fd:9a: 79:2a:27:a2:2a:c8:dc:40:a0:e5:2d:5c:8b:87:82:4d:86:e3: e9:ee:33:4a:56:99:32:a1:7e:b0:20:e1:7e:7a:63:0f:fd:b0: 36:a6:dc:ff:44:83:3c:d6:c2:0c:45:3f:51:d8:6f:f2:67:07: 29:c0:ce:b5:bf:16:01:68:da:59:2b:8a:6b:e5:d8:e1:ee:04: ec:2e:db:d9:88:d2:35:88:c4:1e:64:f6:15:f4:eb:19:ab:53: 5b:02:0f:a1:ad:99:f0:72:15:f3:22:d7:42:43:3c:a1:e9:f4: 33:de:a1:19:86:ef:ce:89:1b:3c:d4:83:e7:6f:ec:23:3d:59: 5a:cc:d5:84:b1:37:88:50:a1:6b:8f:ed:8b:7c:91:0b:c4:b9: 42:09:ef:00:33:96:8c:9c:f3:ef:13:7a:64:ae:06:de:e4:dc: 39:33:d4:d0:67:a5:ba:e7:33:be:96:e5:c9:2c:e2:fd:4e:70: dc:af:1b:88:ac:c4:63:8e:93:6c:12:e3:83:65:17:cb:92:f9: 81:2a:0a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjQwNDMwMTQ1MTM1WhcNMjQwNTA3MTQ1MTM1WjAYMRYwFAYD VQQDEw02NjMxMDU3Ny0xZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWKpCVXMTACVFXBy4JuNnoGTiMjgyf5ds0TtuSH7dFihOGlM95plPixAxI2F WAhdZS04SkcHkRr8AR8i4q4cuqcIXe6w20P7oh0c/u60sUzZTnIC0WQX97CmVY8F PGLIuujK4E9+sbpWw8L/FYm/nDwo4GWfZsK14mYBHMpF1DA2LFgFfTlPzrN5bZEA LsqICHWZs2MMUU1wJ0oZBQwCsTsDsSiq6AXW629+Ct7MY3ns1ikRRbAxC7EkXdf2 y8K5JU3DXaUTnKfWdRbu59ubYK5TnivBzXcZ6/umj9o7sbig59c1CYXP6acoVNkf X/L0M4yKi3uErtMqVjg/ciQSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzuH2t/ ++hnqMGVFW5e3K3xKDeoMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnHHnjkk79CL56O7qwLYOH7K5jbb0WUPtv8lcTOWvFRNeq1TNmhIn+ U9VfBA3wVfLM3Wjw/Zp5KieiKsjcQKDlLVyLh4JNhuPp7jNKVpkyoX6wIOF+emMP /bA2ptz/RIM81sIMRT9R2G/yZwcpwM61vxYBaNpZK4pr5djh7gTsLtvZiNI1iMQe ZPYV9OsZq1NbAg+hrZnwchXzItdCQzyh6fQz3qEZhu/OiRs81IPnb+wjPVlazNWE sTeIUKFrj+2LfJELxLlCCe8AM5aMnPPvE3pkrgbe5Nw5M9TQZ6W65zO+luXJLOL9 TnDcrxuIrMRjjpNsEuODZRfLkvmBKgro -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:36 2024 by rpki-client on console-fra.rpki-client.org