$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: BSAWhwZRLbfXu3sAMCTrOQQXDQwGh+ozwEBlsVMpiwE= Subject key identifier: BA:51:B4:D0:08:92:F0:6D:8A:2C:40:39:AD:9A:11:28:45:6E:EB:AB Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: 43 Signing time: Wed 15 May 2024 08:11:56 +0000 Manifest this update: Wed 15 May 2024 08:11:56 +0000 Manifest next update: Wed 22 May 2024 08:11:56 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: T9QOLostwhmTnT0A3h5Genm0cuR8jB6K+CPXBEkTE4s=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: W5uM4QWl7/kjuoUsTk27Qd3J9/dVP6EbOqHpeD+YgC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: May 15 08:11:56 2024 GMT Not After : May 22 08:11:56 2024 GMT Subject: CN=66446e4c-b899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:19:81:be:55:68:ca:a0:7b:81:ee:a8:fc: 41:37:6a:c3:bc:bc:33:41:96:63:40:09:ef:e4:da: 8d:65:be:71:66:fe:57:3d:5f:b7:b9:c6:00:4a:38: e7:b9:0b:c5:3e:2d:51:a0:5a:81:80:43:62:6c:53: be:3c:04:e6:95:5a:6c:25:ca:9a:69:aa:42:8d:a1: 32:87:d4:fa:4c:77:3f:e4:94:4f:54:74:1a:c8:a5: 84:8e:f8:62:21:ae:93:dc:42:90:b0:de:df:4c:06: b1:7f:c1:d7:3d:06:fe:88:b2:9c:0d:8f:e8:22:dc: 42:2c:d7:a7:9f:80:1a:15:87:43:3b:07:20:6d:7f: e6:16:34:b2:38:63:40:fe:02:70:c6:90:5a:ce:c3: cd:25:33:4b:63:09:d9:2a:9b:b0:48:6f:d0:b0:11: 65:40:9a:bc:49:1f:aa:84:5b:3d:13:98:b3:ee:a8: 74:6b:45:45:57:d2:64:13:15:ee:e0:40:1f:41:97: 66:14:03:4f:8a:ec:fa:1c:9d:b3:4d:4a:d9:81:46: 41:23:86:bb:5f:92:cb:92:4c:fb:ad:d4:00:17:8f: 0f:22:4b:df:69:ba:89:c2:51:98:1e:fb:8d:d2:33: 13:84:18:e8:55:61:1f:42:25:ac:2e:eb:fb:41:ff: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:B4:D0:08:92:F0:6D:8A:2C:40:39:AD:9A:11:28:45:6E:EB:AB X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c0:1d:68:ce:6e:ea:ab:48:63:97:e3:db:87:b9:24:72:9b: e3:0a:52:da:20:30:73:53:fa:38:d7:a1:45:9b:e3:5e:60:8b: 17:d8:25:ec:5c:6f:d6:49:36:29:1a:b6:0d:c1:de:57:8a:e8: 27:88:dc:eb:34:f3:6f:ee:b5:fb:d1:48:50:f8:be:6f:8e:14: d6:40:4d:fb:b0:e9:5d:bb:6a:c8:d5:75:8a:54:c8:12:9b:e0: f3:3c:21:28:38:85:34:7f:cc:93:83:c1:69:51:e3:d5:a3:5e: 0f:72:a3:10:28:28:a1:1f:f5:75:aa:58:69:ab:91:30:8b:f8: c6:fa:1f:61:17:94:f4:cd:14:51:fe:4e:7a:90:de:c2:7c:53: 4e:72:22:6c:18:f6:f9:c3:1d:18:80:0b:ee:e7:04:11:d2:9e: 8f:7b:41:bc:fe:83:d7:fb:72:d6:d2:ff:02:5c:bb:27:ac:64: 2d:b3:20:6f:af:6c:4a:e7:b9:70:35:e2:7f:5a:a1:73:3e:09: 97:ee:ab:a9:af:7b:94:4f:8a:03:bb:0f:ed:59:64:ea:69:2a: a5:fe:5f:b7:a5:0f:92:b4:a7:03:14:8c:6e:db:29:93:20:41: 8e:3b:b4:34:b3:44:91:31:07:44:a0:34:96:41:83:37:c7:62: 69:7c:a7:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkEwQzExMC8GA1UEBRMoQ0Q1Q0Q1OTA5MTNFNEY4OUFGM0QxQ0E2RTI5RkFCM0Mw NjdEMjE0RTAeFw0yNDA1MTUwODExNTZaFw0yNDA1MjIwODExNTZaMBgxFjAUBgNV BAMTDTY2NDQ2ZTRjLWI4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe+RmBvlVoyqB7ge6o/EE3asO8vDNBlmNACe/k2o1lvnFm/lc9X7e5xgBKOOe5 C8U+LVGgWoGAQ2JsU748BOaVWmwlypppqkKNoTKH1PpMdz/klE9UdBrIpYSO+GIh rpPcQpCw3t9MBrF/wdc9Bv6IspwNj+gi3EIs16efgBoVh0M7ByBtf+YWNLI4Y0D+ AnDGkFrOw80lM0tjCdkqm7BIb9CwEWVAmrxJH6qEWz0TmLPuqHRrRUVX0mQTFe7g QB9Bl2YUA0+K7PocnbNNStmBRkEjhrtfksuSTPut1AAXjw8iS99puonCUZge+43S MxOEGOhVYR9CJawu6/tB/0+nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUulG00AiS 8G2KLEA5rZoRKEVu66swHwYDVR0jBBgwFoAUzVzVkJE+T4mvPRym4p+rPAZ9IU4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQTBDLzQxNTMxQjBDQUVD RDExRUU4NkYxQjI0OUM0RjlBRTAyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlV NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelZ6VmtKRS1UNG12UFJ5bTRwLXJQQVo5SVU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC QTBDLzQxNTMxQjBDQUVDRDExRUU4NkYxQjI0OUM0RjlBRTAyL3pWelZrSkUtVDRt dlBSeW00cC1yUEFaOUlVNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7AHWjObuqrSGOX49uHuSRym+MKUtogMHNT+jjXoUWb415gixfYJexc b9ZJNikatg3B3leK6CeI3Os082/utfvRSFD4vm+OFNZATfuw6V27asjVdYpUyBKb 4PM8ISg4hTR/zJODwWlR49WjXg9yoxAoKKEf9XWqWGmrkTCL+Mb6H2EXlPTNFFH+ TnqQ3sJ8U05yImwY9vnDHRiAC+7nBBHSno97Qbz+g9f7ctbS/wJcuyesZC2zIG+v bErnuXA14n9aoXM+CZfuq6mve5RPigO7D+1ZZOppKqX+X7elD5K0pwMUjG7bKZMg QY47tDSzRJExB0SgNJZBgzfHYml8p/U= -----END CERTIFICATE-----Generated at Wed May 15 09:04:47 2024 by rpki-client on console-ams.rpki-client.org