$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft File: zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft (raw, json) Hash identifier: mQ8tK09l8Ti9ucqJwXnktm3KSDssxqM1ItjA+ZLHF8s= Subject key identifier: 4A:E2:C9:BA:FE:53:A9:3F:EB:F0:B6:57:C9:A7:E8:89:A5:2E:93:56 Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 Certificate issuer: /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Certificate serial: 0E7D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft Manifest number: 0E6E Signing time: Wed 24 Apr 2024 18:25:50 +0000 Manifest this update: Wed 24 Apr 2024 18:25:49 +0000 Manifest next update: Wed 01 May 2024 18:25:49 +0000 Files and hashes: 1: zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl (hash: xm9C0xTRtbdUKXQFJaBMSjg4cM/Qkp5xnTH+4LJwJQ4=) 2: E56FCF286F9E11E9B98EF633C4F9AE02.roa (hash: HrD8wloe3iue1rkCggoa0BL5sTfzVaZdzTzTDbT0lGk=) 3: 5BCA77886F9D11E99D2E7930C4F9AE02.roa (hash: 3z4jFf2H8dfDXzTJviTES87G2aAZrK2+SrqCt0vte5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Validity Not Before: Apr 24 18:25:49 2024 GMT Not After : May 1 18:25:49 2024 GMT Subject: CN=66294eae-3fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:dc:12:ca:3e:10:5b:cc:09:b7:d3:6f:df: 07:d0:6d:a9:e0:2a:ea:75:b1:ad:a5:8f:a1:b2:b0: a5:39:76:fd:8c:db:5a:0d:c8:ac:e9:25:54:f0:df: ad:03:06:8b:2a:85:70:f6:b6:6b:93:e5:2b:34:d8: f1:aa:78:5e:18:8a:65:7b:e1:96:43:58:a9:39:1a: 57:05:59:a0:45:9b:06:64:96:1b:c1:f3:0f:14:b7: 64:ea:5f:ec:7f:1f:5b:d6:d1:07:e4:ba:50:60:b4: 67:ef:55:a2:98:29:c9:66:c8:61:e3:a6:2a:84:fe: e8:80:bd:d8:a6:2a:30:56:56:90:a0:ed:ba:76:b8: b4:4b:55:9b:6a:29:1c:87:6d:4a:fb:d9:08:e8:02: 74:69:df:09:15:96:21:18:4c:de:e2:8b:1e:27:54: 1d:a7:b7:42:05:f4:ce:db:a9:1f:a9:9e:65:84:1a: c3:dc:03:60:7f:42:5b:94:a5:99:79:99:be:c1:a2: 4b:d6:56:fd:bb:0b:5b:18:7f:d4:f0:3a:db:f6:a3: 00:8e:e2:74:6c:a6:37:22:9b:4d:35:61:61:a9:88: 4e:bb:b2:57:53:5f:83:17:f7:e8:a4:5b:40:5b:89: e5:a6:77:7e:21:e9:2a:8f:e4:20:ed:67:7b:66:df: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E2:C9:BA:FE:53:A9:3F:EB:F0:B6:57:C9:A7:E8:89:A5:2E:93:56 X509v3 Authority Key Identifier: keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:ee:ba:74:cd:b4:8c:29:1e:8d:50:5b:00:f7:4d:87:ca:5d: ee:4d:43:1a:67:63:e9:ad:cc:e1:63:cc:37:67:af:44:b2:ee: d1:d0:8b:59:70:9f:63:5a:ab:f7:2e:70:2d:ef:5a:11:03:94: 8c:15:7e:88:ee:37:cf:e5:90:9f:dd:de:f0:1d:14:e5:22:31: 07:f2:ec:cd:52:47:10:13:e8:28:1c:33:0a:00:24:39:5e:2d: 1c:24:9d:c1:85:a6:85:59:61:3b:ca:df:5b:08:82:ad:c3:81: 3b:42:f7:5d:77:12:a6:c4:8d:6b:e3:1a:fd:bd:9c:cf:a3:c4: f8:90:2a:14:92:52:51:1c:df:67:56:80:0e:47:38:4e:56:ff: 9c:5c:a2:f4:b5:4f:e2:a3:4f:ae:c2:ff:79:39:f1:04:8d:c3: f8:00:1d:26:cc:9c:58:48:c4:d7:0e:cf:b4:82:bb:5a:d0:d8: 91:f0:38:28:f8:60:6e:06:cb:c1:73:11:9d:05:91:6c:d0:8a: 69:d6:a9:fb:b4:e9:ea:a7:9b:18:4e:fc:eb:81:bd:7b:dc:da: 33:54:29:56:d9:32:ba:f3:f2:ca:f7:cd:f9:98:dd:d1:48:3c: 48:31:f5:94:be:0c:e3:ad:e0:8a:4f:4e:d1:03:2c:eb:a8:2b: 69:69:aa:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKENDQ0U1NEVFQUZCRjkzMjEzQ0Q5OTJCQ0ExRTUyNjdE NTA1MkIzQzcwHhcNMjQwNDI0MTgyNTQ5WhcNMjQwNTAxMTgyNTQ5WjAYMRYwFAYD VQQDEw02NjI5NGVhZS0zZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4DcEso+EFvMCbfTb98H0G2p4CrqdbGtpY+hsrClOXb9jNtaDcis6SVU8N+t AwaLKoVw9rZrk+UrNNjxqnheGIple+GWQ1ipORpXBVmgRZsGZJYbwfMPFLdk6l/s fx9b1tEH5LpQYLRn71WimCnJZshh46YqhP7ogL3YpiowVlaQoO26dri0S1Wbaikc h21K+9kI6AJ0ad8JFZYhGEze4oseJ1Qdp7dCBfTO26kfqZ5lhBrD3ANgf0JblKWZ eZm+waJL1lb9uwtbGH/U8Drb9qMAjuJ0bKY3IptNNWFhqYhOu7JXU1+DF/fopFtA W4nlpnd+Iekqj+Qg7Wd7Zt9s8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEriybr+ U6k/6/C2V8mn6ImlLpNWMB8GA1UdIwQYMBaAFMzOVO6vv5MhPNmSvKHlJn1QUrPH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS85QkE5NzFBMjZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5RTgyWks4b2VVbWZWQlNz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pNNVU3cS1fa3lFODJaSzhvZVVtZlZCU3M4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS85QkE5NzFBMjZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5 RTgyWks4b2VVbWZWQlNzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX7rp0zbSMKR6NUFsA902Hyl3uTUMaZ2PprczhY8w3Z69Esu7R0ItZ cJ9jWqv3LnAt71oRA5SMFX6I7jfP5ZCf3d7wHRTlIjEH8uzNUkcQE+goHDMKACQ5 Xi0cJJ3BhaaFWWE7yt9bCIKtw4E7QvdddxKmxI1r4xr9vZzPo8T4kCoUklJRHN9n VoAORzhOVv+cXKL0tU/io0+uwv95OfEEjcP4AB0mzJxYSMTXDs+0grta0NiR8Dgo +GBuBsvBcxGdBZFs0Ipp1qn7tOnqp5sYTvzrgb173NozVClW2TK68/LK9835mN3R SDxIMfWUvgzjreCKT07RAyzrqCtpaaq/ -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:55 2024 by rpki-client on console-fra.rpki-client.org