$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft File: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft (raw, json) Hash identifier: eZngBmD73hk+qLBKlwP0MVoXXOM/pLuKH7k4co5flGQ= Subject key identifier: 69:75:34:80:FF:30:25:72:6E:F5:1E:59:F8:FA:6F:31:72:4E:E3:84 Authority key identifier: 66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD Certificate issuer: /CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft Manifest number: 0513 Signing time: Wed 01 May 2024 01:29:07 +0000 Manifest this update: Wed 01 May 2024 01:29:07 +0000 Manifest next update: Wed 08 May 2024 01:29:07 +0000 Files and hashes: 1: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl (hash: TUOv6BfvD+5dDQhNjw/eLxrFhKOlRdfLBfPa4FaKlK0=) 2: 4E17ACCEF02511EE94BE6C37C4F9AE02.roa (hash: GmDLur4NSe492mXNcpGr7hV3TmJjYO1NSU0FXDjofS0=) 3: 6D6C7AC8F02511EE80ACAA37C4F9AE02.roa (hash: We+l8VVN7zrFhPTse+tE3AwMeByCsw6d+QGNbHVGvzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Validity Not Before: May 1 01:29:07 2024 GMT Not After : May 8 01:29:07 2024 GMT Subject: CN=66319ae3-f5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:14:f7:a8:9e:51:90:43:7f:a5:5b:c9:21: 31:d9:1f:e9:f5:d8:b6:8f:42:c7:ff:7d:ac:53:54: 2a:a5:16:14:e4:f1:38:49:93:22:f2:61:9a:35:f0: 54:24:83:fa:a0:86:33:84:11:52:ec:1d:42:90:80: 64:e9:e5:d6:cb:58:03:63:3e:c6:5f:4d:93:60:6f: 29:9a:7d:69:8e:36:1a:b5:76:94:50:7f:2c:be:c9: bb:87:2d:1c:ca:aa:1c:c3:c9:ec:50:dd:70:e0:d7: 45:d0:ef:32:6e:7b:f2:d5:26:bc:75:b0:56:02:41: 43:86:0b:95:17:10:ad:f6:0e:e0:0d:4f:1e:0f:c3: db:a2:fe:69:4a:51:d1:c4:8e:ce:34:09:27:9a:5e: 6e:45:be:15:00:9e:df:66:9b:19:3e:d9:ec:07:41: af:0b:d2:0a:5b:99:ac:f3:7a:98:f0:9e:4b:af:f8: 91:94:3a:73:32:8f:a9:10:dd:3a:4e:dd:11:3c:b9: e9:06:73:cc:45:9e:72:f5:96:e9:da:63:26:07:22: 91:2b:e0:ba:48:cc:fc:d6:0d:79:6d:db:0e:ab:35: 25:6c:d2:66:7a:49:44:01:7b:e6:9e:27:58:bb:4f: 74:dc:4d:58:03:7e:d9:b5:04:ca:92:0a:fb:e2:85: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:34:80:FF:30:25:72:6E:F5:1E:59:F8:FA:6F:31:72:4E:E3:84 X509v3 Authority Key Identifier: keyid:66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:17:f4:f4:12:b7:fd:fb:09:3d:a7:96:5c:2f:d9:3f:c1: f6:13:2f:6c:04:69:3e:3d:73:cc:cc:f8:52:9e:36:eb:e2:5a: e8:eb:ea:9c:e8:49:5c:73:12:2b:c8:0a:6d:34:34:86:3e:bb: 57:d8:11:a7:04:a4:19:c4:08:99:fe:a0:6a:9a:71:f5:c6:1f: 1f:c9:10:c2:58:f3:d6:0e:41:57:f0:0d:c0:75:7c:e7:65:44: a7:43:16:13:67:52:eb:05:1e:2f:e5:ae:02:b0:bd:84:91:3a: be:c8:44:fd:d5:7c:6f:a1:34:8b:4e:c7:6e:e2:03:06:29:2f: 11:86:be:03:4e:f1:d8:21:2f:f3:c1:bf:0d:91:f3:7e:03:73: b1:3a:5f:00:a7:1b:79:02:68:2f:86:72:8e:f0:32:66:e9:97: 86:11:0b:16:c1:71:51:41:c9:91:07:50:62:73:7d:26:7d:54: 98:e8:1e:65:f8:d5:ba:09:32:4c:17:3e:01:17:e1:56:98:0b: 3d:bf:84:93:cf:c4:d6:1e:a1:b1:c5:74:85:dd:d8:f3:3b:7b: 8a:6d:d0:42:d9:c1:9c:4f:2a:48:b5:55:b5:b4:5e:f3:55:67: 40:ff:d1:a1:1a:2b:e2:0f:d5:3e:54:2e:7e:eb:46:99:9b:e1: 85:a0:22:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYzQjYxMTAvBgNVBAUTKDY2MEVEREJCMzVENTM3NTZDMzA2QkQ4Q0Q5MTdEQUNG Rjc4OTZDQkQwHhcNMjQwNTAxMDEyOTA3WhcNMjQwNTA4MDEyOTA3WjAYMRYwFAYD VQQDEw02NjMxOWFlMy1mNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYoU96ieUZBDf6VbySEx2R/p9di2j0LH/32sU1QqpRYU5PE4SZMi8mGaNfBU JIP6oIYzhBFS7B1CkIBk6eXWy1gDYz7GX02TYG8pmn1pjjYatXaUUH8svsm7hy0c yqocw8nsUN1w4NdF0O8ybnvy1Sa8dbBWAkFDhguVFxCt9g7gDU8eD8Pbov5pSlHR xI7ONAknml5uRb4VAJ7fZpsZPtnsB0GvC9IKW5ms83qY8J5Lr/iRlDpzMo+pEN06 Tt0RPLnpBnPMRZ5y9Zbp2mMmByKRK+C6SMz81g15bdsOqzUlbNJmeklEAXvmnidY u0903E1YA37ZtQTKkgr74oX2HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl1NID/ MCVybvUeWfj6bzFyTuOEMB8GA1UdIwQYMBaAFGYO3bs11TdWwwa9jNkX2s/3iWy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjNCNi81MDhBQ0QyOEJD OTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4xYkRCcjJNMlJmYXpfZUpi TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnN2R1elhWTjFiREJyMk0yUmZhel9lSmJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjNCNi81MDhBQ0QyOEJDOTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4x YkRCcjJNMlJmYXpfZUpiTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhCBf09BK3/fsJPaeWXC/ZP8H2Ey9sBGk+PXPMzPhSnjbr4lro6+qc 6ElccxIryAptNDSGPrtX2BGnBKQZxAiZ/qBqmnH1xh8fyRDCWPPWDkFX8A3AdXzn ZUSnQxYTZ1LrBR4v5a4CsL2EkTq+yET91XxvoTSLTsdu4gMGKS8Rhr4DTvHYIS/z wb8NkfN+A3OxOl8Apxt5AmgvhnKO8DJm6ZeGEQsWwXFRQcmRB1Bic30mfVSY6B5l +NW6CTJMFz4BF+FWmAs9v4STz8TWHqGxxXSF3djzO3uKbdBC2cGcTypItVW1tF7z VWdA/9GhGiviD9U+VC5+60aZm+GFoCIf -----END CERTIFICATE-----Generated at Wed May 1 02:08:08 2024 by rpki-client on console-fra.rpki-client.org