$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: R/5APHew7l4iFvxNXgcP9SEADNoKuVZDmudkDy26rWU= Subject key identifier: 75:E0:48:9E:F7:3E:D2:48:6B:9F:C7:9F:7E:49:61:32:67:19:CF:AE Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 06B2 Signing time: Sat 18 May 2024 23:09:12 +0000 Manifest this update: Sat 18 May 2024 23:09:12 +0000 Manifest next update: Sat 25 May 2024 23:09:12 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: 98I6YEw0k3njxK028t6tWRrN5msId6z9KRuTWrS/jcs=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: svxlLdDpxiT0p4tG6s6Cz/fiwEF/oY/e6ZOEngdw4Wk=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: HswIS1O+7/IUGVb010ng/g+7bqvTvlSUDgR7cSiI2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: May 18 23:09:12 2024 GMT Not After : May 25 23:09:12 2024 GMT Subject: CN=66493518-ff4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:2b:88:de:55:38:02:c8:b1:bc:d1:83:5f: 33:cc:4b:5d:b7:ec:c8:f9:6d:5b:94:e9:4a:75:d8: 0f:6c:08:21:4c:57:79:3b:61:57:b7:b5:62:a7:e3: 08:ff:09:a8:78:f3:81:a8:84:db:9e:0e:29:e6:6e: 64:c1:c8:c6:ba:fc:83:e2:67:9a:f3:19:db:43:d9: 76:f8:47:eb:5f:9c:0e:0d:bf:40:76:21:cf:e4:ab: 81:36:2c:4a:ad:77:ca:95:42:54:c5:81:ea:cc:45: 1f:38:0a:aa:ac:11:74:e5:a2:ea:16:e2:bc:8e:60: a3:22:87:1d:06:fb:77:62:4f:b2:2f:41:d2:18:88: 2c:d5:af:f5:50:4a:e5:54:ba:53:37:df:2d:8b:50: 4a:fa:96:c7:c9:47:83:28:f2:d8:87:5b:48:b7:ac: 67:d7:24:2a:c4:3a:3c:76:ef:20:1c:16:53:fe:f6: 78:a4:77:0b:42:24:28:50:6b:5b:e1:72:2a:f7:44: 05:98:48:d2:97:2d:54:2b:6b:25:09:c2:17:37:6c: ec:45:c8:47:f8:91:03:f0:27:6b:e5:77:7b:4e:3e: ff:26:ae:43:45:4e:ea:94:bb:f3:9d:a0:02:b2:2d: 53:25:a0:c5:78:4e:5d:0e:10:e4:4d:7f:fc:c9:96: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E0:48:9E:F7:3E:D2:48:6B:9F:C7:9F:7E:49:61:32:67:19:CF:AE X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8b:79:2b:d8:a0:01:93:f3:ae:14:fb:03:1d:63:9f:6f:a5: 5b:be:a8:88:2a:d0:b0:a3:3a:6d:59:31:e0:00:73:3b:ca:d3: 24:54:f0:39:f2:07:bb:0f:f8:35:40:75:10:2b:b1:55:c4:fb: 97:0a:98:9d:d0:18:84:09:ac:1f:27:8d:00:8b:21:40:80:bd: e0:3f:f3:8f:3c:3e:7d:b7:90:62:77:4f:c3:2f:d0:f4:d1:ac: 1c:d5:38:75:58:6b:1f:76:fd:4c:cb:bc:f2:e1:69:39:bb:24: a0:77:ff:37:60:6f:e6:7e:08:3d:03:10:ea:af:32:4a:f4:ab: 3d:da:38:fd:0c:fe:71:6f:9a:03:95:05:7e:a1:65:d7:36:1e: c7:c6:92:ca:9f:5a:b9:98:20:5d:13:f3:70:e7:d9:14:af:2e: 8b:07:a2:09:8c:f1:86:25:1b:26:80:ea:64:7e:e9:a5:6a:f4: 2d:12:4b:fc:6e:1f:c7:8e:cd:4d:38:39:b3:fa:f2:57:7d:f7: f7:5b:4c:66:7d:53:98:4d:60:f7:ab:1f:56:c0:68:06:f2:fe: 60:22:ba:e4:c9:ce:47:1d:e8:c3:48:af:e6:f9:e3:b0:e6:ab: 1d:fb:b7:e6:89:b9:ee:d2:30:3c:38:ad:ba:cf:36:d4:45:34: 1d:d4:95:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjQwNTE4MjMwOTEyWhcNMjQwNTI1MjMwOTEyWjAYMRYwFAYD VQQDEw02NjQ5MzUxOC1mZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bEriN5VOALIsbzRg18zzEtdt+zI+W1blOlKddgPbAghTFd5O2FXt7Vip+MI /wmoePOBqITbng4p5m5kwcjGuvyD4mea8xnbQ9l2+EfrX5wODb9AdiHP5KuBNixK rXfKlUJUxYHqzEUfOAqqrBF05aLqFuK8jmCjIocdBvt3Yk+yL0HSGIgs1a/1UErl VLpTN98ti1BK+pbHyUeDKPLYh1tIt6xn1yQqxDo8du8gHBZT/vZ4pHcLQiQoUGtb 4XIq90QFmEjSly1UK2slCcIXN2zsRchH+JED8Cdr5Xd7Tj7/Jq5DRU7qlLvznaAC si1TJaDFeE5dDhDkTX/8yZa2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXgSJ73 PtJIa5/Hn35JYTJnGc+uMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVi3kr2KABk/OuFPsDHWOfb6VbvqiIKtCwozptWTHgAHM7ytMkVPA5 8ge7D/g1QHUQK7FVxPuXCpid0BiECawfJ40AiyFAgL3gP/OPPD59t5Bid0/DL9D0 0awc1Th1WGsfdv1My7zy4Wk5uySgd/83YG/mfgg9AxDqrzJK9Ks92jj9DP5xb5oD lQV+oWXXNh7HxpLKn1q5mCBdE/Nw59kUry6LB6IJjPGGJRsmgOpkfumlavQtEkv8 bh/Hjs1NODmz+vJXfff3W0xmfVOYTWD3qx9WwGgG8v5gIrrkyc5HHejDSK/m+eOw 5qsd+7fmibnu0jA8OK26zzbURTQd1JXc -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org