$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: nRNbxFsPv+GUQ7KPlM5yR7RzZSONh0KluGKRrDzMSC4= Subject key identifier: D3:12:EC:E2:A9:6E:B8:DE:A0:A6:EC:A2:60:27:FC:5A:65:33:72:42 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 12FA Signing time: Thu 30 May 2024 19:56:46 +0000 Manifest this update: Thu 30 May 2024 19:56:46 +0000 Manifest next update: Thu 06 Jun 2024 19:56:46 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: lXC0rFqnVUdPQJmzmoDCF4TjGiGxMD561flAB8Qjz0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: May 30 19:56:46 2024 GMT Not After : Jun 6 19:56:46 2024 GMT Subject: CN=6658d9fe-5c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:55:8a:19:bb:3a:14:ba:8c:bb:13:50:a6: 25:e1:95:d3:88:ed:2c:3b:77:a3:72:7a:8e:9a:e6: 41:94:20:cc:64:d0:59:9a:3b:58:cf:f7:fb:94:56: 76:f6:8e:44:10:42:f2:f4:d9:13:94:1a:3b:2e:87: 67:ab:77:06:d8:84:85:55:47:15:04:24:24:d5:87: ca:5d:61:fb:bd:37:23:57:9d:c3:f9:1d:84:be:d0: 48:c3:f6:70:8e:1c:fc:ad:b5:40:cf:08:c9:47:f4: ca:b5:53:d6:af:ba:c5:e7:0c:89:67:f8:a8:13:7f: df:98:a8:e0:31:1d:34:c1:48:5e:6f:0c:1d:10:6f: a1:6b:a8:8e:c1:4f:ec:b0:01:ad:a1:89:7a:b6:cd: d8:64:3e:64:b7:01:55:cb:ba:c7:d0:2c:e3:da:6f: 46:03:4c:76:b6:ff:73:3a:56:ca:13:1c:0a:5a:1a: 94:51:a1:60:11:e1:f5:a9:02:7b:b2:70:ee:a1:23: ab:3b:02:cb:fb:19:24:3a:d8:a4:49:ce:a4:74:23: b1:4f:6a:dd:92:10:d7:4e:ae:10:eb:f2:1e:c4:f5: dd:4e:f8:c4:fa:0c:fc:aa:40:53:6d:03:3d:ed:00: c5:d4:46:45:ea:25:8f:f9:8c:a4:7c:f2:1d:bd:0d: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:EC:E2:A9:6E:B8:DE:A0:A6:EC:A2:60:27:FC:5A:65:33:72:42 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8b:7f:54:94:ee:4b:c1:e3:9b:06:5e:5c:06:7b:02:e2:88: 3f:65:c8:6f:1b:81:09:b1:bd:e1:26:f2:f3:66:ba:74:4d:5e: a8:9f:e8:8a:f4:ad:28:31:a8:5a:ed:8c:e6:41:93:c6:ef:1d: 14:f2:4f:11:e4:fb:b0:4b:41:49:07:97:e9:de:d8:7d:5d:68: 82:da:a7:0e:71:f6:aa:b3:13:f1:22:96:2b:3b:a5:bb:92:db: 3f:69:0d:50:d9:99:2e:d8:17:14:8a:2c:97:a3:52:68:2e:cf: 26:88:ff:18:1b:f8:08:80:2a:c4:00:98:5e:27:6f:09:a6:80: 2d:52:be:95:cf:41:0c:c7:77:63:3e:a6:20:bf:bd:27:10:47: 88:ae:87:cf:f5:bc:d0:ac:fb:94:7c:9d:59:bf:58:fd:53:ae: 00:e0:c6:62:87:dc:a5:7d:cc:0e:52:10:92:65:d4:3c:55:ec: 7e:9f:e7:ed:40:8f:34:83:b0:b9:b8:2a:8e:dc:fd:92:26:aa: df:9c:39:75:29:e9:f9:f8:5a:01:d7:18:4a:fe:67:d7:78:05: be:13:0e:45:1d:ee:0d:6f:9c:46:4b:34:eb:b9:60:62:cf:d1: 90:ef:dc:62:17:18:af:26:fb:c5:32:4e:3a:a1:6d:87:62:6f: f5:fb:34:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjQwNTMwMTk1NjQ2WhcNMjQwNjA2MTk1NjQ2WjAYMRYwFAYD VQQDEw02NjU4ZDlmZS01YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws5Vihm7OhS6jLsTUKYl4ZXTiO0sO3ejcnqOmuZBlCDMZNBZmjtYz/f7lFZ2 9o5EEELy9NkTlBo7Lodnq3cG2ISFVUcVBCQk1YfKXWH7vTcjV53D+R2EvtBIw/Zw jhz8rbVAzwjJR/TKtVPWr7rF5wyJZ/ioE3/fmKjgMR00wUhebwwdEG+ha6iOwU/s sAGtoYl6ts3YZD5ktwFVy7rH0Czj2m9GA0x2tv9zOlbKExwKWhqUUaFgEeH1qQJ7 snDuoSOrOwLL+xkkOtikSc6kdCOxT2rdkhDXTq4Q6/IexPXdTvjE+gz8qkBTbQM9 7QDF1EZF6iWP+YykfPIdvQ16swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMS7OKp brjeoKbsomAn/FplM3JCMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCei39UlO5LweObBl5cBnsC4og/ZchvG4EJsb3hJvLzZrp0TV6on+iK 9K0oMaha7YzmQZPG7x0U8k8R5PuwS0FJB5fp3th9XWiC2qcOcfaqsxPxIpYrO6W7 kts/aQ1Q2Zku2BcUiiyXo1JoLs8miP8YG/gIgCrEAJheJ28JpoAtUr6Vz0EMx3dj PqYgv70nEEeIrofP9bzQrPuUfJ1Zv1j9U64A4MZih9ylfcwOUhCSZdQ8Vex+n+ft QI80g7C5uCqO3P2SJqrfnDl1Ken5+FoB1xhK/mfXeAW+Ew5FHe4Nb5xGSzTruWBi z9GQ79xiFxivJvvFMk46oW2HYm/1+zQ3 -----END CERTIFICATE-----Generated at Thu May 30 20:35:31 2024 by rpki-client on console-fra.rpki-client.org