$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: 40JxEKGIPXmBEmTn/X0bl3MPEyuGI9yPIM/bkhlJYq0= Subject key identifier: 2F:71:7D:22:27:C6:D2:86:6D:E6:B7:88:CC:6F:DE:BD:04:B4:D5:A4 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 1155 Signing time: Fri 31 May 2024 21:30:20 +0000 Manifest this update: Fri 31 May 2024 21:30:19 +0000 Manifest next update: Fri 07 Jun 2024 21:30:19 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: TfYXVY+JHJfqWnnlXdwkvQyFs/puv0hR66WDQri3BXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: May 31 21:30:19 2024 GMT Not After : Jun 7 21:30:19 2024 GMT Subject: CN=665a416c-90cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:89:c8:9c:4b:5e:f8:12:19:61:69:50:83: 18:0a:7c:61:d6:1f:ad:c7:0e:e9:40:46:1e:b6:4d: c8:38:9b:26:08:48:09:b5:f1:01:c4:4a:74:cc:51: 45:6f:c5:ba:1d:2b:94:16:5a:70:6b:92:c3:66:11: 6c:4f:59:65:6d:c4:61:58:09:62:d0:ec:39:6b:74: 32:c2:cd:67:3a:15:d2:7f:8b:76:e3:25:95:05:66: 63:f9:44:ba:29:52:96:a1:6b:e7:96:43:f3:97:cf: 4c:3a:6b:43:8c:80:5d:ea:c3:bc:4b:03:4b:d2:e4: ee:b3:a4:77:7d:80:80:31:df:b4:1d:c9:65:5c:00: 11:6a:8c:f4:2e:9f:da:45:91:27:13:9d:77:5a:db: 4b:36:d0:d6:bb:2a:11:a3:59:2a:c5:af:90:f2:bb: 0e:af:b8:c7:64:31:ee:c8:58:93:dc:d1:18:09:78: 8a:63:fa:85:14:03:4e:48:b8:e2:66:91:7a:c2:0b: 8b:f0:64:d9:75:1e:2a:03:89:a3:2b:79:32:60:7f: a3:ff:fa:dc:4d:a8:a1:5f:a1:08:64:b7:4d:80:7f: 6f:26:d1:90:8c:ba:fd:99:b1:20:25:9f:96:ab:e7: c5:81:1f:5b:65:4a:08:c8:b8:f2:a0:8e:00:f1:d7: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:7D:22:27:C6:D2:86:6D:E6:B7:88:CC:6F:DE:BD:04:B4:D5:A4 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:98:9a:3e:a8:67:e6:72:fa:b7:28:5a:7b:a0:80:ec:9a:19: 13:fd:d2:cf:ca:99:77:a8:c3:e3:fa:b8:49:4d:05:0b:e5:51: 9b:11:64:4c:01:6f:ae:54:37:c1:e8:2d:c4:a8:eb:3b:89:e5: 9f:d2:62:eb:35:39:c8:8c:6a:a0:59:4b:2b:db:4f:05:8b:97: ed:14:65:f9:7c:0a:b1:81:cb:fa:f0:2e:2e:96:69:94:ed:35: ff:ab:01:ae:43:7e:5b:c3:7b:a0:df:89:09:b3:3d:50:83:05: b7:a0:4b:20:0e:f3:59:ab:d5:9c:4b:f5:8f:94:61:d5:22:37: ad:16:b3:49:98:a6:89:ed:9e:28:38:95:45:bf:74:80:db:a4: dc:ff:a9:01:8b:43:3a:ec:32:77:ef:fb:ac:9a:74:50:e3:64: 5c:52:74:cc:1b:dc:8e:e9:71:9e:19:b4:0b:1f:34:c5:84:21: c7:ab:9d:da:23:da:ec:6e:ce:6b:4a:62:0e:2c:58:88:c7:24: b2:a2:53:6d:d5:1e:d0:1f:dc:5d:70:7e:fe:54:2f:e7:e7:54: 39:54:2a:4f:5a:06:46:df:a0:2f:1b:15:92:2d:5b:f4:e8:91: cc:63:5c:ce:85:9c:01:cf:60:c4:86:f3:4e:1f:bb:df:04:2a: 82:b6:32:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjQwNTMxMjEzMDE5WhcNMjQwNjA3MjEzMDE5WjAYMRYwFAYD VQQDEw02NjVhNDE2Yy05MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45WJyJxLXvgSGWFpUIMYCnxh1h+txw7pQEYetk3IOJsmCEgJtfEBxEp0zFFF b8W6HSuUFlpwa5LDZhFsT1llbcRhWAli0Ow5a3Qyws1nOhXSf4t24yWVBWZj+US6 KVKWoWvnlkPzl89MOmtDjIBd6sO8SwNL0uTus6R3fYCAMd+0HcllXAARaoz0Lp/a RZEnE513WttLNtDWuyoRo1kqxa+Q8rsOr7jHZDHuyFiT3NEYCXiKY/qFFANOSLji ZpF6wguL8GTZdR4qA4mjK3kyYH+j//rcTaihX6EIZLdNgH9vJtGQjLr9mbEgJZ+W q+fFgR9bZUoIyLjyoI4A8ddvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9xfSIn xtKGbea3iMxv3r0EtNWkMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWmJo+qGfmcvq3KFp7oIDsmhkT/dLPypl3qMPj+rhJTQUL5VGbEWRM AW+uVDfB6C3EqOs7ieWf0mLrNTnIjGqgWUsr208Fi5ftFGX5fAqxgcv68C4ulmmU 7TX/qwGuQ35bw3ug34kJsz1QgwW3oEsgDvNZq9WcS/WPlGHVIjetFrNJmKaJ7Z4o OJVFv3SA26Tc/6kBi0M67DJ37/usmnRQ42RcUnTMG9yO6XGeGbQLHzTFhCHHq53a I9rsbs5rSmIOLFiIxySyolNt1R7QH9xdcH7+VC/n51Q5VCpPWgZG36AvGxWSLVv0 6JHMY1zOhZwBz2DEhvNOH7vfBCqCtjJk -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:12 2024 by rpki-client on console-ams.rpki-client.org