$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: 7Xx7gnbMg3TYPxfFdEHmwcFp1urRAEorBcZYVW+Mrl4= Subject key identifier: 48:BE:6A:11:55:A0:38:D5:9C:AF:3C:A5:C6:EE:EB:B6:3F:3A:87:30 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: AE Signing time: Sun 19 May 2024 06:35:57 +0000 Manifest this update: Sun 19 May 2024 06:35:56 +0000 Manifest next update: Sun 26 May 2024 06:35:56 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: +Iuvg9Uf8B+xhuHbkMf5acUn3fj5x2wKcKpyf3z/wmM=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: SlO5l7Ssx7xYn1jxUIf1TdJClyDeH3kcZikgHp8Htlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: May 19 06:35:56 2024 GMT Not After : May 26 06:35:56 2024 GMT Subject: CN=66499dcc-e685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:7a:b7:bf:c0:ef:b3:57:5d:a6:6a:da:cb: 27:79:91:3c:ae:d4:0d:4e:bd:de:5b:6f:f6:b5:81: 1f:1d:cf:96:16:22:88:25:09:a2:43:95:dc:60:a8: a5:86:2b:e6:66:10:a3:d3:07:17:8e:95:58:ff:5f: 33:d1:68:9d:c5:fb:c1:39:02:89:c2:d8:82:df:7b: 04:eb:fc:39:0b:fd:b5:f0:e1:a4:95:9d:97:93:7e: 4d:0a:13:d7:26:80:06:89:df:27:da:1d:1b:13:cf: 33:b0:9b:85:1d:19:c1:03:9a:c8:27:5c:1c:af:7f: 9e:05:60:25:b2:ab:25:40:5f:87:74:74:ff:2a:25: 46:ca:e1:cd:4f:4c:ef:19:84:9c:24:44:99:45:14: 6a:ae:c0:bb:df:af:41:28:37:fb:e0:1a:ec:67:a5: cd:6f:c5:18:1f:7a:f4:a8:3b:97:06:f8:c9:e9:4e: e3:86:1f:09:00:43:21:7d:66:a5:74:02:e8:a1:f7: 09:7d:d7:fc:d6:d7:3c:3e:77:3a:8c:9a:6a:e3:a7: aa:48:ba:f8:4c:62:63:4d:e8:c8:dc:0d:5f:db:86: 75:77:19:e5:32:b3:f3:79:24:ce:09:b4:17:40:6a: 13:c3:5f:48:93:f1:8e:b1:33:c3:9a:75:af:c4:71: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:6A:11:55:A0:38:D5:9C:AF:3C:A5:C6:EE:EB:B6:3F:3A:87:30 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7c:35:fd:82:fe:7c:d2:28:74:7a:a2:58:b8:3e:26:d4:e7: 1d:b8:92:1e:9c:0e:8d:61:ee:8b:41:1f:27:e6:4f:5f:a9:90: aa:3a:0e:51:94:17:31:c2:29:2c:21:88:bc:42:70:c8:41:25: ca:de:d1:c1:5f:aa:f8:d2:a2:cb:cc:d6:e9:90:62:9d:6d:a8: bb:7a:9b:57:99:13:64:17:66:89:d5:fc:12:4a:f1:14:73:fe: c3:dc:ee:04:3c:37:e0:d8:78:c8:bb:54:d5:d4:20:53:8f:54: 8b:86:d2:8d:08:49:c9:f2:31:37:08:47:c2:05:e4:12:57:51: b8:4f:df:f4:bc:6c:ef:68:4f:66:75:16:21:e6:1f:17:af:72: 88:86:79:a5:c9:70:96:b1:61:f3:4c:51:54:af:50:ff:22:69: 74:05:75:22:e2:bf:04:1a:71:60:f6:9f:74:ad:37:7d:c7:cd: 0f:a6:29:ad:a5:0a:67:71:0b:37:f3:2f:f8:e5:41:c7:ad:23: 4b:ec:b7:88:75:e2:80:1c:c5:39:0f:ff:63:9c:6d:ac:51:32: d6:e7:0b:f9:f1:f1:cb:6a:f2:de:3e:73:03:8c:17:60:66:9b: f9:29:a3:b8:2b:e5:fd:54:a8:ac:f2:1d:bb:ac:fa:1e:59:ad: f7:5d:2a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjQwNTE5MDYzNTU2WhcNMjQwNTI2MDYzNTU2WjAYMRYwFAYD VQQDEw02NjQ5OWRjYy1lNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25l6t7/A77NXXaZq2ssneZE8rtQNTr3eW2/2tYEfHc+WFiKIJQmiQ5XcYKil hivmZhCj0wcXjpVY/18z0WidxfvBOQKJwtiC33sE6/w5C/218OGklZ2Xk35NChPX JoAGid8n2h0bE88zsJuFHRnBA5rIJ1wcr3+eBWAlsqslQF+HdHT/KiVGyuHNT0zv GYScJESZRRRqrsC7369BKDf74BrsZ6XNb8UYH3r0qDuXBvjJ6U7jhh8JAEMhfWal dALoofcJfdf81tc8Pnc6jJpq46eqSLr4TGJjTejI3A1f24Z1dxnlMrPzeSTOCbQX QGoTw19Ik/GOsTPDmnWvxHFcRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi+ahFV oDjVnK88pcbu67Y/OocwMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGfDX9gv580ih0eqJYuD4m1OcduJIenA6NYe6LQR8n5k9fqZCqOg5R lBcxwiksIYi8QnDIQSXK3tHBX6r40qLLzNbpkGKdbai7eptXmRNkF2aJ1fwSSvEU c/7D3O4EPDfg2HjIu1TV1CBTj1SLhtKNCEnJ8jE3CEfCBeQSV1G4T9/0vGzvaE9m dRYh5h8Xr3KIhnmlyXCWsWHzTFFUr1D/Iml0BXUi4r8EGnFg9p90rTd9x80Ppimt pQpncQs38y/45UHHrSNL7LeIdeKAHMU5D/9jnG2sUTLW5wv58fHLavLePnMDjBdg Zpv5KaO4K+X9VKis8h27rPoeWa33XSqq -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org