$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft File: 8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json) Hash identifier: KkrTt9vBCru4hqEI4KDlcborRqI27Rss3ZfNvwz4jXo= Subject key identifier: 9E:FF:6B:3F:41:E2:90:D6:1B:60:12:9E:E6:1F:18:DC:AA:89:68:7D Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 Certificate issuer: /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft Manifest number: 0688 Signing time: Sat 01 Jun 2024 00:14:21 +0000 Manifest this update: Sat 01 Jun 2024 00:14:20 +0000 Manifest next update: Sat 08 Jun 2024 00:14:20 +0000 Files and hashes: 1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: UmynyInjqe/pK+DJFD6DrHu8rWpLH962NKVvjjdOD/4=) 2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: BUCMAVGIMlnR8k8i7KszkAOXuwUyfuND14A8FxskuTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Validity Not Before: Jun 1 00:14:20 2024 GMT Not After : Jun 8 00:14:20 2024 GMT Subject: CN=665a67dc-82e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:09:62:4f:7b:34:a9:b3:6d:cf:ee:38:d3: 6c:0e:3d:58:a9:fd:b5:24:43:0b:c0:b5:2c:4d:f9: 54:88:2c:fe:05:7c:df:ab:7a:81:ec:71:2b:c5:52: 74:8b:8c:6b:a9:58:de:d2:82:48:8f:7e:d1:7a:24: e6:df:49:21:74:5e:01:6b:57:ef:28:92:b9:c6:f7: c9:83:9a:1c:6b:57:5a:bd:98:f8:da:1e:eb:c7:a8: 75:d2:a3:26:7f:49:27:6d:05:a5:a8:16:38:5c:6d: 3e:16:4d:82:18:56:54:a1:7a:79:6e:ec:58:94:44: 19:4f:13:9e:5e:e2:af:ad:f2:03:0c:6b:96:b1:dd: c7:e4:af:af:2e:1d:e7:25:be:87:09:3a:b0:c3:54: 76:a1:fd:3b:3b:e5:51:d0:fe:97:7e:d8:72:b5:e7: c3:d2:09:22:c8:9f:14:ab:10:1d:ec:f7:49:68:a9: f2:79:60:97:8e:36:89:86:52:6a:da:3e:64:d6:fc: 00:9e:23:2f:fb:e4:bd:bd:29:b1:5e:89:2c:ed:23: 1d:f6:48:6d:a7:24:e9:74:e0:2e:2a:42:e2:f5:5d: 4a:26:d3:d7:77:20:0b:ec:c3:e2:52:a0:3f:c6:b6: 17:d8:0b:43:13:3e:2d:72:34:f7:e6:05:fb:07:19: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:6B:3F:41:E2:90:D6:1B:60:12:9E:E6:1F:18:DC:AA:89:68:7D X509v3 Authority Key Identifier: keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ca:70:c3:c8:bd:bd:7a:0d:02:c6:07:28:1f:2b:9f:f2:b2: 48:67:71:43:b0:30:14:80:b4:11:a7:73:6e:fb:38:2e:85:7f: 5e:e7:31:66:75:76:b1:76:98:f3:ce:ae:d8:8c:54:c1:f5:70: 05:46:48:82:a1:0d:9b:f7:b6:74:1c:fd:87:2f:d1:67:51:b5: 5c:73:1b:60:f2:15:86:99:48:9c:40:ac:35:fa:3e:08:13:cb: ae:a7:84:69:f8:43:bf:5c:cc:4c:94:f2:a8:9c:8f:12:0e:ff: af:e8:08:66:5b:65:97:03:97:01:1a:a3:35:e5:76:ba:ce:a2: d4:28:c1:b4:11:c0:68:a8:04:cb:c5:5d:d3:e2:f2:53:53:b2: 94:db:ad:46:d1:5f:7b:c0:31:c9:c3:12:e6:53:83:47:80:cc: 7d:9b:a6:22:dc:d5:0d:8c:23:56:28:59:fb:7b:09:03:7e:45: 7d:03:0f:51:cd:df:c4:00:a2:0e:6e:88:af:18:66:5c:fd:f2: d4:6a:bb:04:64:d3:f0:1e:af:b9:2b:15:8d:a0:95:f6:9a:a7: 63:4c:cb:9b:1f:ea:fe:ca:42:dd:79:c8:9b:34:a7:7f:09:9c: 95:e3:f6:12:b8:4f:28:0c:90:61:48:53:4e:d7:27:3d:e2:db: b1:e5:30:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND NEU4Qzk2MDAwHhcNMjQwNjAxMDAxNDIwWhcNMjQwNjA4MDAxNDIwWjAYMRYwFAYD VQQDEw02NjVhNjdkYy04MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqwJYk97NKmzbc/uONNsDj1Yqf21JEMLwLUsTflUiCz+BXzfq3qB7HErxVJ0 i4xrqVje0oJIj37ReiTm30khdF4Ba1fvKJK5xvfJg5oca1davZj42h7rx6h10qMm f0knbQWlqBY4XG0+Fk2CGFZUoXp5buxYlEQZTxOeXuKvrfIDDGuWsd3H5K+vLh3n Jb6HCTqww1R2of07O+VR0P6XfthytefD0gkiyJ8UqxAd7PdJaKnyeWCXjjaJhlJq 2j5k1vwAniMv++S9vSmxXoks7SMd9khtpyTpdOAuKkLi9V1KJtPXdyAL7MPiUqA/ xrYX2AtDEz4tcjT35gX7BxktYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7/az9B 4pDWG2ASnuYfGNyqiWh9MB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdynDDyL29eg0CxgcoHyuf8rJIZ3FDsDAUgLQRp3Nu+zguhX9e5zFm dXaxdpjzzq7YjFTB9XAFRkiCoQ2b97Z0HP2HL9FnUbVccxtg8hWGmUicQKw1+j4I E8uup4Rp+EO/XMxMlPKonI8SDv+v6AhmW2WXA5cBGqM15Xa6zqLUKMG0EcBoqATL xV3T4vJTU7KU261G0V97wDHJwxLmU4NHgMx9m6Yi3NUNjCNWKFn7ewkDfkV9Aw9R zd/EAKIOboivGGZc/fLUarsEZNPwHq+5KxWNoJX2mqdjTMubH+r+ykLdecibNKd/ CZyV4/YSuE8oDJBhSFNO1yc94tux5TBD -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org