$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: 31bZQOydIU97QTZ0EhqlNKh8qpyM3xZEHKhIauMA+II= Subject key identifier: 47:41:29:34:59:27:AC:C7:9D:A6:67:29:47:18:87:E1:A8:F8:62:71 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 0745 Signing time: Sat 18 May 2024 22:23:06 +0000 Manifest this update: Sat 18 May 2024 22:23:05 +0000 Manifest next update: Sat 25 May 2024 22:23:05 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: Gt0yLMpGYHQk033sAbleNF/uPa8uh/yTWls47o6mJSw=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: GZhH/o/+1VAEGiUVKE5ClIPno/Yl4vhHfBVigjhlW3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: May 18 22:23:05 2024 GMT Not After : May 25 22:23:05 2024 GMT Subject: CN=66492a49-447d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1a:c7:5e:65:c8:a1:ca:4f:c4:08:54:44:ce: d8:a6:8f:76:20:59:a2:88:ec:2a:67:91:4b:0c:cb: ed:a8:6c:ca:85:87:df:a5:01:e0:18:ec:be:c2:33: bd:93:2e:08:d6:34:59:7a:26:a7:a9:a9:d4:2e:42: 31:41:7d:82:56:4d:c8:cf:b8:fa:1b:31:7e:0c:7a: 5e:d9:01:8c:8d:78:13:cb:5e:bb:07:2e:92:a0:f9: df:87:aa:64:82:d9:f2:08:ba:8b:3f:b4:e9:ab:3f: 3b:e3:fa:27:c8:82:c6:4e:a7:64:e3:f5:ed:67:36: 2e:c7:fe:77:93:aa:6c:16:f2:ce:1e:c9:94:cd:c1: 6d:67:ae:3b:45:eb:9c:45:e7:c8:89:0b:6d:08:70: b9:c7:67:a3:25:25:09:08:bf:45:06:99:ed:83:29: bb:bc:c2:2c:bf:69:08:74:25:21:de:37:7a:0f:73: c0:23:79:80:e0:9d:f8:46:1f:77:5d:01:75:96:35: 8f:55:6d:6a:19:75:1c:e2:9f:56:97:c8:ee:ab:0f: 5a:6d:16:08:75:d2:e8:ca:14:fc:f0:a4:59:2e:66: ee:db:90:79:38:7c:ee:72:09:c1:7f:6a:29:43:2c: cf:09:58:fb:77:ad:b4:76:70:df:00:93:40:51:00: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:29:34:59:27:AC:C7:9D:A6:67:29:47:18:87:E1:A8:F8:62:71 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:87:fa:10:eb:2c:7f:1a:9a:f7:bb:83:70:a7:a1:e2:c9:91: 28:e3:72:99:5b:d1:a2:ec:e7:de:fa:d3:be:04:de:0b:68:b0: ce:9f:ae:e4:3f:83:90:58:e8:69:b4:a9:84:28:5f:bc:be:6d: 64:a0:de:a7:bb:4e:07:12:c3:d7:21:c7:8f:c5:c1:94:28:1e: 07:83:65:42:93:f0:a3:89:74:c3:b0:b5:48:09:f5:4c:98:c8: 80:95:f6:70:a6:b2:d5:3c:96:13:68:01:09:ec:a0:83:66:85: 83:4b:52:fa:1e:bc:f1:98:d1:08:d0:a2:b0:d8:17:04:c2:cf: ca:d7:bc:bf:f3:ba:39:2c:84:b5:ef:9d:24:7c:07:6a:4a:9f: 8c:fb:56:46:24:87:ef:d1:b9:cb:43:5e:9b:5b:d5:6f:1f:c7: f2:f5:f2:7a:3d:e7:cb:f0:69:89:ef:3f:9b:2f:79:ff:94:9a: 0f:26:4b:dd:79:6d:3a:a4:ea:10:65:18:7d:b6:7d:b5:0b:41: 38:e3:17:ac:fe:2b:b9:a8:f5:e9:40:8b:f2:d1:79:43:56:62: 5b:18:1b:01:de:77:e5:13:47:36:30:2f:b6:14:39:e5:01:8d: c1:48:4a:f3:56:de:50:cd:50:a2:05:7a:a8:96:bb:41:42:a7: e7:98:5b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjQwNTE4MjIyMzA1WhcNMjQwNTI1MjIyMzA1WjAYMRYwFAYD VQQDEw02NjQ5MmE0OS00NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xrHXmXIocpPxAhURM7Ypo92IFmiiOwqZ5FLDMvtqGzKhYffpQHgGOy+wjO9 ky4I1jRZeianqanULkIxQX2CVk3Iz7j6GzF+DHpe2QGMjXgTy167By6SoPnfh6pk gtnyCLqLP7Tpqz874/onyILGTqdk4/XtZzYux/53k6psFvLOHsmUzcFtZ647Reuc RefIiQttCHC5x2ejJSUJCL9FBpntgym7vMIsv2kIdCUh3jd6D3PAI3mA4J34Rh93 XQF1ljWPVW1qGXUc4p9Wl8juqw9abRYIddLoyhT88KRZLmbu25B5OHzucgnBf2op QyzPCVj7d620dnDfAJNAUQBV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdBKTRZ J6zHnaZnKUcYh+Go+GJxMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgh/oQ6yx/Gpr3u4Nwp6HiyZEo43KZW9Gi7Ofe+tO+BN4LaLDOn67k P4OQWOhptKmEKF+8vm1koN6nu04HEsPXIcePxcGUKB4Hg2VCk/CjiXTDsLVICfVM mMiAlfZwprLVPJYTaAEJ7KCDZoWDS1L6HrzxmNEI0KKw2BcEws/K17y/87o5LIS1 750kfAdqSp+M+1ZGJIfv0bnLQ16bW9VvH8fy9fJ6PefL8GmJ7z+bL3n/lJoPJkvd eW06pOoQZRh9tn21C0E44xes/iu5qPXpQIvy0XlDVmJbGBsB3nflE0c2MC+2FDnl AY3BSErzVt5QzVCiBXqolrtBQqfnmFvR -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org