$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: aS72IVelJE4OIvDAFaXPExa8gtzoMjBvE0Ix+hyEtbA= Subject key identifier: 68:FF:67:F7:40:B4:D9:9F:1D:BF:AF:18:5D:13:2F:14:F8:2A:36:BD Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 0934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 092E Signing time: Sat 18 May 2024 21:09:02 +0000 Manifest this update: Sat 18 May 2024 21:09:01 +0000 Manifest next update: Sat 25 May 2024 21:09:01 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: mE/J+22FGnXxH6KWy2foTYYClaZuHY0GVIewxKkviNQ=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: May 18 21:09:01 2024 GMT Not After : May 25 21:09:01 2024 GMT Subject: CN=664918ee-3d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:7c:6c:a8:6e:da:5f:18:39:0f:3d:53:95: f2:4e:d0:fb:b4:ca:20:3d:0f:16:39:99:d7:32:67: 52:19:15:b7:be:0f:72:a4:59:81:41:7f:e2:a5:00: 8b:e4:82:bd:0e:c5:53:de:83:e5:a6:c7:49:05:11: 66:1a:75:8d:d6:e8:5b:04:e9:47:66:26:58:70:5d: 04:45:cd:2b:16:c5:17:c6:92:78:af:fb:35:39:65: c7:ef:07:e0:73:1a:23:1f:ec:b8:1b:59:27:0d:e7: a4:33:31:42:cd:23:a3:b8:85:06:8b:fa:28:bf:7a: f6:61:45:6b:db:39:f6:47:88:af:1f:70:84:b5:df: 10:01:4e:f9:00:33:61:b3:fc:d3:da:a6:b8:a4:3d: 91:d3:b6:21:ff:12:b7:7f:bd:40:7b:5a:d0:02:9e: 47:c0:05:df:e0:8d:99:db:27:a3:be:5b:fd:af:15: 4c:b3:0c:cd:97:ba:7e:0f:cf:ec:ba:88:5e:5b:6b: db:ed:d2:f8:2c:49:66:b4:dc:88:20:9f:20:74:50: 65:7c:ad:5c:22:72:61:3d:65:e1:10:17:da:81:ed: 22:48:83:c7:42:22:4c:b4:1b:2b:1f:4b:4e:eb:3c: 11:67:0b:fa:28:fe:18:ac:84:7d:54:20:66:f0:7b: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:67:F7:40:B4:D9:9F:1D:BF:AF:18:5D:13:2F:14:F8:2A:36:BD X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:43:a8:2a:f3:db:9d:20:3d:9d:37:6a:cf:86:3e:75:c2:67: 11:01:57:f8:fa:15:5e:60:e6:db:a6:4c:a3:1e:62:8e:55:cd: a6:50:36:50:26:b3:a8:4e:a4:af:35:94:81:4a:27:9d:ca:c4: fc:81:5c:9b:c7:aa:b5:26:9b:e8:2e:33:eb:cf:0b:b0:3b:04: 9c:74:dc:88:d8:8d:20:99:59:9f:9d:dd:20:05:28:26:9c:1d: 1e:9d:c7:36:f0:58:4a:4d:bf:26:e0:80:3f:82:2f:ac:d1:ba: 04:b4:6f:fe:16:3d:53:8c:56:42:4c:64:3f:b4:c2:06:88:dc: 9e:be:20:8a:ae:76:78:28:73:e9:c3:81:ea:49:7a:01:1b:32: 1f:12:1e:88:1e:de:e3:77:34:a5:98:5f:a4:1e:b5:06:9c:69: c7:13:bb:a8:f7:28:cf:19:ce:f1:3b:1c:53:d9:cb:1a:2b:d6: ae:fb:49:2d:a2:6d:e8:bf:c7:a5:de:91:ba:17:71:de:18:d1: 61:70:c5:c8:67:2a:4d:ef:82:f6:f6:41:f6:4d:f5:7e:cc:1a: 51:b4:8b:75:43:23:c4:54:9c:c7:b2:f6:a9:4a:dd:e4:7d:93: be:5e:e0:f5:8d:c7:dd:17:7f:77:15:fa:4e:66:e7:59:7a:f0: ec:45:11:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjQwNTE4MjEwOTAxWhcNMjQwNTI1MjEwOTAxWjAYMRYwFAYD VQQDEw02NjQ5MThlZS0zZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPV8bKhu2l8YOQ89U5XyTtD7tMogPQ8WOZnXMmdSGRW3vg9ypFmBQX/ipQCL 5IK9DsVT3oPlpsdJBRFmGnWN1uhbBOlHZiZYcF0ERc0rFsUXxpJ4r/s1OWXH7wfg cxojH+y4G1knDeekMzFCzSOjuIUGi/oov3r2YUVr2zn2R4ivH3CEtd8QAU75ADNh s/zT2qa4pD2R07Yh/xK3f71Ae1rQAp5HwAXf4I2Z2yejvlv9rxVMswzNl7p+D8/s uoheW2vb7dL4LElmtNyIIJ8gdFBlfK1cInJhPWXhEBfage0iSIPHQiJMtBsrH0tO 6zwRZwv6KP4YrIR9VCBm8HvfSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj/Z/dA tNmfHb+vGF0TLxT4Kja9MB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlQ6gq89udID2dN2rPhj51wmcRAVf4+hVeYObbpkyjHmKOVc2mUDZQ JrOoTqSvNZSBSiedysT8gVybx6q1JpvoLjPrzwuwOwScdNyI2I0gmVmfnd0gBSgm nB0encc28FhKTb8m4IA/gi+s0boEtG/+Fj1TjFZCTGQ/tMIGiNyeviCKrnZ4KHPp w4HqSXoBGzIfEh6IHt7jdzSlmF+kHrUGnGnHE7uo9yjPGc7xOxxT2csaK9au+0kt om3ov8el3pG6F3HeGNFhcMXIZypN74L29kH2TfV+zBpRtIt1QyPEVJzHsvapSt3k fZO+XuD1jcfdF393FfpOZudZevDsRRHQ -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org