$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: inRhSvH0Lv+hEwNJHZUUmYlzishpU8Kt25NpmUhTqQ4= Subject key identifier: 4E:6F:E9:80:2E:49:2C:35:D4:26:B1:D5:74:84:0B:20:5D:3C:2A:45 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0C6D Signing time: Sat 18 May 2024 18:56:00 +0000 Manifest this update: Sat 18 May 2024 18:56:00 +0000 Manifest next update: Sat 25 May 2024 18:56:00 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: JhDB8yFBxOUc+387G18tEb0YajFPq7djY0OL/XQAxmc=) 2: 11815E36135311EE94A8A114C4F9AE02.roa (hash: DQ13r92QYX16Mb/U6hPZ8guDdpni9HaQRtj9hjL00w4=) 3: 204459886A4211EDB5C5EC63C4F9AE02.roa (hash: Sq8uiyerrkKYOGJIifBc8UcljCMgS+tMTePx7O1v9zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: May 18 18:56:00 2024 GMT Not After : May 25 18:56:00 2024 GMT Subject: CN=6648f9c0-b474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:9c:3d:45:c3:cf:6f:58:84:c0:d7:5f:7b: f9:02:88:fd:d6:5a:fb:01:17:6f:da:b7:fd:64:ac: ff:1f:79:25:46:37:75:25:15:cf:f6:f8:56:ab:ef: 5b:76:e2:ad:e9:a7:37:9a:d0:35:9c:bb:70:8a:fc: 4f:44:30:71:5b:b8:36:0d:04:ef:00:0e:17:0a:4f: 53:9b:cd:9d:47:6f:be:ec:a9:09:49:07:b3:4e:1f: 10:63:b9:b7:33:a0:46:15:d7:61:71:52:01:f5:ba: 59:b4:40:80:37:51:61:5a:50:1d:54:96:02:7a:44: b0:4a:a9:0b:c8:62:02:65:1a:dc:93:55:43:99:93: 12:b6:45:ce:87:4b:a8:86:69:b6:36:82:09:31:be: da:95:b5:77:54:8d:30:99:2b:26:70:da:dd:1e:1e: e5:0a:ab:8d:f1:a3:81:4d:cb:68:da:09:a5:c8:a8: 34:e4:f2:4b:2f:30:a3:7d:e3:67:7c:d7:1c:bd:70: d4:98:51:ef:93:a0:c9:25:2e:36:7b:e2:a2:76:ae: d6:c8:01:f3:f8:21:55:2e:4a:9d:4a:a9:47:26:5f: 3b:c0:1d:1e:59:8f:65:20:ba:0d:f7:12:1c:1d:17: a4:26:46:5f:c9:c4:c5:78:05:44:10:cd:26:21:e0: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:E9:80:2E:49:2C:35:D4:26:B1:D5:74:84:0B:20:5D:3C:2A:45 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:82:5f:a9:1b:c6:83:02:ba:72:e7:bf:03:02:e8:ef:92:e4: d8:2e:67:36:1c:e8:75:9b:b4:21:fc:52:89:40:2e:0c:c0:b8: 7e:12:a4:80:87:f4:e3:23:cc:c2:d4:8b:81:0b:44:88:c0:8d: 80:e7:4a:06:17:f6:b0:d7:2f:6a:f9:81:6b:24:3e:bc:60:e5: c7:5d:5d:7d:9d:0a:d5:66:1f:ea:3a:2c:ce:7e:33:5d:57:1f: 92:4c:f2:a4:b2:0c:26:18:92:97:fd:c1:0d:8d:1a:1a:86:d8: bb:00:a9:98:8e:0c:a2:fc:ec:11:1e:39:de:a5:ab:67:9a:03: 0d:1c:9d:44:00:2f:3a:9f:1e:82:3a:a4:b7:30:da:58:ea:57: e5:17:15:01:a5:6b:f8:52:d3:05:f7:8d:72:df:8c:99:9e:b8: 98:e8:2c:a1:60:ca:3d:79:98:38:87:4b:2c:18:7d:3d:e4:59: 73:51:cb:d1:85:aa:c2:34:68:c6:a5:d4:02:e8:bd:31:42:11: 81:be:db:a8:dd:16:bf:1a:2c:e2:e7:d5:f1:ea:d6:5f:9c:87: 9e:1e:e1:f6:87:99:9f:a6:72:77:34:55:e6:82:b6:90:89:bd: e1:fe:d4:30:fd:0c:33:34:50:f0:8e:b7:64:5e:d9:d0:3c:d4: 13:a3:ff:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjQwNTE4MTg1NjAwWhcNMjQwNTI1MTg1NjAwWjAYMRYwFAYD VQQDEw02NjQ4ZjljMC1iNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynecPUXDz29YhMDXX3v5Aoj91lr7ARdv2rf9ZKz/H3klRjd1JRXP9vhWq+9b duKt6ac3mtA1nLtwivxPRDBxW7g2DQTvAA4XCk9Tm82dR2++7KkJSQezTh8QY7m3 M6BGFddhcVIB9bpZtECAN1FhWlAdVJYCekSwSqkLyGICZRrck1VDmZMStkXOh0uo hmm2NoIJMb7albV3VI0wmSsmcNrdHh7lCquN8aOBTcto2gmlyKg05PJLLzCjfeNn fNccvXDUmFHvk6DJJS42e+Kidq7WyAHz+CFVLkqdSqlHJl87wB0eWY9lILoN9xIc HRekJkZfycTFeAVEEM0mIeDyUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5v6YAu SSw11Cax1XSECyBdPCpFMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJgl+pG8aDArpy578DAujvkuTYLmc2HOh1m7Qh/FKJQC4MwLh+EqSA h/TjI8zC1IuBC0SIwI2A50oGF/aw1y9q+YFrJD68YOXHXV19nQrVZh/qOizOfjNd Vx+STPKksgwmGJKX/cENjRoahti7AKmYjgyi/OwRHjnepatnmgMNHJ1EAC86nx6C OqS3MNpY6lflFxUBpWv4UtMF941y34yZnriY6CyhYMo9eZg4h0ssGH095FlzUcvR harCNGjGpdQC6L0xQhGBvtuo3Ra/Gizi59Xx6tZfnIeeHuH2h5mfpnJ3NFXmgraQ ib3h/tQw/QwzNFDwjrdkXtnQPNQTo/+v -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org