$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: eAQHXK6nz+FZpju/XufPr3NtEdsJODxCOKI4CztUlDI= Subject key identifier: 8E:00:A2:E4:1A:E9:91:B0:7F:C9:65:ED:D9:2F:1B:14:77:21:C4:1C Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 029C Signing time: Sun 19 May 2024 03:36:23 +0000 Manifest this update: Sun 19 May 2024 03:36:23 +0000 Manifest next update: Sun 26 May 2024 03:36:23 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: k2sDFjOTqyxdtOCyqPXCuUD9FMaYr321lw00h5DdJI4=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: uCv95XSbl6UUUCthtxA8ImAYONQ7dGmFmJ6q40v/ErE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: May 19 03:36:23 2024 GMT Not After : May 26 03:36:23 2024 GMT Subject: CN=664973b7-ba85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:fe:76:f4:13:f6:98:bf:82:1a:b5:66:fc: 77:3e:ea:29:a8:6c:c8:5a:ac:d4:c3:aa:ba:45:b0: ea:b5:1e:0b:fe:ba:86:c2:19:af:d0:78:3e:52:85: 8d:ab:6e:73:76:e6:1a:3a:f8:61:6e:79:63:47:68: cf:6e:71:29:ab:c1:cc:df:35:13:94:0a:96:58:f7: 5f:d6:69:8f:23:6b:73:53:e4:14:89:ee:e9:6f:12: 5c:a5:3c:2c:14:6d:24:61:ae:f9:57:76:ab:94:63: 40:ca:5a:27:0e:db:79:f7:31:fe:7c:21:33:6e:15: a5:a5:6f:bd:82:05:8e:a8:9d:3a:a1:41:bc:77:03: d9:69:cf:d3:a7:f6:27:d3:b6:39:ee:df:d0:6b:37: 03:74:bb:73:db:e6:68:30:b5:33:20:96:7b:7f:28: 7d:2e:35:80:44:83:eb:5e:8d:63:8e:75:39:fe:e1: ff:58:f3:e9:c2:4a:15:0f:0e:bf:8f:56:15:9f:1d: c5:e8:7f:d0:48:a5:0b:ce:19:78:68:fc:54:36:b2: 16:84:16:73:45:2b:b9:b2:2c:c3:53:d9:8c:a5:e1: d9:fa:5a:4b:d2:ec:de:9e:91:ca:d3:a0:f4:3c:dc: b5:41:4c:b8:16:26:4f:dd:68:ab:2d:fa:49:30:6a: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:00:A2:E4:1A:E9:91:B0:7F:C9:65:ED:D9:2F:1B:14:77:21:C4:1C X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:79:be:bb:a9:bd:49:93:31:8c:a5:c3:65:4a:06:2c:78:fe: 0a:a0:64:76:38:0c:36:a0:47:3a:b5:ae:26:24:65:e8:bc:17: c7:c0:6e:3e:d8:88:7a:c0:55:57:aa:da:73:a0:94:71:65:50: 3c:9d:da:e0:27:8a:e6:c0:a5:18:6f:65:45:00:13:7b:73:57: 0d:87:8b:77:b8:d5:4a:c1:ac:5e:fc:06:22:7d:d2:cb:bc:4d: be:9e:a1:a5:fa:b7:f0:20:80:f1:7a:83:2a:9d:47:97:65:ff: 48:1c:2f:d8:ed:e2:dc:de:5c:68:7a:30:4f:87:fb:9a:66:0e: 8a:4e:70:d9:f4:49:21:2a:94:bc:35:39:c3:d4:d8:7a:32:d1: ef:30:2a:53:fb:5a:05:10:af:0e:3a:87:09:47:01:1b:85:6e: 89:fb:7d:65:2c:e1:35:e6:96:89:ac:36:d0:87:3e:19:a0:40: 2a:d0:b6:df:82:f2:e8:d9:a3:b3:53:bf:33:14:ce:ac:6c:3e: 9d:02:8c:c4:80:c0:da:26:9a:e4:f5:30:d1:73:b1:e7:62:9c: a6:de:2c:de:e1:a1:5a:d5:c7:6d:d1:ab:53:b5:a4:c4:5a:b7: c6:d4:66:81:56:8f:07:d2:5b:f2:d6:a5:51:5f:1b:97:15:0b: 48:97:1d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjQwNTE5MDMzNjIzWhcNMjQwNTI2MDMzNjIzWjAYMRYwFAYD VQQDEw02NjQ5NzNiNy1iYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PD+dvQT9pi/ghq1Zvx3PuopqGzIWqzUw6q6RbDqtR4L/rqGwhmv0Hg+UoWN q25zduYaOvhhbnljR2jPbnEpq8HM3zUTlAqWWPdf1mmPI2tzU+QUie7pbxJcpTws FG0kYa75V3arlGNAylonDtt59zH+fCEzbhWlpW+9ggWOqJ06oUG8dwPZac/Tp/Yn 07Y57t/QazcDdLtz2+ZoMLUzIJZ7fyh9LjWARIPrXo1jjnU5/uH/WPPpwkoVDw6/ j1YVnx3F6H/QSKULzhl4aPxUNrIWhBZzRSu5sizDU9mMpeHZ+lpL0uzenpHK06D0 PNy1QUy4FiZP3WirLfpJMGr5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4AouQa 6ZGwf8ll7dkvGxR3IcQcMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBseb67qb1JkzGMpcNlSgYseP4KoGR2OAw2oEc6ta4mJGXovBfHwG4+ 2Ih6wFVXqtpzoJRxZVA8ndrgJ4rmwKUYb2VFABN7c1cNh4t3uNVKwaxe/AYifdLL vE2+nqGl+rfwIIDxeoMqnUeXZf9IHC/Y7eLc3lxoejBPh/uaZg6KTnDZ9EkhKpS8 NTnD1Nh6MtHvMCpT+1oFEK8OOocJRwEbhW6J+31lLOE15paJrDbQhz4ZoEAq0Lbf gvLo2aOzU78zFM6sbD6dAozEgMDaJprk9TDRc7HnYpym3ize4aFa1cdt0atTtaTE WrfG1GaBVo8H0lvy1qVRXxuXFQtIlx28 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org