$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: NUrXbOds0EUvCLYeBlk1HmegB7S0TmR/AsczQQDTdyo= Subject key identifier: 2A:3A:40:1C:D7:85:A3:E5:F0:1E:A2:C9:2B:32:2D:F3:7E:9E:C2:9F Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 8B Signing time: Sun 19 May 2024 07:06:06 +0000 Manifest this update: Sun 19 May 2024 07:06:06 +0000 Manifest next update: Sun 26 May 2024 07:06:06 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: SDsRpK6QWWQSI0LLD3vrNZyq+W82yXFQk/t9rRIBXQE=) 2: C1B91228477711EEB1D76A7FC4F9AE02.roa (hash: xf35Rt9HKRX/xo925LqoqkXmAJHqGVXvyNm/ND5XLGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: May 19 07:06:06 2024 GMT Not After : May 26 07:06:06 2024 GMT Subject: CN=6649a4de-729c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:67:c0:2b:ae:fe:0a:c6:a7:6a:63:f7:dd: 33:72:7e:a9:26:4e:84:a0:6f:e1:51:b5:9e:25:6c: 60:c4:6d:17:3b:f8:e3:5e:6d:63:32:79:da:cf:3a: 90:08:6c:f5:69:a4:fd:a2:c2:a3:cd:e8:82:89:34: de:f7:87:7e:6a:6c:29:56:6a:48:9c:3e:54:82:df: 1c:ae:45:5c:a3:b2:97:c0:4d:16:9b:00:2a:ae:83: 43:88:9e:e7:ab:e5:7f:8d:f0:43:8e:42:dd:92:33: 1b:88:35:36:f4:8e:68:7b:22:e0:89:b9:ea:91:9c: 2f:bf:7a:0e:b5:07:a7:47:10:ac:45:14:10:bb:89: 17:6a:4c:b7:be:35:09:b9:41:2f:57:76:91:f3:ff: 6b:c6:5d:60:28:48:ec:f2:4c:52:40:58:49:8e:be: 74:03:4d:a9:70:0f:11:d0:c0:0e:d5:d8:57:6d:14: 8a:99:9e:5c:ab:98:67:ac:61:f3:10:b0:05:b0:e2: 8e:35:d4:87:d3:fb:95:c7:2f:0d:86:54:7d:8b:2b: b4:0b:59:7a:53:cb:f2:a1:c0:fa:ef:9c:9e:15:8c: c3:e1:19:a8:9b:e1:6a:e3:19:50:63:2c:2d:65:90: f6:23:b5:54:33:cd:98:dd:98:0d:ae:12:18:ff:bb: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:40:1C:D7:85:A3:E5:F0:1E:A2:C9:2B:32:2D:F3:7E:9E:C2:9F X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:18:57:4e:b3:52:5f:15:c5:0c:31:83:b3:36:b4:43:14:81: d3:8f:6e:3d:cf:dc:88:99:bb:21:4d:d6:90:6f:c0:08:d0:f6: 0b:66:41:0c:44:7c:6d:4c:4b:9f:55:21:f3:f5:72:2d:55:35: 3e:8b:42:27:d9:47:b9:4a:1f:74:d4:e8:95:2c:6b:eb:8d:16: 29:47:65:13:a3:21:2f:fe:47:d4:50:36:28:b2:0a:95:93:db: 9a:37:cb:37:50:ca:b6:62:c7:96:31:cb:00:ed:06:d6:bf:4b: 2b:fd:b1:4d:6b:7d:a8:23:e1:bb:e3:9f:36:83:8d:8e:1c:f1: ce:8a:0a:08:6b:ac:81:01:ca:89:f1:79:d2:91:5a:21:fe:ae: 25:3b:14:99:a1:08:32:91:89:1e:5b:67:71:c1:f7:dd:30:53: 5e:63:2f:6a:e3:1c:82:bd:53:45:aa:2b:fb:09:a7:11:4c:3d: 92:9a:cd:d2:b9:4a:f3:d2:55:d5:46:9b:46:1d:3a:fa:d1:ab: 64:36:d6:c0:bc:da:05:5b:1b:9f:f5:aa:80:a4:e8:85:d5:de: 67:eb:91:d0:c9:4b:2f:f3:a5:ed:ca:18:39:4f:b6:ab:bd:35: 2f:21:6b:a1:1d:5e:d5:eb:ee:f7:00:9e:f8:2b:c1:2d:93:54: 78:02:50:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjQwNTE5MDcwNjA2WhcNMjQwNTI2MDcwNjA2WjAYMRYwFAYD VQQDEw02NjQ5YTRkZS03MjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT9nwCuu/grGp2pj990zcn6pJk6EoG/hUbWeJWxgxG0XO/jjXm1jMnnazzqQ CGz1aaT9osKjzeiCiTTe94d+amwpVmpInD5Ugt8crkVco7KXwE0WmwAqroNDiJ7n q+V/jfBDjkLdkjMbiDU29I5oeyLgibnqkZwvv3oOtQenRxCsRRQQu4kXaky3vjUJ uUEvV3aR8/9rxl1gKEjs8kxSQFhJjr50A02pcA8R0MAO1dhXbRSKmZ5cq5hnrGHz ELAFsOKONdSH0/uVxy8NhlR9iyu0C1l6U8vyocD675yeFYzD4Rmom+Fq4xlQYywt ZZD2I7VUM82Y3ZgNrhIY/7uNzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo6QBzX haPl8B6iySsyLfN+nsKfMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9GFdOs1JfFcUMMYOzNrRDFIHTj249z9yImbshTdaQb8AI0PYLZkEM RHxtTEufVSHz9XItVTU+i0In2Ue5Sh901OiVLGvrjRYpR2UToyEv/kfUUDYosgqV k9uaN8s3UMq2YseWMcsA7QbWv0sr/bFNa32oI+G74582g42OHPHOigoIa6yBAcqJ 8XnSkVoh/q4lOxSZoQgykYkeW2dxwffdMFNeYy9q4xyCvVNFqiv7CacRTD2Sms3S uUrz0lXVRptGHTr60atkNtbAvNoFWxuf9aqApOiF1d5n65HQyUsv86Xtyhg5T7ar vTUvIWuhHV7V6+73AJ74K8Etk1R4AlDK -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org