$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: iXsGibGX6ChRQYV88bvTyZ903mOB8eaHhoSwkeHCENA= Subject key identifier: C6:44:E5:25:8E:38:66:8A:34:4A:08:9B:28:97:51:34:E8:34:58:AC Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: C1 Signing time: Sun 19 May 2024 06:18:42 +0000 Manifest this update: Sun 19 May 2024 06:18:42 +0000 Manifest next update: Sun 26 May 2024 06:18:42 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: rCEGVsk11EVXGcwmU85TGcaxnPS6NdmUdyt3kqGyMQw=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: +bA3oLtddNBLbESFYmKhlFjoL38F7uGh4zuU1dN6BAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: May 19 06:18:42 2024 GMT Not After : May 26 06:18:42 2024 GMT Subject: CN=664999c2-f83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:67:9c:68:b4:9f:76:5c:37:d8:2e:23:41: 9c:c7:2a:dd:09:04:c2:55:ee:c3:78:ba:d4:91:cd: 33:ec:96:14:a6:dd:93:e1:6c:44:7a:aa:08:44:e1: fb:a0:04:2a:fb:ad:24:30:da:dc:19:1a:7b:22:e4: f5:f3:3a:71:bb:b5:88:f8:23:6e:5f:3b:c2:d8:47: 2d:80:15:01:03:4a:9e:00:cc:53:8b:8b:cf:d9:51: 44:c9:69:2f:14:da:a1:0a:49:6d:88:7b:51:7a:ac: 7b:92:ad:17:a8:2f:3d:4d:9e:6f:f6:b2:b4:a3:24: 1f:45:cd:a1:3c:29:63:0d:ad:07:44:ba:00:bb:3d: e9:a7:5d:0f:93:9b:ef:3f:90:27:cf:01:c8:10:e3: df:3d:fd:bc:cb:07:8a:f3:fb:db:c1:72:bd:f4:f8: 3d:27:c2:8e:97:5a:45:e5:fe:5f:26:de:de:f3:35: 96:51:00:02:ae:47:59:18:fc:70:11:98:bd:89:9f: 58:0b:5b:2d:d1:72:11:05:83:d9:2d:0f:87:10:38: 44:7b:c9:bc:79:7f:56:d2:3a:13:31:c0:18:8b:d0: 20:60:2f:b8:1d:c8:c1:c7:c6:a9:23:7c:53:98:97: 4c:85:2f:8e:36:bc:cb:4a:07:59:32:c8:de:f0:9c: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:E5:25:8E:38:66:8A:34:4A:08:9B:28:97:51:34:E8:34:58:AC X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:60:ab:78:47:47:26:ad:ca:2a:56:a9:94:ce:2f:d4:d3:9f: c1:e8:51:41:fb:af:31:b4:57:50:5f:2a:12:77:7c:16:05:a3: 4e:fc:c7:79:36:40:7c:ae:65:ef:4b:80:50:c0:99:6a:89:e9: 09:c2:59:b3:79:c2:41:5d:4a:5b:79:89:77:10:66:10:2c:a6: 99:bb:b1:8f:e6:23:9b:af:4d:e3:ca:e8:6f:b6:c9:2f:71:a5: 47:44:81:51:96:f8:e8:68:ee:a7:0c:b7:b8:90:47:db:da:cc: 0f:f2:f0:52:5b:7d:a0:8c:5f:a3:74:a2:6f:5e:30:ab:94:29: 2f:4c:94:a2:0b:39:fd:bb:54:99:ab:a2:a0:f8:d5:99:d7:51: 4a:78:ba:d0:26:d4:4a:db:1a:95:11:ce:ad:be:e3:d5:b9:2a: 46:ac:e2:81:8b:26:94:9f:15:6b:36:98:8b:d3:79:66:27:0e: b7:a6:20:d6:7a:48:52:b9:92:48:21:74:28:2f:f7:60:1a:d7: a0:de:8a:a0:e6:99:88:48:f5:f9:50:c0:4d:4c:82:91:f2:56: da:1a:ae:58:ad:5a:89:09:77:8b:3c:03:eb:05:c4:19:38:f9: ba:74:16:c3:1e:82:13:ff:5a:af:c5:a5:13:77:a4:02:96:5e: 7f:0f:49:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjQwNTE5MDYxODQyWhcNMjQwNTI2MDYxODQyWjAYMRYwFAYD VQQDEw02NjQ5OTljMi1mODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdNnnGi0n3ZcN9guI0GcxyrdCQTCVe7DeLrUkc0z7JYUpt2T4WxEeqoIROH7 oAQq+60kMNrcGRp7IuT18zpxu7WI+CNuXzvC2EctgBUBA0qeAMxTi4vP2VFEyWkv FNqhCkltiHtReqx7kq0XqC89TZ5v9rK0oyQfRc2hPCljDa0HRLoAuz3pp10Pk5vv P5AnzwHIEOPfPf28yweK8/vbwXK99Pg9J8KOl1pF5f5fJt7e8zWWUQACrkdZGPxw EZi9iZ9YC1st0XIRBYPZLQ+HEDhEe8m8eX9W0joTMcAYi9AgYC+4HcjBx8apI3xT mJdMhS+ONrzLSgdZMsje8Jz5DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZE5SWO OGaKNEoImyiXUTToNFisMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4YKt4R0cmrcoqVqmUzi/U05/B6FFB+68xtFdQXyoSd3wWBaNO/Md5 NkB8rmXvS4BQwJlqiekJwlmzecJBXUpbeYl3EGYQLKaZu7GP5iObr03jyuhvtskv caVHRIFRlvjoaO6nDLe4kEfb2swP8vBSW32gjF+jdKJvXjCrlCkvTJSiCzn9u1SZ q6Kg+NWZ11FKeLrQJtRK2xqVEc6tvuPVuSpGrOKBiyaUnxVrNpiL03lmJw63piDW ekhSuZJIIXQoL/dgGteg3oqg5pmISPX5UMBNTIKR8lbaGq5YrVqJCXeLPAPrBcQZ OPm6dBbDHoIT/1qvxaUTd6QCll5/D0mf -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org