$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: ZY1DqNCDLxlBYhlxCnWo2UBtQJ1MD7EUApgytfeIFH4= Subject key identifier: 47:A3:09:9B:05:CD:20:71:2B:B1:6C:4E:DD:17:53:19:12:63:E7:90 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 03D4 Signing time: Sun 19 May 2024 02:21:54 +0000 Manifest this update: Sun 19 May 2024 02:21:54 +0000 Manifest next update: Sun 26 May 2024 02:21:54 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: maMLvRSo+wEiIDtFPe0Ez4f8Ss4U7F0bp8vCGprZ2XQ=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: TA6oVKBhWmXS3XY3fsLecLgD4aEpmmt4amZ/PWy0QKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: May 19 02:21:54 2024 GMT Not After : May 26 02:21:54 2024 GMT Subject: CN=66496242-0217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:92:a8:bf:46:22:70:9c:e4:cc:71:34:ca: 96:09:49:36:75:9b:6f:8b:5e:bd:4e:ee:cd:c9:21: c6:de:37:d9:91:bc:34:c6:06:a8:0d:ae:20:1b:3c: 96:85:c3:0c:a7:4b:43:a8:88:2b:cf:ba:7b:c9:2e: 57:17:02:ba:f4:51:3f:e3:bb:d9:d7:1f:9b:91:a0: dc:5d:30:5d:e8:75:88:36:ec:de:49:7f:7a:7a:f8: ca:02:cc:bb:02:49:7f:ee:2a:70:69:e9:ea:76:e3: 57:9f:22:1c:85:24:a1:d1:b5:42:f0:98:9d:57:36: 4f:74:96:a2:77:d3:b5:11:24:a5:a5:5c:5a:f6:b1: 13:46:f5:2c:52:9b:c1:76:e4:ff:35:20:b5:b8:e9: 4c:df:58:34:89:aa:09:a0:81:fb:6b:18:f1:70:67: e3:29:b0:4b:b3:c6:75:48:67:0b:a1:f1:60:f0:79: 4a:fb:19:cc:eb:43:7c:03:37:0f:8f:b6:35:76:06: 8e:57:a5:2b:a7:e5:66:47:31:c0:5a:1d:b1:a0:6c: 8d:69:f8:91:9d:a4:da:73:68:ca:b7:c2:91:06:73: b0:04:46:3a:71:a7:c3:4d:7f:91:e0:83:f2:cf:67: 1b:5e:7e:54:23:c0:f5:62:eb:95:8c:e6:16:df:65: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:09:9B:05:CD:20:71:2B:B1:6C:4E:DD:17:53:19:12:63:E7:90 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:4c:3e:9b:a1:87:cb:00:a1:e3:0a:8b:c4:b9:74:b5:7a:06: 50:ed:8c:ac:b4:ca:4f:55:a2:c3:e7:27:de:77:50:cc:ce:b6: 68:63:65:09:2c:a6:43:39:d3:3d:ba:5e:32:25:00:13:e6:75: 4c:91:0b:2b:41:7d:19:e8:87:04:62:2d:88:b1:fb:fe:e8:b9: 6a:77:f6:23:fd:16:81:cd:46:8f:27:3a:09:83:cf:65:f1:53: 1a:b8:70:98:51:14:9b:a5:9a:21:5e:7c:0a:ad:79:08:3e:05: 50:11:d2:63:9c:51:ed:48:d3:b3:eb:ba:46:78:b4:49:d6:0d: 99:4c:74:b3:54:ff:a0:c7:35:e8:9a:73:ac:34:0a:ff:59:59: 5e:f5:2c:01:1d:b5:cc:74:a8:3d:d8:7c:32:94:bb:9c:e2:07: e0:ca:e3:d3:e5:fb:33:fb:62:fa:78:70:a8:22:df:d9:66:ad: 9f:43:eb:cc:0d:84:93:1e:2c:a6:8c:35:e9:44:31:0b:d2:56: 8e:64:f1:32:c6:a6:86:5d:c1:8c:25:5b:76:cb:53:38:0f:a7: e9:de:2c:53:91:bc:92:c9:70:9c:6b:b8:80:d5:7a:53:4e:a1: 11:75:59:58:41:ff:81:1c:90:5d:17:92:93:ab:02:27:b7:1d: 4f:4c:34:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjQwNTE5MDIyMTU0WhcNMjQwNTI2MDIyMTU0WjAYMRYwFAYD VQQDEw02NjQ5NjI0Mi0wMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/+SqL9GInCc5MxxNMqWCUk2dZtvi169Tu7NySHG3jfZkbw0xgaoDa4gGzyW hcMMp0tDqIgrz7p7yS5XFwK69FE/47vZ1x+bkaDcXTBd6HWINuzeSX96evjKAsy7 Akl/7ipwaenqduNXnyIchSSh0bVC8JidVzZPdJaid9O1ESSlpVxa9rETRvUsUpvB duT/NSC1uOlM31g0iaoJoIH7axjxcGfjKbBLs8Z1SGcLofFg8HlK+xnM60N8AzcP j7Y1dgaOV6Urp+VmRzHAWh2xoGyNafiRnaTac2jKt8KRBnOwBEY6cafDTX+R4IPy z2cbXn5UI8D1YuuVjOYW32XsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEejCZsF zSBxK7FsTt0XUxkSY+eQMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFTD6boYfLAKHjCovEuXS1egZQ7YystMpPVaLD5yfed1DMzrZoY2UJ LKZDOdM9ul4yJQAT5nVMkQsrQX0Z6IcEYi2Isfv+6Llqd/Yj/RaBzUaPJzoJg89l 8VMauHCYURSbpZohXnwKrXkIPgVQEdJjnFHtSNOz67pGeLRJ1g2ZTHSzVP+gxzXo mnOsNAr/WVle9SwBHbXMdKg92HwylLuc4gfgyuPT5fsz+2L6eHCoIt/ZZq2fQ+vM DYSTHiymjDXpRDEL0laOZPEyxqaGXcGMJVt2y1M4D6fp3ixTkbySyXCca7iA1XpT TqERdVlYQf+BHJBdF5KTqwIntx1PTDQ+ -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org