$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: 8KMYKUp5VMeEfs7WaGlRF3tw6i8Ri1ozwtuNP6wBn3g= Subject key identifier: 9F:60:1E:E9:BF:CD:F8:81:E6:5A:BB:18:EE:FF:B0:19:79:A2:09:16 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 0471 Signing time: Sun 19 May 2024 01:43:44 +0000 Manifest this update: Sun 19 May 2024 01:43:43 +0000 Manifest next update: Sun 26 May 2024 01:43:43 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: sTS3e4s/j916X7q66+2LoAzogjk//teoqCZCJSOEfGw=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: DR/aMkDvp2qeehavqFOy98siRZaHxC68YUUog5YWi3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: May 19 01:43:43 2024 GMT Not After : May 26 01:43:43 2024 GMT Subject: CN=66495950-f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:d9:55:f2:7c:f0:65:ef:46:ff:99:ec:e3: 5e:1d:c4:83:68:0c:9c:67:6e:56:4c:7a:99:55:41: 43:8d:43:e8:a6:4a:9f:31:aa:76:e5:2b:27:6e:b9: e8:a4:95:4c:1e:50:5d:1c:10:b2:44:b8:78:f3:be: b8:1d:80:61:d2:90:f4:ae:b3:8c:58:bf:1a:b8:32: 58:b8:89:46:af:01:69:07:7c:41:c2:e3:5b:84:95: bb:76:59:3e:33:b9:5d:2e:aa:92:ce:1d:4b:77:f0: 0a:68:68:b3:95:d8:1c:81:16:3d:fa:9d:b9:41:0c: a6:02:6d:02:dc:41:fd:44:be:d7:2b:9b:35:45:73: 67:12:4c:1c:fa:12:d3:f6:1f:45:7b:c4:27:b1:4e: 39:a5:44:c7:81:a8:74:ac:72:63:f9:3f:16:06:6a: 23:fd:a2:2a:fe:ea:de:6b:0c:58:b5:f0:e8:ce:32: 77:4e:87:3d:79:45:54:ce:46:48:f0:ce:22:2f:60: 23:da:b1:6a:cd:74:33:5f:50:1a:53:60:e3:9b:cb: 1e:3b:48:75:ca:ce:65:72:cb:d0:cc:8b:5a:cb:59: 9b:da:52:32:16:e3:ee:7a:5b:69:f6:4a:84:8e:1d: 7b:d5:8a:6b:a3:68:e2:04:7a:56:1e:2e:84:d8:19: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:60:1E:E9:BF:CD:F8:81:E6:5A:BB:18:EE:FF:B0:19:79:A2:09:16 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:85:d4:f8:2c:dd:5b:7d:8f:0f:87:db:bb:fb:e9:45:42: 43:6e:80:3c:ae:65:1e:a0:fb:a4:d7:a2:fe:5f:38:13:d9:ea: c3:14:d3:c0:9d:e6:bf:bf:32:bf:54:76:ef:b0:3f:4e:27:df: b0:9b:a1:58:29:5b:80:88:4e:5c:3f:74:a8:7a:03:6a:52:39: c9:95:c6:6f:0d:8a:e0:be:be:6c:15:a6:70:2a:d5:a2:1a:bd: 12:3e:d9:67:d5:8a:db:9e:f2:af:8d:95:ee:d6:b6:d0:c6:78: a3:76:30:6e:71:37:c7:f5:6c:56:90:b8:f8:7b:0a:3e:51:0b: 4d:d9:e1:fe:94:34:29:fc:59:a2:02:27:1e:d6:47:8a:77:bd: 3a:81:63:9e:70:b1:47:e4:b4:fc:a6:fb:79:ef:19:70:34:73: 72:1e:a1:da:7a:6e:15:cc:4f:45:ac:87:27:83:d3:3e:97:c0: dd:50:db:6b:48:d9:cf:42:28:60:63:7d:03:67:66:87:04:02: e6:2c:ca:a0:0b:65:36:97:1b:32:e8:2c:61:65:64:ce:d1:06: 84:17:75:67:7c:f0:9c:41:48:54:5a:5a:a8:c3:11:63:2f:bf: 9f:f4:8c:3e:7a:96:c9:0d:ad:ff:c1:61:35:60:c1:8c:9d:c3: 9f:27:c7:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjQwNTE5MDE0MzQzWhcNMjQwNTI2MDE0MzQzWjAYMRYwFAYD VQQDEw02NjQ5NTk1MC1mOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08XZVfJ88GXvRv+Z7ONeHcSDaAycZ25WTHqZVUFDjUPopkqfMap25Ssnbrno pJVMHlBdHBCyRLh48764HYBh0pD0rrOMWL8auDJYuIlGrwFpB3xBwuNbhJW7dlk+ M7ldLqqSzh1Ld/AKaGizldgcgRY9+p25QQymAm0C3EH9RL7XK5s1RXNnEkwc+hLT 9h9Fe8QnsU45pUTHgah0rHJj+T8WBmoj/aIq/ureawxYtfDozjJ3Toc9eUVUzkZI 8M4iL2Aj2rFqzXQzX1AaU2Djm8seO0h1ys5lcsvQzItay1mb2lIyFuPueltp9kqE jh171Ypro2jiBHpWHi6E2BnJEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9gHum/ zfiB5lq7GO7/sBl5ogkWMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj84XU+CzdW32PD4fbu/vpRUJDboA8rmUeoPuk16L+XzgT2erDFNPA nea/vzK/VHbvsD9OJ9+wm6FYKVuAiE5cP3SoegNqUjnJlcZvDYrgvr5sFaZwKtWi Gr0SPtln1YrbnvKvjZXu1rbQxnijdjBucTfH9WxWkLj4ewo+UQtN2eH+lDQp/Fmi Aice1keKd706gWOecLFH5LT8pvt57xlwNHNyHqHaem4VzE9FrIcng9M+l8DdUNtr SNnPQihgY30DZ2aHBALmLMqgC2U2lxsy6CxhZWTO0QaEF3VnfPCcQUhUWlqowxFj L7+f9Iw+epbJDa3/wWE1YMGMncOfJ8cC -----END CERTIFICATE-----Generated at Sun May 19 02:59:14 2024 by rpki-client on console-ams.rpki-client.org