$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: zURMmx3j17eFShjWcSI/2FC1p1apA/TT6eOnKKGes+I= Subject key identifier: 8D:AE:C0:07:81:5D:F6:3F:50:1F:E9:C0:ED:4F:72:3B:54:89:EA:1D Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 73 Signing time: Fri 17 May 2024 07:31:03 +0000 Manifest this update: Fri 17 May 2024 07:31:03 +0000 Manifest next update: Fri 24 May 2024 07:31:03 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: oV4AP+c7L+dQeaBnsECz9Ce03CqvqSeCiPutiRp18qk=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: h5Bp1uJblw7ehm4bY6GEJ6OxZ+sCMkLfY59/N+x9Zzw=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: loBajjwhLShKw7W9wUX6CtuPW9CotxEu9Etg3BIZJ5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: May 17 07:31:03 2024 GMT Not After : May 24 07:31:03 2024 GMT Subject: CN=664707b7-945d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:fb:91:c4:91:86:f5:71:bc:55:99:96:6d: c9:fe:21:af:6a:42:32:ee:72:f4:5a:38:c3:9c:cb: f9:3b:ed:d0:45:5a:e9:b1:8b:ad:b4:27:3f:d9:9b: e0:ae:af:e0:b7:ae:35:5b:62:ed:fd:ec:51:25:b6: 82:9a:4b:48:22:ee:59:45:8d:39:2c:22:da:cf:82: ef:3f:1f:6b:57:74:4a:b1:d9:af:60:d8:ba:8f:0c: aa:77:cd:3a:f9:2c:d3:92:92:fb:a6:35:b4:f8:bb: ae:be:c1:6b:e5:4c:cf:de:39:e9:bc:6e:f8:d5:94: af:d6:fd:8f:28:fd:10:c0:b6:42:4d:e3:af:82:a6: f5:c9:d3:94:76:6a:0d:1d:3a:fd:19:37:f1:b1:c2: 18:f5:8f:9e:8d:5f:ef:b1:c9:ef:5e:49:b9:ba:1c: 57:51:3d:d1:48:f8:a5:46:22:f9:1e:27:c0:d4:1b: 6b:94:3d:33:5f:98:ed:24:61:aa:c1:36:91:20:8e: 00:4d:f9:6b:4d:aa:6d:80:c1:09:3f:08:0e:03:03: 5b:9f:13:71:48:6f:df:28:22:12:92:f4:0a:1d:ef: 63:12:84:69:1c:fa:7f:3d:e9:d0:89:c6:ca:57:e0: 0e:f9:f8:d6:4d:34:3c:f1:b1:bb:b6:45:cc:83:e0: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:C0:07:81:5D:F6:3F:50:1F:E9:C0:ED:4F:72:3B:54:89:EA:1D X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:20:cd:bf:b3:06:20:ec:87:e9:3e:0b:38:d6:de:e2:17: be:9a:a8:e2:16:e4:7d:98:9b:f5:a7:61:df:4a:37:a5:07:53: d0:d1:28:43:13:c4:77:1d:7a:c0:bd:df:22:18:59:23:0d:89: 4c:18:bb:aa:54:79:44:5e:6f:b5:3d:d1:b2:9e:1e:e4:46:1d: ef:0f:f0:36:b0:94:5e:f4:d1:62:16:71:e7:8d:b2:39:29:15: ff:a0:5a:bd:8f:1b:dc:df:a8:ea:2b:8b:5b:a5:8b:dd:f7:2e: 41:45:b0:31:d6:f0:33:f2:14:d4:e4:db:82:b7:35:ac:af:c7: 45:57:a1:21:1b:3a:86:11:5f:b3:c0:c5:90:b2:24:88:2d:5e: 17:89:93:9c:9f:dc:3c:11:60:3c:23:50:92:17:5e:70:86:11: 4a:a8:54:71:90:c5:f3:64:eb:c1:a7:ea:bc:ef:e4:84:2e:56: b9:00:fe:25:c4:c4:86:21:db:0b:0a:89:9f:d9:2f:04:fc:43: d7:73:98:98:23:cd:76:e9:da:3c:9c:ac:40:af:e4:78:5d:a2: a1:7c:58:b8:e9:23:d1:9b:94:e0:0a:45:5d:3e:c0:82:b1:2a: f6:ec:5a:7b:fc:e8:7e:fd:00:ad:5c:5e:a3:c4:bf:5c:3f:54: 80:f1:0f:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDY0QzExMC8GA1UEBRMoQUZDMzE3NDc2N0U0RUFGQzRERUUwRjQ5MjVBMUM2NUNE QzU5RkEyQTAeFw0yNDA1MTcwNzMxMDNaFw0yNDA1MjQwNzMxMDNaMBgxFjAUBgNV BAMTDTY2NDcwN2I3LTk0NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDctPuRxJGG9XG8VZmWbcn+Ia9qQjLucvRaOMOcy/k77dBFWumxi620Jz/Zm+Cu r+C3rjVbYu397FEltoKaS0gi7llFjTksItrPgu8/H2tXdEqx2a9g2LqPDKp3zTr5 LNOSkvumNbT4u66+wWvlTM/eOem8bvjVlK/W/Y8o/RDAtkJN46+CpvXJ05R2ag0d Ov0ZN/Gxwhj1j56NX++xye9eSbm6HFdRPdFI+KVGIvkeJ8DUG2uUPTNfmO0kYarB NpEgjgBN+WtNqm2AwQk/CA4DA1ufE3FIb98oIhKS9Aod72MShGkc+n896dCJxspX 4A75+NZNNDzxsbu2RcyD4JYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUja7AB4Fd 9j9QH+nA7U9yO1SJ6h0wHwYDVR0jBBgwFoAUr8MXR2fk6vxN7g9JJaHGXNxZ+iow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwNjRDLzY4M0M5RDk4Njcy RDExRUU5QzgwOUYxMkM0RjlBRTAyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1p by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhNWFIyZms2dnhON2c5SkphSEdYTnhaLWlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw NjRDLzY4M0M5RDk4NjcyRDExRUU5QzgwOUYxMkM0RjlBRTAyL3I4TVhSMmZrNnZ4 TjdnOUpKYUhHWE54Wi1pby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYeIM2/swYg7IfpPgs41t7iF76aqOIW5H2Ym/WnYd9KN6UHU9DRKEMT xHcdesC93yIYWSMNiUwYu6pUeUReb7U90bKeHuRGHe8P8DawlF700WIWceeNsjkp Ff+gWr2PG9zfqOori1uli933LkFFsDHW8DPyFNTk24K3Nayvx0VXoSEbOoYRX7PA xZCyJIgtXheJk5yf3DwRYDwjUJIXXnCGEUqoVHGQxfNk68Gn6rzv5IQuVrkA/iXE xIYh2wsKiZ/ZLwT8Q9dzmJgjzXbp2jycrECv5HhdoqF8WLjpI9GblOAKRV0+wIKx KvbsWnv86H79AK1cXqPEv1w/VIDxD3U= -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org