$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: 2RfK8ma2BU3cOWumTgbo3Y/H91rUFbFrbk4iG3GnW6I= Subject key identifier: E6:AB:DA:A8:7A:B9:FA:B3:46:46:37:62:AE:17:23:A6:AC:7F:D9:0C Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 10D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 10D1 Signing time: Sat 18 May 2024 17:52:52 +0000 Manifest this update: Sat 18 May 2024 17:52:52 +0000 Manifest next update: Sat 25 May 2024 17:52:52 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: uI5BLFK4DI8dQI0J1ztalDhIzDKWyihFwe+bvBh/91E=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: nJ9SJM6sBPF7wPXXxyjuPOz53EU2DHqysBnOoMO38lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: May 18 17:52:52 2024 GMT Not After : May 25 17:52:52 2024 GMT Subject: CN=6648eaf4-174b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f5:bc:d3:e2:1f:52:95:45:c3:c4:28:5b:5f: 54:f3:2c:76:52:f0:b1:ab:a4:4b:50:aa:35:98:48: 1f:bf:2d:aa:93:21:ea:0d:85:a0:ab:08:1e:49:41: f0:af:3b:7d:df:04:2e:0b:de:3f:0a:ef:6a:c8:28: 34:23:54:f8:56:29:17:6e:6c:c7:07:96:6a:fc:db: 0f:64:92:ac:9b:42:0e:b5:54:49:31:c3:b6:c4:f2: 30:77:07:7e:4e:3a:63:00:f4:ec:8c:9a:cb:4e:98: ee:80:ac:5a:1c:e9:4b:f5:5f:aa:3d:6a:85:46:be: 69:9b:ff:d0:2e:f8:67:b7:ec:0f:ad:5f:6c:c8:cf: ab:b7:68:52:41:0d:c4:f3:f4:98:da:3c:f2:6c:54: 21:3b:ff:41:d3:5b:9e:a7:a0:3a:46:f0:6c:ce:bf: 25:52:3a:af:01:cf:31:66:ec:06:75:41:4d:8f:ff: cc:3d:58:0f:c3:d8:56:bc:37:f1:c9:45:a0:29:60: c9:04:56:71:61:f7:4e:06:62:be:75:14:1b:bf:00: 85:b2:77:87:47:db:da:3a:25:4d:3a:48:27:dd:a5: 1d:bb:0c:65:24:4e:a4:bc:39:8d:c2:9f:10:65:e5: 75:57:10:3d:30:b5:9f:1e:9d:47:02:02:79:5e:1a: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:DA:A8:7A:B9:FA:B3:46:46:37:62:AE:17:23:A6:AC:7F:D9:0C X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:2d:8d:87:3c:8a:de:b8:e9:8c:03:14:9a:b6:a3:f7:8f:b2: 15:9a:5c:bc:06:da:0f:15:04:b1:4d:16:f2:ef:26:9a:71:1f: c3:65:3b:ad:be:74:98:21:3e:22:cf:c3:77:0a:18:18:16:43: f1:3c:0b:1d:41:1e:88:d9:f6:85:75:19:e4:d6:16:67:03:43: 5f:98:bf:25:13:68:de:62:4f:c8:8e:fc:cf:f0:89:50:fa:53: 26:ed:78:0b:ed:52:ae:c5:ba:a6:c2:cb:00:70:03:07:85:54: 48:fc:9b:96:bf:e6:2a:60:e8:95:fe:db:5d:e3:6c:a9:c1:c2: f7:ad:a7:4c:47:18:9d:69:7e:aa:0c:44:4e:ac:bf:5b:ee:3a: 1c:fb:e5:df:1b:a1:db:94:63:0c:43:10:30:7a:67:55:b0:d7: 9a:35:3b:5a:f5:2b:65:2c:14:40:ad:27:24:fc:4f:49:dc:77: 3f:9e:c3:9e:62:01:0f:92:82:9a:2b:70:4a:4e:10:eb:ab:9d: 83:26:67:5a:68:0d:30:0f:fd:a6:f4:2d:e8:a2:10:7b:1f:1f: a7:d4:db:0d:d4:e1:a5:da:ba:5f:31:f6:63:c0:57:43:15:0d: d3:04:e9:35:07:1b:e0:b5:37:4d:65:b1:af:08:cc:61:5b:db: 3c:a3:f0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjQwNTE4MTc1MjUyWhcNMjQwNTI1MTc1MjUyWjAYMRYwFAYD VQQDEw02NjQ4ZWFmNC0xNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+/W80+IfUpVFw8QoW19U8yx2UvCxq6RLUKo1mEgfvy2qkyHqDYWgqwgeSUHw rzt93wQuC94/Cu9qyCg0I1T4VikXbmzHB5Zq/NsPZJKsm0IOtVRJMcO2xPIwdwd+ TjpjAPTsjJrLTpjugKxaHOlL9V+qPWqFRr5pm//QLvhnt+wPrV9syM+rt2hSQQ3E 8/SY2jzybFQhO/9B01uep6A6RvBszr8lUjqvAc8xZuwGdUFNj//MPVgPw9hWvDfx yUWgKWDJBFZxYfdOBmK+dRQbvwCFsneHR9vaOiVNOkgn3aUduwxlJE6kvDmNwp8Q ZeV1VxA9MLWfHp1HAgJ5XhoHcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOar2qh6 ufqzRkY3Yq4XI6asf9kMMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/LY2HPIreuOmMAxSatqP3j7IVmly8BtoPFQSxTRby7yaacR/DZTut vnSYIT4iz8N3ChgYFkPxPAsdQR6I2faFdRnk1hZnA0NfmL8lE2jeYk/IjvzP8IlQ +lMm7XgL7VKuxbqmwssAcAMHhVRI/JuWv+YqYOiV/ttd42ypwcL3radMRxidaX6q DEROrL9b7joc++XfG6HblGMMQxAwemdVsNeaNTta9StlLBRArSck/E9J3Hc/nsOe YgEPkoKaK3BKThDrq52DJmdaaA0wD/2m9C3oohB7Hx+n1NsN1OGl2rpfMfZjwFdD FQ3TBOk1BxvgtTdNZbGvCMxhW9s8o/Cm -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org