$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: QGwGbGJgA02TR7FAQ9WKLbOIlpUh9akDcDkv27YwImo= Subject key identifier: 9F:9B:69:82:3F:40:53:9C:65:83:5B:C2:E2:C8:33:67:1E:C6:F6:AC Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: A8 Signing time: Sun 19 May 2024 06:43:26 +0000 Manifest this update: Sun 19 May 2024 06:43:26 +0000 Manifest next update: Sun 26 May 2024 06:43:26 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: 6TCtjXfzRnLcZhUsPf93hTVhrwRrxN7ZJ75T0TYEMlY=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: dz8+3qu5h5r0R4jtpUTCSApBTzOeCaTV8lpsEpR+XFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: May 19 06:43:26 2024 GMT Not After : May 26 06:43:26 2024 GMT Subject: CN=66499f8e-5651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:9a:22:c1:86:70:cd:38:3c:62:4b:3a:89: 62:b5:b0:64:63:10:fa:3e:4b:bc:de:29:7c:37:e8: 7b:6f:67:0d:49:89:70:31:74:46:fb:e0:a9:e2:12: 5b:3d:29:37:50:42:8c:d6:71:12:16:40:8d:b8:5e: 6f:b2:3c:9b:08:40:72:1a:58:ba:d0:9b:55:40:ad: 70:7f:3a:e3:fc:45:b6:2d:91:db:55:2f:94:26:6f: 08:e2:60:f4:fe:20:48:62:74:3c:fb:59:b7:bd:af: 95:42:eb:a9:b3:e0:5d:25:14:5e:38:4c:32:81:00: c7:0b:a2:7e:b8:6f:ba:b1:f9:64:4e:44:96:7b:44: 19:e3:0b:94:4b:20:dd:4c:b0:0e:93:b8:6b:7b:0b: c2:94:5e:08:76:a5:df:f3:92:ca:b8:c7:c2:b1:11: 24:ce:41:b1:ed:6a:20:99:a3:95:42:31:c7:34:20: 7f:de:df:e7:e3:e3:9a:c5:87:0a:08:75:d8:92:6a: 09:55:6b:53:7b:f1:eb:1c:ca:1a:eb:f4:69:84:a9: 93:d9:1c:13:e1:30:38:4b:59:d0:50:e0:35:ae:e8: 4e:0d:74:00:3a:fc:6b:d1:78:58:7a:f8:22:ce:ff: e2:ab:2e:dc:84:5f:20:7d:5d:bb:a5:48:92:07:35: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:69:82:3F:40:53:9C:65:83:5B:C2:E2:C8:33:67:1E:C6:F6:AC X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:50:ca:ec:e4:15:30:0a:d2:23:f8:46:49:2e:95:31:fa:22: 0e:12:5d:cb:ea:7c:f1:ff:dd:0c:58:de:69:d4:82:e6:33:87: f0:c0:f1:2c:dc:83:42:82:a3:30:7e:08:18:68:2b:0c:f3:26: ed:cc:73:9d:69:92:5e:50:41:5e:b6:c0:fa:1b:16:aa:18:75: 1a:1a:c4:28:8e:c4:22:cf:be:60:80:96:97:1a:05:91:81:9b: cf:9b:85:fa:a0:0f:c3:94:d4:c5:a0:d9:94:d7:b5:3f:5d:4b: 4a:c1:8d:15:9c:d5:f9:06:2c:04:0d:98:1b:df:50:84:d8:c3: 34:41:6b:de:be:cb:16:a3:8a:b9:02:da:38:28:a4:fb:0e:e6: 40:e0:97:88:fa:d5:61:4d:c4:fd:93:9e:2d:70:19:86:ac:67: 31:4c:64:fb:e9:b0:f3:37:66:a1:d3:37:91:75:0d:e9:df:c1: 64:60:84:40:84:03:ef:5a:36:32:1c:c3:8f:c9:65:57:0a:11: 04:e6:59:56:3d:95:54:2a:f9:6c:16:84:ed:c6:cf:ae:72:4a: 78:6e:ed:ba:f9:e7:06:70:f2:92:b6:b1:f5:85:d0:b0:80:d5: 65:eb:b2:85:0c:31:47:a3:56:ba:a6:1c:ad:6b:79:e6:24:24: 1e:3b:65:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjQwNTE5MDY0MzI2WhcNMjQwNTI2MDY0MzI2WjAYMRYwFAYD VQQDEw02NjQ5OWY4ZS01NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9huaIsGGcM04PGJLOolitbBkYxD6Pku83il8N+h7b2cNSYlwMXRG++Cp4hJb PSk3UEKM1nESFkCNuF5vsjybCEByGli60JtVQK1wfzrj/EW2LZHbVS+UJm8I4mD0 /iBIYnQ8+1m3va+VQuups+BdJRReOEwygQDHC6J+uG+6sflkTkSWe0QZ4wuUSyDd TLAOk7hrewvClF4IdqXf85LKuMfCsREkzkGx7WogmaOVQjHHNCB/3t/n4+OaxYcK CHXYkmoJVWtTe/HrHMoa6/RphKmT2RwT4TA4S1nQUOA1ruhODXQAOvxr0XhYevgi zv/iqy7chF8gfV27pUiSBzUb6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+baYI/ QFOcZYNbwuLIM2cexvasMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjUMrs5BUwCtIj+EZJLpUx+iIOEl3L6nzx/90MWN5p1ILmM4fwwPEs 3INCgqMwfggYaCsM8ybtzHOdaZJeUEFetsD6GxaqGHUaGsQojsQiz75ggJaXGgWR gZvPm4X6oA/DlNTFoNmU17U/XUtKwY0VnNX5BiwEDZgb31CE2MM0QWvevssWo4q5 Ato4KKT7DuZA4JeI+tVhTcT9k54tcBmGrGcxTGT76bDzN2ah0zeRdQ3p38FkYIRA hAPvWjYyHMOPyWVXChEE5llWPZVUKvlsFoTtxs+uckp4bu26+ecGcPKStrH1hdCw gNVl67KFDDFHo1a6phyta3nmJCQeO2XB -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org