$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: NEU5LZNB+OomRIpff+r5H5f3EOJcEEr5mHNC8N0TXss= Subject key identifier: 94:73:2D:09:E1:46:55:0D:75:6A:2E:25:82:2B:F4:CD:93:D1:F2:D2 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0B8E Signing time: Sat 18 May 2024 19:20:36 +0000 Manifest this update: Sat 18 May 2024 19:20:35 +0000 Manifest next update: Sat 25 May 2024 19:20:35 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: Yos3JL/Z+fJ8U2P2F5ZvXVZeep6ocU8vCCVn2Siiw4Q=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: y72UxHLpWElT/p03BNJjswgeJmRwDTBW2SZ3AW6X+Xw=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: 8ZRYSXtg5HDUZuCMB3d8EdToPRSyP0xYvVFsMZiV9Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: May 18 19:20:35 2024 GMT Not After : May 25 19:20:35 2024 GMT Subject: CN=6648ff84-5690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:20:59:ae:26:db:02:0b:25:71:57:ee:16: 5b:48:41:f4:88:b2:9a:d3:8f:af:47:e5:d3:82:8f: ab:8d:fb:41:d3:97:92:22:52:09:32:61:4b:60:3a: 14:46:46:ea:17:6b:63:c4:e1:d4:f9:0a:24:16:e8: 0e:f4:f2:9f:d1:44:ba:a1:26:26:c1:a2:a3:c5:7f: 38:a4:4e:23:a9:58:ff:58:63:9d:dd:1e:99:49:bd: e0:3a:b9:5e:9d:2e:f4:66:e2:21:7e:16:f6:7d:b7: d4:00:12:3b:80:96:0c:d5:ad:3d:17:47:de:bf:8c: b6:f8:fb:76:74:60:12:de:5c:a8:a0:4a:f4:2a:6d: ee:eb:f0:15:6d:bf:37:4d:ea:54:bf:82:ea:0e:0c: 56:34:df:b1:0f:09:50:28:e2:a1:e9:f7:52:a1:0f: cf:8e:fd:02:a8:4d:89:b2:34:50:27:72:df:e4:df: ab:88:28:ee:f7:35:d6:a0:65:2c:7d:0b:72:02:28: 71:40:b7:e4:14:ba:a8:8d:90:91:06:cc:13:de:49: fc:91:fb:30:c2:40:9e:7f:9e:c4:0e:32:57:07:6a: 39:af:b6:d5:16:8d:1e:a5:6e:53:79:3c:1e:8c:5b: d9:9c:3a:fc:c4:8a:43:f7:4a:ab:2d:59:57:2d:ca: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:73:2D:09:E1:46:55:0D:75:6A:2E:25:82:2B:F4:CD:93:D1:F2:D2 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:45:cb:f2:9f:aa:f0:66:17:41:df:2e:64:04:a8:8a:33: ef:23:f2:82:84:0e:d1:90:14:14:24:97:ff:97:15:51:22:2b: 32:8e:e7:ab:34:46:fb:62:78:dc:73:14:49:2a:b9:49:56:3c: 26:d8:2e:44:ee:5f:c2:68:62:8b:66:78:6c:0f:18:7b:51:02: ce:52:4f:37:9b:1a:5c:ef:c8:bf:25:a7:86:39:2d:bf:01:e0: 3d:99:58:c0:6e:ce:90:4b:ac:d5:97:ea:af:d9:5c:ba:e2:47: 34:4e:f9:d1:8b:8d:13:86:02:7c:d5:39:72:3f:f0:12:08:6e: dd:0c:d1:1d:84:1b:42:8b:7a:0b:6b:d6:4d:83:7f:21:7e:4c: 11:11:3f:76:93:52:24:be:cf:41:27:00:14:5d:95:d4:e7:9a: 99:7c:7c:4a:63:02:7e:0f:15:de:7a:79:b4:4a:31:bf:cf:00: 46:f1:0d:70:cc:87:15:be:f4:8c:5c:dd:aa:ab:9f:a1:1e:35: bb:bc:9f:34:cf:ec:66:75:e6:bf:54:fd:44:43:65:cb:65:25: a2:a6:fa:8e:13:fd:e2:53:e4:02:ec:dc:a2:61:f7:67:8e:f7: e6:4c:ff:3f:cf:21:3e:92:4d:23:f6:ac:f3:6b:c3:cb:08:61: 2a:d8:9e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjQwNTE4MTkyMDM1WhcNMjQwNTI1MTkyMDM1WjAYMRYwFAYD VQQDEw02NjQ4ZmY4NC01NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru4gWa4m2wILJXFX7hZbSEH0iLKa04+vR+XTgo+rjftB05eSIlIJMmFLYDoU RkbqF2tjxOHU+QokFugO9PKf0US6oSYmwaKjxX84pE4jqVj/WGOd3R6ZSb3gOrle nS70ZuIhfhb2fbfUABI7gJYM1a09F0fev4y2+Pt2dGAS3lyooEr0Km3u6/AVbb83 TepUv4LqDgxWNN+xDwlQKOKh6fdSoQ/Pjv0CqE2JsjRQJ3Lf5N+riCju9zXWoGUs fQtyAihxQLfkFLqojZCRBswT3kn8kfswwkCef57EDjJXB2o5r7bVFo0epW5TeTwe jFvZnDr8xIpD90qrLVlXLcpYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRzLQnh RlUNdWouJYIr9M2T0fLSMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uEXL8p+q8GYXQd8uZASoijPvI/KChA7RkBQUJJf/lxVRIisyjuer NEb7YnjccxRJKrlJVjwm2C5E7l/CaGKLZnhsDxh7UQLOUk83mxpc78i/JaeGOS2/ AeA9mVjAbs6QS6zVl+qv2Vy64kc0TvnRi40ThgJ81TlyP/ASCG7dDNEdhBtCi3oL a9ZNg38hfkwRET92k1Ikvs9BJwAUXZXU55qZfHxKYwJ+DxXeenm0SjG/zwBG8Q1w zIcVvvSMXN2qq5+hHjW7vJ80z+xmdea/VP1EQ2XLZSWipvqOE/3iU+QC7NyiYfdn jvfmTP8/zyE+kk0j9qzza8PLCGEq2J4P -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org