$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: Lu7VZhIIREm42slLRHvVU/dOIxLPB/30kSqSmshndTU= Subject key identifier: 8F:52:58:A2:75:F8:8E:73:9C:05:5B:BA:F1:7E:15:E7:0C:C0:D6:BC Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0667 Signing time: Sat 18 May 2024 23:33:44 +0000 Manifest this update: Sat 18 May 2024 23:33:44 +0000 Manifest next update: Sat 25 May 2024 23:33:44 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: 32wLAQkPIh85HbrlWqPqUPpXsLhWnKsin+Ukoch/7Wc=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: //D9Kinvi7dBfUZ983cp95xtdpJtrzemhcHFvfNSaEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: May 18 23:33:44 2024 GMT Not After : May 25 23:33:44 2024 GMT Subject: CN=66493ad8-297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:bf:ca:9d:e3:43:56:53:ae:6b:e6:6c:f2: c8:ac:d1:56:92:b5:86:35:cd:c7:e4:e3:d9:79:91: dd:25:6f:db:f2:cb:b7:7b:f4:e6:8e:01:ba:ff:34: 6c:e5:52:04:76:5c:85:10:30:4c:1f:ac:6d:a3:8b: 32:90:dd:a2:5c:ac:a9:56:85:d6:5e:24:33:88:c8: 1b:ea:9f:fa:1b:ea:3f:ea:f3:58:b4:dc:71:9b:22: 7b:53:0f:24:b0:fa:6e:7d:bd:1f:88:6e:8b:0a:8a: 13:3d:07:ea:2f:42:be:e6:12:b0:e4:43:10:ea:df: 24:3b:e7:00:5e:95:9f:7b:b6:5e:f5:44:07:c5:4f: 12:0d:28:81:c5:82:2f:75:0e:3a:71:93:fe:3e:75: d7:c0:14:4a:09:bd:d6:a1:8b:52:ea:53:c8:5b:f5: d0:df:0c:fc:ba:e4:e6:0c:df:e1:a9:5f:2b:49:d3: 67:55:e1:44:84:9c:97:ce:84:8b:c6:43:61:fa:fc: 9d:d4:c5:e2:48:c5:e3:d7:14:06:c1:af:1e:67:ed: 7f:b3:d3:b7:33:85:45:43:6d:32:cd:70:4b:11:b4: 1e:1b:94:c4:9e:38:3c:92:17:dc:02:59:28:c2:8c: a1:3b:12:4d:ae:c7:f1:6f:fc:f2:84:8e:94:bd:bb: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:58:A2:75:F8:8E:73:9C:05:5B:BA:F1:7E:15:E7:0C:C0:D6:BC X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:38:d2:be:45:71:a0:1c:86:45:47:fa:ea:5e:ad:b6:d3:44: 66:49:9f:ef:6f:f4:49:b8:b6:83:fc:70:85:32:c5:89:19:23: 30:22:12:8d:a9:86:af:7c:0e:cf:4c:dd:5d:a7:dd:01:ec:4e: f6:69:2a:5f:11:9f:77:51:ed:95:f3:11:76:b7:34:e5:6a:88: 6d:64:41:5a:fa:03:21:64:38:78:31:a9:db:1c:37:26:8d:15: e0:86:2c:3c:8c:2a:d5:bd:39:b9:19:63:75:a8:ec:2a:c5:0d: c6:a2:8a:8a:36:35:20:05:da:f3:d3:8a:be:be:11:f4:fd:a7: f9:76:af:da:9a:bb:9b:f3:5d:77:32:af:fe:b8:b0:c9:62:4d: 7b:23:fd:b1:db:4c:3f:bf:cb:d8:01:a0:e1:16:d8:12:3b:ad: 9d:5b:fc:41:de:19:ca:08:04:b1:13:ce:d2:41:8c:08:2e:50: 46:a2:f3:15:16:28:e6:36:9f:0c:4a:14:c9:7d:0e:09:20:02: fc:0d:96:a4:b9:11:19:5d:30:1f:ce:98:7d:f5:a3:da:66:85: 3f:03:79:0b:7d:72:e8:2f:ef:b7:25:6b:d5:e3:53:83:2b:6c: f4:6e:02:0b:3b:89:7d:87:a4:a3:fc:c6:28:82:ac:aa:84:69: d8:50:a8:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjQwNTE4MjMzMzQ0WhcNMjQwNTI1MjMzMzQ0WjAYMRYwFAYD VQQDEw02NjQ5M2FkOC0yOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJO/yp3jQ1ZTrmvmbPLIrNFWkrWGNc3H5OPZeZHdJW/b8su3e/TmjgG6/zRs 5VIEdlyFEDBMH6xto4sykN2iXKypVoXWXiQziMgb6p/6G+o/6vNYtNxxmyJ7Uw8k sPpufb0fiG6LCooTPQfqL0K+5hKw5EMQ6t8kO+cAXpWfe7Ze9UQHxU8SDSiBxYIv dQ46cZP+PnXXwBRKCb3WoYtS6lPIW/XQ3wz8uuTmDN/hqV8rSdNnVeFEhJyXzoSL xkNh+vyd1MXiSMXj1xQGwa8eZ+1/s9O3M4VFQ20yzXBLEbQeG5TEnjg8khfcAlko woyhOxJNrsfxb/zyhI6UvbvvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9SWKJ1 +I5znAVbuvF+FecMwNa8MB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaONK+RXGgHIZFR/rqXq2200RmSZ/vb/RJuLaD/HCFMsWJGSMwIhKN qYavfA7PTN1dp90B7E72aSpfEZ93Ue2V8xF2tzTlaohtZEFa+gMhZDh4ManbHDcm jRXghiw8jCrVvTm5GWN1qOwqxQ3GooqKNjUgBdrz04q+vhH0/af5dq/amrub8113 Mq/+uLDJYk17I/2x20w/v8vYAaDhFtgSO62dW/xB3hnKCASxE87SQYwILlBGovMV FijmNp8MShTJfQ4JIAL8DZakuREZXTAfzph99aPaZoU/A3kLfXLoL++3JWvV41OD K2z0bgILO4l9h6Sj/MYogqyqhGnYUKih -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org