$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: qMVlrSOy4IyQmRXob1BW6mGPIpTfCWm6vQxqVSNGrjw= Subject key identifier: 12:FF:0E:8B:01:91:A6:CF:0E:86:23:C3:88:49:1D:99:9D:C6:B2:44 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 03D0 Signing time: Sun 19 May 2024 02:20:42 +0000 Manifest this update: Sun 19 May 2024 02:20:41 +0000 Manifest next update: Sun 26 May 2024 02:20:41 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: r0CcPOvWxdznnZkkMvBD/PsR5vEbhA2X6hX/IYrZU6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: May 19 02:20:41 2024 GMT Not After : May 26 02:20:41 2024 GMT Subject: CN=664961f9-4d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:e2:61:f6:01:7f:0c:5b:30:c4:34:12:16: 54:c2:ea:db:d5:a5:d9:6d:0d:1c:84:18:9d:e9:d4: c1:bb:c2:c8:2d:da:56:35:ae:f5:91:64:1f:a3:b7: 54:df:62:60:e5:c5:72:46:e7:2b:d8:42:7d:5c:c3: dc:44:43:a4:14:9d:d3:e7:19:67:9f:10:5f:4f:bd: 19:f4:3b:28:f3:af:4e:f6:21:c8:1d:a0:36:92:80: a5:46:b8:6d:6c:fa:da:0f:32:00:8e:3a:4a:2c:d2: 3d:ed:67:55:c3:56:3c:de:55:47:7e:29:c9:0b:3b: 70:49:84:b4:5f:20:6c:80:92:de:b2:15:14:62:a3: 41:92:48:eb:27:91:c9:d5:fe:f6:1e:4f:fc:60:39: 64:15:18:fc:b8:c3:f4:d1:9e:ae:30:59:61:05:e3: de:8b:bc:ab:08:26:47:2d:6e:22:df:a2:9d:e8:44: 2d:65:e6:01:50:a1:56:aa:41:57:b6:8b:ae:76:8a: 16:19:e6:73:7f:e6:e9:28:0e:e0:86:c8:d2:46:08: 49:ec:13:f7:15:7d:c1:ac:e2:b6:a9:dd:9f:f3:24: 55:88:10:e1:f3:40:33:c7:6a:ca:c3:f3:d4:7a:03: 4b:a0:1e:4a:ec:c1:09:16:df:7d:32:f3:9c:1d:c3: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:0E:8B:01:91:A6:CF:0E:86:23:C3:88:49:1D:99:9D:C6:B2:44 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b6:b7:f6:29:6c:ae:15:2f:f1:06:f2:98:27:fa:1d:38:13: e7:95:9c:9a:31:99:22:b2:3f:99:47:8a:61:e7:ed:86:9d:46: 05:8b:73:e0:3e:9f:e1:c1:18:a6:5c:ee:4d:98:a0:97:ad:f4: 74:07:36:e9:af:7a:ef:d9:86:af:9b:ed:12:22:a3:47:1f:90: fe:6e:69:3c:e8:36:f4:a8:c9:35:c2:b9:61:a6:a3:b7:82:fd: 11:3f:95:89:e9:a5:41:11:21:dd:fc:2e:96:31:77:87:9f:11: 04:f9:89:34:69:73:4c:5e:f1:03:05:65:b5:de:fe:9e:51:b1: 45:13:85:f6:b8:c2:25:04:6d:63:d7:f6:3b:9b:6d:32:29:36: 98:b1:f6:3e:ec:70:d9:a0:01:33:84:36:66:34:be:d3:bf:be: 67:d3:37:7b:71:e8:cf:fb:95:ab:8e:e4:59:ff:f8:e8:68:af: bf:48:c1:70:36:45:77:45:ff:1c:80:5b:e5:d3:0c:07:53:02: e7:80:cb:1d:51:ed:50:b3:af:cf:20:ef:c4:7f:99:88:ff:0a: 5c:0b:a4:05:22:ad:0b:42:7c:83:64:28:19:c4:a4:63:d7:6f: be:70:e1:9a:c9:b0:ae:65:76:90:a0:84:e5:5f:fe:56:66:68: 63:2c:27:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjQwNTE5MDIyMDQxWhcNMjQwNTI2MDIyMDQxWjAYMRYwFAYD VQQDEw02NjQ5NjFmOS00ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudXiYfYBfwxbMMQ0EhZUwurb1aXZbQ0chBid6dTBu8LILdpWNa71kWQfo7dU 32Jg5cVyRucr2EJ9XMPcREOkFJ3T5xlnnxBfT70Z9Dso869O9iHIHaA2koClRrht bPraDzIAjjpKLNI97WdVw1Y83lVHfinJCztwSYS0XyBsgJLeshUUYqNBkkjrJ5HJ 1f72Hk/8YDlkFRj8uMP00Z6uMFlhBePei7yrCCZHLW4i36Kd6EQtZeYBUKFWqkFX touudooWGeZzf+bpKA7ghsjSRghJ7BP3FX3BrOK2qd2f8yRViBDh80Azx2rKw/PU egNLoB5K7MEJFt99MvOcHcPciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL/DosB kabPDoYjw4hJHZmdxrJEMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrtrf2KWyuFS/xBvKYJ/odOBPnlZyaMZkisj+ZR4ph5+2GnUYFi3Pg Pp/hwRimXO5NmKCXrfR0Bzbpr3rv2Yavm+0SIqNHH5D+bmk86Db0qMk1wrlhpqO3 gv0RP5WJ6aVBESHd/C6WMXeHnxEE+Yk0aXNMXvEDBWW13v6eUbFFE4X2uMIlBG1j 1/Y7m20yKTaYsfY+7HDZoAEzhDZmNL7Tv75n0zd7cejP+5WrjuRZ//joaK+/SMFw NkV3Rf8cgFvl0wwHUwLngMsdUe1Qs6/PIO/Ef5mI/wpcC6QFIq0LQnyDZCgZxKRj 12++cOGaybCuZXaQoITlX/5WZmhjLCdm -----END CERTIFICATE-----Generated at Sun May 19 02:59:15 2024 by rpki-client on console-ams.rpki-client.org