$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.mft File: 8lDTaGdT_eZUsLs0sSeG-1pDkq8.mft (raw, json) Hash identifier: Aw1QTipPtGBMujlkiw1RXxK+1s6mUO8vBVeKPruMFvg= Subject key identifier: 21:48:17:1F:11:53:01:A8:97:29:AA:52:14:DC:1C:2A:31:42:4D:DF Authority key identifier: F2:50:D3:68:67:53:FD:E6:54:B0:BB:34:B1:27:86:FB:5A:43:92:AF Certificate issuer: /CN=A91E0BE6/serialNumber=F250D3686753FDE654B0BB34B12786FB5A4392AF Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lDTaGdT_eZUsLs0sSeG-1pDkq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.mft Manifest number: 036C Signing time: Fri 31 May 2024 03:26:45 +0000 Manifest this update: Fri 31 May 2024 03:26:44 +0000 Manifest next update: Fri 07 Jun 2024 03:26:44 +0000 Files and hashes: 1: 8lDTaGdT_eZUsLs0sSeG-1pDkq8.crl (hash: 7YRwAL7Xo3LJ9U3CHf20FVRX5igCu4kCiPxfInd+2Q8=) 2: 5074F282677F11EC8C1C1218C4F9AE02.roa (hash: Shv0mAPAeOgZrUKUVpuc0urk2ziZaGJuKXtf+02VxfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.crl rsync://rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lDTaGdT_eZUsLs0sSeG-1pDkq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0BE6/serialNumber=F250D3686753FDE654B0BB34B12786FB5A4392AF Validity Not Before: May 31 03:26:44 2024 GMT Not After : Jun 7 03:26:44 2024 GMT Subject: CN=66594374-d171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:c9:bf:a8:4d:a5:90:b6:0d:41:04:f3:5f: d8:f4:5c:41:83:1d:31:74:aa:1b:94:f4:d1:7f:c3: 66:22:29:76:47:1a:20:5b:37:3a:01:da:68:fc:0d: 23:d8:89:fa:9e:46:d6:5e:2a:b1:3e:ff:7a:c6:a0: cc:f6:f1:a3:fe:36:7c:ee:23:d5:33:b1:32:cc:fc: bd:af:42:4a:bb:37:e4:2a:e5:33:c2:9c:8a:5e:2d: a0:84:63:ea:c0:9d:f4:29:db:67:e7:0f:58:ba:1b: ca:bf:8c:83:30:51:a1:8e:77:7a:64:6a:5b:0d:c7: 72:82:91:9c:0e:6c:65:87:3c:01:1a:b6:ed:99:4b: 73:42:88:7c:cb:17:50:5f:41:48:d6:be:4d:3d:99: 72:de:2d:c1:ec:16:83:a2:70:ad:1f:ab:a3:c1:db: 0f:f6:43:5b:21:da:ad:3d:99:ab:e0:d1:49:ad:a8: c3:c4:41:02:ae:c2:8c:c0:66:e0:b8:eb:4f:8a:f8: 02:4a:9b:d4:4b:a1:83:42:ca:0a:0d:34:ef:be:b3: 22:a4:70:bd:b6:08:11:c5:81:ac:d3:0a:f4:9d:9d: e9:1d:fb:ac:da:9b:5f:77:66:9a:af:0d:b6:c4:4c: 36:c2:61:99:e9:f2:72:f9:b8:2b:13:1e:9d:55:40: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:17:1F:11:53:01:A8:97:29:AA:52:14:DC:1C:2A:31:42:4D:DF X509v3 Authority Key Identifier: keyid:F2:50:D3:68:67:53:FD:E6:54:B0:BB:34:B1:27:86:FB:5A:43:92:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lDTaGdT_eZUsLs0sSeG-1pDkq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0BE6/5E517FEE648511EC9A558B0DC4F9AE02/8lDTaGdT_eZUsLs0sSeG-1pDkq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e4:a8:49:95:79:00:3a:e8:e5:d4:4c:b6:33:7d:6a:a0:18: 2b:72:e2:07:48:c1:3b:ab:38:d6:1f:b0:fe:f6:6a:da:52:b3: 71:ff:7e:59:e0:87:d3:f9:94:a0:4d:93:65:3e:5d:f2:a9:00: f0:71:a9:01:d9:79:4b:9b:7d:a7:08:c5:ca:ae:c3:71:05:8b: 5c:76:04:f4:b7:9b:bd:a0:82:de:c7:47:df:00:9b:b4:f6:3b: 9c:b3:2c:54:b2:69:aa:92:35:ed:85:da:a7:a3:0f:5d:b4:3a: 68:a3:57:e7:ef:ff:49:9e:8d:0a:70:2a:c2:19:ce:fe:8e:71: d6:46:ca:84:5e:09:a3:6d:0b:c6:0a:ac:89:4c:74:6e:aa:95: b5:6a:03:3f:54:b9:94:14:3d:70:86:85:31:ca:f0:42:6b:61: 36:bf:45:8e:f9:97:04:a0:1e:fd:d2:8c:10:ca:0e:8f:c4:84: 17:73:75:36:58:56:6a:5f:78:cd:69:cb:bb:08:ae:d9:cd:58: 88:3f:1f:c4:13:25:db:1c:d3:8b:82:d5:b3:d8:a9:a1:8d:55: fb:e4:e1:ca:48:c9:d6:82:6d:d2:81:7d:17:70:93:53:b8:63: 54:98:27:29:de:b2:9d:9b:86:d6:e6:a4:9b:70:b2:7f:d8:b7: 8c:af:57:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBCRTYxMTAvBgNVBAUTKEYyNTBEMzY4Njc1M0ZERTY1NEIwQkIzNEIxMjc4NkZC NUE0MzkyQUYwHhcNMjQwNTMxMDMyNjQ0WhcNMjQwNjA3MDMyNjQ0WjAYMRYwFAYD VQQDEw02NjU5NDM3NC1kMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BXJv6hNpZC2DUEE81/Y9FxBgx0xdKoblPTRf8NmIil2RxogWzc6Adpo/A0j 2In6nkbWXiqxPv96xqDM9vGj/jZ87iPVM7EyzPy9r0JKuzfkKuUzwpyKXi2ghGPq wJ30Kdtn5w9YuhvKv4yDMFGhjnd6ZGpbDcdygpGcDmxlhzwBGrbtmUtzQoh8yxdQ X0FI1r5NPZly3i3B7BaDonCtH6ujwdsP9kNbIdqtPZmr4NFJrajDxEECrsKMwGbg uOtPivgCSpvUS6GDQsoKDTTvvrMipHC9tggRxYGs0wr0nZ3pHfus2ptfd2aarw22 xEw2wmGZ6fJy+bgrEx6dVUD36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFIFx8R UwGolymqUhTcHCoxQk3fMB8GA1UdIwQYMBaAFPJQ02hnU/3mVLC7NLEnhvtaQ5Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEJFNi81RTUxN0ZFRTY0 ODUxMUVDOUE1NThCMERDNEY5QUUwMi84bERUYUdkVF9lWlVzTHMwc1NlRy0xcERr cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhsRFRhR2RUX2VaVXNMczBzU2VHLTFwRGtxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEJFNi81RTUxN0ZFRTY0ODUxMUVDOUE1NThCMERDNEY5QUUwMi84bERUYUdkVF9l WlVzTHMwc1NlRy0xcERrcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC55KhJlXkAOujl1Ey2M31qoBgrcuIHSME7qzjWH7D+9mraUrNx/35Z 4IfT+ZSgTZNlPl3yqQDwcakB2XlLm32nCMXKrsNxBYtcdgT0t5u9oILex0ffAJu0 9jucsyxUsmmqkjXthdqnow9dtDpoo1fn7/9Jno0KcCrCGc7+jnHWRsqEXgmjbQvG CqyJTHRuqpW1agM/VLmUFD1whoUxyvBCa2E2v0WO+ZcEoB790owQyg6PxIQXc3U2 WFZqX3jNacu7CK7ZzViIPx/EEyXbHNOLgtWz2KmhjVX75OHKSMnWgm3SgX0XcJNT uGNUmCcp3rKdm4bW5qSbcLJ/2LeMr1c1 -----END CERTIFICATE-----Generated at Fri May 31 04:54:03 2024 by rpki-client on console-fra.rpki-client.org