$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: zZLj1iTfpJlInVfJA6WUa+nyBXBRTGovxfmfhAb6F6w= Subject key identifier: 8C:F3:7A:F0:18:BB:D8:CE:8E:AF:5D:16:80:FA:BA:AE:39:F0:B8:64 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 08BF Signing time: Fri 31 May 2024 22:14:24 +0000 Manifest this update: Fri 31 May 2024 22:14:24 +0000 Manifest next update: Fri 07 Jun 2024 22:14:24 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: dDIG+lQguzdt74r8ofn/9cq+0J2Pwz9+BHem4SshX30=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ktdvmQq3O7BY6N2LknvoDnkjfa5kYL37ZMNO2GZxjaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: May 31 22:14:24 2024 GMT Not After : Jun 7 22:14:24 2024 GMT Subject: CN=665a4bc0-6745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:93:f5:64:bf:20:f0:46:03:fc:ee:e9:1b: 69:fd:14:6c:be:0d:e6:ec:60:3f:42:d8:55:2c:1b: ec:52:0c:84:2f:f3:3d:dd:39:04:22:ad:de:a8:4c: 79:c1:a6:4f:f0:df:e4:f5:5c:3c:24:e7:ab:06:5c: f9:de:30:13:ae:19:7b:d2:81:71:41:ac:e1:7e:c4: 8f:dc:ff:bd:18:a9:c7:89:22:05:98:b8:22:97:fc: 0a:70:8a:e9:6e:5e:4d:1a:29:3a:8b:07:58:1b:95: de:87:b6:f8:7f:7e:55:d3:d3:80:e1:5f:7f:14:39: 18:44:74:a6:07:a0:e4:f7:af:bf:17:04:3f:12:c9: b9:be:e3:30:c6:0c:37:ec:3d:eb:df:0e:77:01:83: 93:9e:89:be:87:fb:70:ea:89:da:ec:bd:59:fa:c4: c6:4d:90:f1:e7:f2:dc:5d:77:09:76:76:b4:79:29: f0:fc:32:45:41:e3:fe:66:26:34:eb:fe:c3:e4:24: 00:b9:c4:b6:16:0b:c0:4c:67:2f:35:47:1f:82:8a: 8e:e1:e4:db:c5:33:1c:d7:9c:3e:d0:8f:85:b0:18: c4:2d:1b:28:65:ce:d6:d4:d3:d6:9b:df:6b:2b:bb: 30:0a:c6:6e:af:08:90:b0:6e:78:fb:8f:2d:60:bf: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:7A:F0:18:BB:D8:CE:8E:AF:5D:16:80:FA:BA:AE:39:F0:B8:64 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bf:fa:c6:e1:7a:a5:bf:e5:a5:32:36:46:f6:9a:8c:90:45: 9d:84:e3:a3:80:3e:fe:a5:56:98:67:83:42:f6:70:24:38:93: bb:cd:73:dc:c8:4c:d3:9d:bd:65:b1:af:3c:79:5c:e6:fd:08: 82:94:dc:7e:9e:33:1b:91:c6:89:db:3d:ca:9d:6a:0b:3d:dd: da:72:b1:1a:37:d0:b8:7b:c6:fe:91:4f:bd:c2:cf:1a:7a:0a: 1f:b2:45:5c:f7:9b:99:b8:7b:bd:80:45:9a:d6:7c:13:15:fa: 38:d5:f1:9c:15:0a:e7:41:6b:b8:36:b0:7c:fc:9d:3c:4e:36: 60:b2:35:e3:fa:27:8f:48:14:2f:55:6a:9d:72:59:02:c6:87: 31:9e:46:96:60:5e:69:46:48:4e:b4:41:80:49:1d:a9:0d:ce: 86:f6:fc:0c:32:08:15:d7:f5:c6:57:e4:49:49:03:40:34:ac: dd:4b:5b:75:37:cf:b1:83:0d:47:41:e9:c6:4f:a2:7a:5b:0a: f7:f2:00:0a:ec:62:f3:93:57:e1:9f:4d:08:e7:99:54:05:14: 50:b2:c3:17:7f:08:73:8d:9e:7d:34:5d:c7:84:36:e5:f8:ca: d7:8d:c8:a4:21:92:63:48:51:74:61:cc:c3:c8:da:a1:ff:ae: ba:38:3d:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjQwNTMxMjIxNDI0WhcNMjQwNjA3MjIxNDI0WjAYMRYwFAYD VQQDEw02NjVhNGJjMC02NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujqT9WS/IPBGA/zu6Rtp/RRsvg3m7GA/QthVLBvsUgyEL/M93TkEIq3eqEx5 waZP8N/k9Vw8JOerBlz53jATrhl70oFxQazhfsSP3P+9GKnHiSIFmLgil/wKcIrp bl5NGik6iwdYG5Xeh7b4f35V09OA4V9/FDkYRHSmB6Dk96+/FwQ/Esm5vuMwxgw3 7D3r3w53AYOTnom+h/tw6ona7L1Z+sTGTZDx5/LcXXcJdna0eSnw/DJFQeP+ZiY0 6/7D5CQAucS2FgvATGcvNUcfgoqO4eTbxTMc15w+0I+FsBjELRsoZc7W1NPWm99r K7swCsZurwiQsG54+48tYL+88wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzzevAY u9jOjq9dFoD6uq458LhkMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKv/rG4Xqlv+WlMjZG9pqMkEWdhOOjgD7+pVaYZ4NC9nAkOJO7zXPc yEzTnb1lsa88eVzm/QiClNx+njMbkcaJ2z3KnWoLPd3acrEaN9C4e8b+kU+9ws8a egofskVc95uZuHu9gEWa1nwTFfo41fGcFQrnQWu4NrB8/J08TjZgsjXj+iePSBQv VWqdclkCxocxnkaWYF5pRkhOtEGASR2pDc6G9vwMMggV1/XGV+RJSQNANKzdS1t1 N8+xgw1HQenGT6J6Wwr38gAK7GLzk1fhn00I55lUBRRQssMXfwhzjZ59NF3HhDbl +MrXjcikIZJjSFF0YczDyNqh/666OD26 -----END CERTIFICATE-----Generated at Fri May 31 22:56:59 2024 by rpki-client on console-fra.rpki-client.org