$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: p9qk5CKme0qmzY6BSNTI/ABiL/7nrN+Ewp2T/3Fb9sA= Subject key identifier: AD:7A:80:3C:A5:F3:C0:91:32:7A:AF:55:2D:6D:7C:25:84:74:55:5F Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 093F Signing time: Sat 18 May 2024 21:06:41 +0000 Manifest this update: Sat 18 May 2024 21:06:40 +0000 Manifest next update: Sat 25 May 2024 21:06:40 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: sS2bImlTFOCIjofG0GT2CotP/G9KAgDt59QPrZryS5c=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: KSkeshNL6ybRiQ1oR9k2xFNVFJPTv2DYVpT1APVFu2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: May 18 21:06:40 2024 GMT Not After : May 25 21:06:40 2024 GMT Subject: CN=66491860-06ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:fe:58:7f:f9:18:3d:fd:70:9c:5d:d7:d2: 05:f7:0c:b6:04:f1:08:62:ea:bc:bb:ca:dd:bb:e8: 39:de:1e:7c:17:3c:45:ea:e3:b0:67:c4:44:8f:bf: 8f:f8:97:4d:e8:96:32:19:69:74:16:46:79:f1:a6: 44:e1:aa:ff:0c:22:9d:8a:02:e3:f5:85:9e:a4:6d: e2:77:57:84:4b:93:d5:7b:ef:d6:9a:88:ef:52:c5: 5f:a2:19:86:fa:35:a9:c3:0c:13:1d:d1:8e:3a:d3: f4:f0:f8:de:45:23:bf:2f:bb:38:d0:1b:07:e8:db: 5a:7b:08:c0:22:1d:53:38:76:00:e0:24:cc:7d:cb: 38:a1:fb:68:14:f0:ad:da:77:58:a8:a7:19:6c:6c: 41:0b:56:14:a1:c4:d2:d1:d0:20:00:1e:00:46:8c: d2:f8:06:cc:40:21:66:2b:d9:71:3b:b3:6a:50:c5: f9:be:3b:7f:56:db:85:bc:33:96:3e:a0:f4:b9:ce: 79:33:ac:88:3c:cd:23:68:c7:90:1f:a0:ab:00:a2: 41:9b:a8:d2:aa:1a:d6:4b:64:59:7a:eb:7d:e5:57: d6:c6:3e:b0:57:39:f6:fc:21:2d:e9:d8:08:e0:8e: d5:2b:a5:8c:1e:c2:5b:ce:fb:5b:38:1a:ff:34:27: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7A:80:3C:A5:F3:C0:91:32:7A:AF:55:2D:6D:7C:25:84:74:55:5F X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:e5:64:1c:03:6a:28:31:35:f7:d4:8a:bc:c6:ad:27:ae: a8:1f:1e:34:c1:ff:57:bb:b4:c0:41:b3:36:d9:6f:d8:4c:05: ca:76:fd:c8:23:a9:e1:52:9b:2e:c1:b4:2f:67:13:0c:c7:5a: 80:2a:6f:2a:59:80:99:d9:89:89:ea:67:de:38:75:c5:12:f0: c8:07:ae:f4:e6:17:27:f1:01:2b:10:84:ff:99:49:98:10:50: 54:73:6c:ca:9c:ec:6c:38:ee:9a:b8:b3:da:66:2a:e2:5d:2e: 1c:8b:e2:ab:12:29:30:bc:5a:a6:5e:6b:3f:dd:e2:ba:c6:4a: f3:1f:7b:45:c6:79:d8:fe:23:2d:69:9e:91:63:55:79:17:9f: 3e:3d:23:d7:45:d9:36:f7:2d:71:aa:12:da:3c:10:47:32:9f: b4:c2:c1:8f:a2:74:80:b6:16:46:c9:7c:b8:4f:fd:87:58:5d: df:12:3d:d7:d6:39:1b:39:8c:54:d6:ec:ce:99:c5:dd:58:8f: c7:73:4a:3d:d9:ed:15:bd:ce:8b:fd:d9:2a:ba:d5:1b:e4:78: 79:70:9b:c2:41:36:09:e3:b1:5b:e0:58:c8:73:6e:e1:ad:18: 63:5e:14:15:dd:6f:23:20:fa:c1:2a:31:b1:94:66:17:45:01: 39:2d:cc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjQwNTE4MjEwNjQwWhcNMjQwNTI1MjEwNjQwWjAYMRYwFAYD VQQDEw02NjQ5MTg2MC0wNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMX+WH/5GD39cJxd19IF9wy2BPEIYuq8u8rdu+g53h58FzxF6uOwZ8REj7+P +JdN6JYyGWl0FkZ58aZE4ar/DCKdigLj9YWepG3id1eES5PVe+/WmojvUsVfohmG +jWpwwwTHdGOOtP08PjeRSO/L7s40BsH6NtaewjAIh1TOHYA4CTMfcs4oftoFPCt 2ndYqKcZbGxBC1YUocTS0dAgAB4ARozS+AbMQCFmK9lxO7NqUMX5vjt/VtuFvDOW PqD0uc55M6yIPM0jaMeQH6CrAKJBm6jSqhrWS2RZeut95VfWxj6wVzn2/CEt6dgI 4I7VK6WMHsJbzvtbOBr/NCcFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK16gDyl 88CRMnqvVS1tfCWEdFVfMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADt+VkHANqKDE199SKvMatJ66oHx40wf9Xu7TAQbM22W/YTAXKdv3I I6nhUpsuwbQvZxMMx1qAKm8qWYCZ2YmJ6mfeOHXFEvDIB6705hcn8QErEIT/mUmY EFBUc2zKnOxsOO6auLPaZiriXS4ci+KrEikwvFqmXms/3eK6xkrzH3tFxnnY/iMt aZ6RY1V5F58+PSPXRdk29y1xqhLaPBBHMp+0wsGPonSAthZGyXy4T/2HWF3fEj3X 1jkbOYxU1uzOmcXdWI/Hc0o92e0Vvc6L/dkqutUb5Hh5cJvCQTYJ47Fb4FjIc27h rRhjXhQV3W8jIPrBKjGxlGYXRQE5LcxF -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org