$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: 6q81MfG0FzlYeIIoi1nVq8Ygk0YWmfFORQUEVZSv2uw= Subject key identifier: 1B:5B:57:76:91:8F:E0:33:E2:26:6D:47:5D:C4:C9:09:FD:1B:0E:E9 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 9D Signing time: Sun 19 May 2024 06:47:24 +0000 Manifest this update: Sun 19 May 2024 06:47:24 +0000 Manifest next update: Sun 26 May 2024 06:47:24 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: xs5ay7H5eXNgzOgTKHwfRvfwmfTYAlxpGjFaw/uSCe4=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 42NnMWm7siDIRS+mqgDb9RRYm3WoKva1ydScizcV8Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: May 19 06:47:24 2024 GMT Not After : May 26 06:47:24 2024 GMT Subject: CN=6649a07c-10ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c1:bf:60:03:7c:a3:dd:84:07:58:a9:6d:08: 62:b7:71:ad:44:af:76:21:c9:7c:89:1d:d6:26:75: 3e:44:d9:71:8e:ef:42:fc:a7:c9:24:ad:58:d4:2d: ba:77:35:bd:45:41:e9:8e:20:d7:6b:47:cb:f9:81: 1d:ff:e6:23:fe:4b:3b:12:84:b3:e5:0a:c1:2a:d3: 47:47:32:6c:eb:cb:dd:cd:e4:e8:2c:58:90:4d:03: 6a:f8:00:0d:25:4f:f7:c6:62:e3:fb:83:8b:6f:b1: cf:9b:ef:95:dd:55:b9:4d:27:a7:67:da:ed:97:8e: 04:78:7a:f6:62:11:cd:38:da:e9:34:c1:9a:4f:49: c8:92:68:c4:78:7a:99:e8:60:bc:b2:24:10:76:c7: 4a:2b:39:db:9d:3b:31:4b:dc:bf:9d:8a:75:8d:44: 6f:4a:e1:58:06:5f:2b:0a:9b:62:0a:98:28:63:2f: 45:9f:f1:36:b0:ff:cc:0a:40:33:b8:0f:84:8c:c7: 25:c9:b3:00:4f:71:89:2f:21:eb:86:c1:da:19:7e: 58:c5:98:af:9f:5a:75:71:3a:d2:a2:bd:5f:af:05: 67:80:54:0c:ae:ef:83:5c:58:58:f7:4f:a3:03:4d: 44:09:4d:25:d3:8c:f7:f6:d0:11:39:ed:c4:a9:ba: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5B:57:76:91:8F:E0:33:E2:26:6D:47:5D:C4:C9:09:FD:1B:0E:E9 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:8d:ad:3c:c6:3c:8e:5c:28:8f:7f:c9:e7:22:7c:f1:70: 45:e3:51:a3:2f:7f:0f:d1:b2:1b:b6:69:9c:da:16:9d:fa:97: d6:2d:fa:88:a3:be:d0:1d:21:5d:67:d5:52:e6:8a:50:92:6f: 34:9e:e6:80:29:48:bc:7b:d1:af:f9:86:d6:db:ed:ca:3d:3d: 23:41:fb:60:e0:6d:8a:87:77:d5:ab:6b:32:02:b1:6a:5e:ee: c8:b9:36:9d:ed:81:7c:71:46:30:d3:fd:14:3a:c3:f4:d5:38: 9c:54:5c:0a:01:02:cf:b9:34:30:58:9f:16:e8:88:11:56:31: 4d:49:6f:ae:22:19:47:0e:0c:aa:b4:7d:52:68:e8:da:70:e1: fd:6a:89:4e:a3:3a:37:9d:b2:b0:f6:47:fb:3f:68:25:c6:2e: 12:2e:fa:ca:4c:dd:15:27:ef:81:ae:0c:bf:9a:32:b0:4d:8d: e9:ab:31:18:b4:84:0b:ce:b5:ad:77:18:11:9a:df:b6:0a:a9: e7:21:0b:73:e5:32:cc:b5:41:44:5a:8b:89:a2:26:d3:2d:b9: f9:b9:5d:62:4c:83:23:a6:e5:df:0c:9a:f2:ab:60:9d:19:7f: 88:3a:30:ed:03:68:2a:1c:a5:2b:4e:aa:7a:dc:d3:9c:10:c5: f8:94:e4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjQwNTE5MDY0NzI0WhcNMjQwNTI2MDY0NzI0WjAYMRYwFAYD VQQDEw02NjQ5YTA3Yy0xMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MG/YAN8o92EB1ipbQhit3GtRK92Icl8iR3WJnU+RNlxju9C/KfJJK1Y1C26 dzW9RUHpjiDXa0fL+YEd/+Yj/ks7EoSz5QrBKtNHRzJs68vdzeToLFiQTQNq+AAN JU/3xmLj+4OLb7HPm++V3VW5TSenZ9rtl44EeHr2YhHNONrpNMGaT0nIkmjEeHqZ 6GC8siQQdsdKKznbnTsxS9y/nYp1jURvSuFYBl8rCptiCpgoYy9Fn/E2sP/MCkAz uA+EjMclybMAT3GJLyHrhsHaGX5YxZivn1p1cTrSor1frwVngFQMru+DXFhY90+j A01ECU0l04z39tAROe3EqbotAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtbV3aR j+Az4iZtR13EyQn9Gw7pMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASg42tPMY8jlwoj3/J5yJ88XBF41GjL38P0bIbtmmc2had+pfWLfqI o77QHSFdZ9VS5opQkm80nuaAKUi8e9Gv+YbW2+3KPT0jQftg4G2Kh3fVq2syArFq Xu7IuTad7YF8cUYw0/0UOsP01TicVFwKAQLPuTQwWJ8W6IgRVjFNSW+uIhlHDgyq tH1SaOjacOH9aolOozo3nbKw9kf7P2glxi4SLvrKTN0VJ++Brgy/mjKwTY3pqzEY tIQLzrWtdxgRmt+2CqnnIQtz5TLMtUFEWouJoibTLbn5uV1iTIMjpuXfDJryq2Cd GX+IOjDtA2gqHKUrTqp63NOcEMX4lOSO -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org