$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: tEOVDXRN0GpzAVuWDZ/8CAMiFQ18aIYBeoxfhwUhQXM= Subject key identifier: E6:3E:0F:9B:E6:75:3A:9D:DA:8F:92:FF:03:BD:9D:C2:2A:B3:F0:1C Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 239E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 2387 Signing time: Sat 18 May 2024 16:07:56 +0000 Manifest this update: Sat 18 May 2024 16:07:55 +0000 Manifest next update: Sat 25 May 2024 16:07:55 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: MlIQoCHgX179JChc8ULsOFHEWrUnYB+h4t+1BQI3TlE=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: PUbXFNeJDyX/GQh5C5CoNjAXSLhMmyfB6/RTAM2F/EI=) 3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: 2E3vPN38cO5ZVsu31cfH9Owqxfo1rv66fgCz822RyrI=) 4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: l1MwBpHPQhXycDV4p0J/TagasjGYejdHzwgyA2vNmZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9118 (0x239e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: May 18 16:07:55 2024 GMT Not After : May 25 16:07:55 2024 GMT Subject: CN=6648d25b-68a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:19:7f:15:7e:26:4b:3e:77:fe:fb:4c:d0: b7:dd:b3:11:d9:4a:3e:23:08:bb:59:7b:76:95:59: 72:fc:26:76:90:36:5b:9d:70:4f:6c:29:d5:3e:d9: 49:2c:95:f2:3c:9f:23:d7:fb:d8:bb:04:91:16:be: 0f:53:05:b2:e5:93:8e:e8:c9:96:81:ea:81:b3:bf: 06:27:da:60:0e:7c:9a:99:3f:db:f8:08:04:69:63: f5:1a:3c:5b:39:7e:40:ed:69:ad:b5:17:50:b9:4b: 3e:19:d5:41:64:44:36:6c:fe:7b:00:05:9c:e1:84: d5:82:12:28:aa:49:81:a8:d4:31:5c:ca:23:88:b6: d3:6d:74:d9:c0:74:33:38:81:7d:f9:78:2c:1a:17: 6c:80:76:62:8d:78:55:06:23:59:38:ed:57:f5:14: a0:1f:28:83:20:f7:b6:67:57:81:d3:65:cf:f8:10: c4:bc:9e:8f:79:41:f1:e0:5e:8b:ac:cd:41:af:db: e5:fe:2d:7e:38:78:66:97:c3:54:20:dc:ce:4f:6a: f2:d8:ef:cb:cd:ed:e2:25:7e:1b:67:cd:e6:4a:cc: 79:8b:14:36:6d:d7:6e:41:df:f1:2c:b3:6e:46:38: f3:28:34:4c:10:64:17:9e:49:c9:92:15:22:ad:62: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:0F:9B:E6:75:3A:9D:DA:8F:92:FF:03:BD:9D:C2:2A:B3:F0:1C X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:05:ae:d3:68:f9:01:4b:f6:e9:7c:c2:8b:a1:17:ce:3f:e4: ae:00:57:99:62:6e:20:47:0e:62:d8:cd:d9:6a:e9:ab:b3:bd: 64:a1:14:7e:18:7e:f1:3d:d2:a2:68:3a:65:9c:a2:9a:65:fb: b3:cb:c0:19:27:d3:a4:d4:ee:14:0f:91:00:67:ec:71:64:cf: ae:cc:a4:1e:be:0b:f2:32:2c:1f:3d:84:69:12:09:92:f7:e6: 5f:d7:8e:0b:23:00:07:e9:8d:ea:09:18:9b:a0:30:49:dc:bc: 1e:eb:09:d3:0e:fe:7d:1d:2e:be:9b:73:75:a3:5e:f8:4c:0f: cd:3a:65:8e:b6:2b:e3:ba:4c:8f:51:19:5a:89:bc:8a:8d:17: e3:51:d6:25:6e:33:bf:73:a9:37:38:33:4f:33:bf:cd:13:ee: 93:03:f0:98:b4:72:23:75:f8:92:a2:73:53:54:9e:36:1f:ca: 8d:7a:32:b3:2c:19:b0:57:65:95:ed:88:a8:48:52:4a:c6:93: fe:e4:a3:fa:c1:1e:36:81:42:17:39:b1:12:16:51:92:2c:ea: 8a:7e:74:33:8a:10:43:27:79:fb:6a:02:73:42:a2:ea:40:dd: 1a:20:d8:c6:b7:60:06:50:dd:ec:d0:0e:8f:38:63:52:ea:fb: 48:ca:76:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjQwNTE4MTYwNzU1WhcNMjQwNTI1MTYwNzU1WjAYMRYwFAYD VQQDEw02NjQ4ZDI1Yi02OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5QZfxV+Jks+d/77TNC33bMR2Uo+Iwi7WXt2lVly/CZ2kDZbnXBPbCnVPtlJ LJXyPJ8j1/vYuwSRFr4PUwWy5ZOO6MmWgeqBs78GJ9pgDnyamT/b+AgEaWP1Gjxb OX5A7WmttRdQuUs+GdVBZEQ2bP57AAWc4YTVghIoqkmBqNQxXMojiLbTbXTZwHQz OIF9+XgsGhdsgHZijXhVBiNZOO1X9RSgHyiDIPe2Z1eB02XP+BDEvJ6PeUHx4F6L rM1Br9vl/i1+OHhml8NUINzOT2ry2O/Lze3iJX4bZ83mSsx5ixQ2bdduQd/xLLNu RjjzKDRMEGQXnknJkhUirWJJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY+D5vm dTqd2o+S/wO9ncIqs/AcMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlBa7TaPkBS/bpfMKLoRfOP+SuAFeZYm4gRw5i2M3Zaumrs71koRR+ GH7xPdKiaDplnKKaZfuzy8AZJ9Ok1O4UD5EAZ+xxZM+uzKQevgvyMiwfPYRpEgmS 9+Zf144LIwAH6Y3qCRiboDBJ3Lwe6wnTDv59HS6+m3N1o174TA/NOmWOtivjukyP URlaibyKjRfjUdYlbjO/c6k3ODNPM7/NE+6TA/CYtHIjdfiSonNTVJ42H8qNejKz LBmwV2WV7YioSFJKxpP+5KP6wR42gUIXObESFlGSLOqKfnQzihBDJ3n7agJzQqLq QN0aINjGt2AGUN3s0A6POGNS6vtIynad -----END CERTIFICATE-----Generated at Sat May 18 16:57:55 2024 by rpki-client on console-fra.rpki-client.org