$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: reo38eHM/l1tqTWtYDFTYPb1mU2MAh47xWwUd+iBW9E= Subject key identifier: 59:39:6C:F6:37:39:D5:ED:0A:B1:DC:12:18:0F:03:21:95:30:73:E0 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0D18 Signing time: Sat 18 May 2024 18:43:14 +0000 Manifest this update: Sat 18 May 2024 18:43:13 +0000 Manifest next update: Sat 25 May 2024 18:43:13 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: psy8zOLlIoAeqJwAp9YoFgn8B3TQc2HVTf1WjjNx+0w=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: BJQEnl86Bx9uGan5ZQlD+aDEsBXUteyINnoashUOD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: May 18 18:43:13 2024 GMT Not After : May 25 18:43:13 2024 GMT Subject: CN=6648f6c1-6025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:3d:70:5b:b0:3a:cc:42:e3:d9:7a:cf:f5: 5d:da:d4:69:6d:a0:13:10:12:b5:cf:7a:be:31:1e: 5b:70:c7:af:50:8f:64:ce:07:22:22:57:10:13:7d: 13:82:25:81:eb:07:43:8b:64:9f:f1:11:d3:4c:82: 9b:fa:b3:05:04:af:fe:af:9a:2b:66:d8:98:38:28: a9:30:33:11:3b:b2:d8:08:19:53:ec:64:b2:bf:cd: 29:ab:02:2d:0b:c7:3b:6e:39:27:4e:73:32:8c:52: 6b:4e:ca:db:91:70:5b:37:e4:6e:2e:ae:f5:98:4d: 45:4e:30:25:e5:e5:8e:a0:37:f5:01:ef:7d:b8:6a: 68:35:ee:3d:47:45:46:62:0b:85:d0:f1:79:60:98: 1f:8d:b1:ac:04:2a:02:ca:42:1f:f6:71:d3:f9:40: d5:cf:47:b1:a8:5a:d2:09:18:8b:48:8a:f5:3f:b9: ed:67:23:7a:a0:75:5e:c0:f3:f0:27:c4:36:48:84: a0:d8:b3:7f:6c:f9:0b:51:b0:19:b1:e9:4d:30:10: 5c:41:67:a8:8b:b9:f8:31:50:59:27:c8:6e:ba:e2: a0:9b:62:60:84:12:45:18:34:8a:c2:d3:7b:65:73: 15:1b:18:36:f3:46:e7:96:b8:ed:a4:b3:0e:1e:cd: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:39:6C:F6:37:39:D5:ED:0A:B1:DC:12:18:0F:03:21:95:30:73:E0 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6e:62:5f:c5:ca:ff:5a:a8:2f:f5:2c:18:2d:15:16:e2:25: 28:bc:03:d4:f8:44:9d:5a:65:09:01:d2:10:d1:14:fe:b6:0b: 30:b9:d9:b7:ef:ca:a8:61:e5:dc:e3:b7:9f:de:b1:49:35:ff: 65:c2:9c:74:ec:87:82:ff:bf:9a:56:0f:68:c2:db:f4:d2:bb: f0:35:29:0e:72:15:03:62:ab:41:e5:5b:c4:f7:af:ea:07:a0: cb:e2:40:59:9e:8a:51:ad:b3:0c:9a:de:b1:41:01:74:48:96: 1d:6a:9a:89:a7:3f:9d:ae:4b:c9:b2:11:cc:da:1a:d4:17:40: 08:e5:c5:52:ca:02:cb:3f:4a:d0:fe:85:7c:ef:71:84:ce:52: d8:a4:06:f2:cb:66:f2:31:65:97:eb:4f:d9:87:4d:fa:4a:d7: 6d:f3:73:c8:f4:16:ac:a7:91:27:02:98:22:f2:43:a3:b8:fc: 8d:e1:44:be:5d:48:3b:e8:76:b5:f9:a3:a4:f0:8f:67:f4:0a: ca:8b:e6:83:54:82:30:7e:9e:3b:05:96:55:fd:1e:a7:17:4d: 2f:52:05:d4:ac:67:2b:d9:b4:f5:19:08:ad:2c:11:d2:53:58: 8c:60:91:0f:6b:eb:68:16:5e:97:af:ce:96:64:87:d5:72:9c: 2f:27:a1:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjQwNTE4MTg0MzEzWhcNMjQwNTI1MTg0MzEzWjAYMRYwFAYD VQQDEw02NjQ4ZjZjMS02MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqc9cFuwOsxC49l6z/Vd2tRpbaATEBK1z3q+MR5bcMevUI9kzgciIlcQE30T giWB6wdDi2Sf8RHTTIKb+rMFBK/+r5orZtiYOCipMDMRO7LYCBlT7GSyv80pqwIt C8c7bjknTnMyjFJrTsrbkXBbN+RuLq71mE1FTjAl5eWOoDf1Ae99uGpoNe49R0VG YguF0PF5YJgfjbGsBCoCykIf9nHT+UDVz0exqFrSCRiLSIr1P7ntZyN6oHVewPPw J8Q2SISg2LN/bPkLUbAZselNMBBcQWeoi7n4MVBZJ8huuuKgm2JghBJFGDSKwtN7 ZXMVGxg280bnlrjtpLMOHs1HIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk5bPY3 OdXtCrHcEhgPAyGVMHPgMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmbmJfxcr/Wqgv9SwYLRUW4iUovAPU+ESdWmUJAdIQ0RT+tgswudm3 78qoYeXc47ef3rFJNf9lwpx07IeC/7+aVg9owtv00rvwNSkOchUDYqtB5VvE96/q B6DL4kBZnopRrbMMmt6xQQF0SJYdapqJpz+drkvJshHM2hrUF0AI5cVSygLLP0rQ /oV873GEzlLYpAbyy2byMWWX60/Zh036Stdt83PI9Basp5EnApgi8kOjuPyN4US+ XUg76Ha1+aOk8I9n9ArKi+aDVIIwfp47BZZV/R6nF00vUgXUrGcr2bT1GQitLBHS U1iMYJEPa+toFl6Xr86WZIfVcpwvJ6EU -----END CERTIFICATE-----Generated at Sat May 18 19:21:06 2024 by rpki-client on console-fra.rpki-client.org