$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: HsXY4M1ol9X+ywcoNKNqBAnxVp4FLqZWuUoudH6xWBk= Subject key identifier: F8:19:C1:CC:5C:F9:63:03:0C:2F:11:21:0A:AF:52:61:2A:36:E3:EF Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 12DB Signing time: Tue 30 Apr 2024 19:52:19 +0000 Manifest this update: Tue 30 Apr 2024 19:52:19 +0000 Manifest next update: Tue 07 May 2024 19:52:19 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: 8T1zWOna0p+db/eu/7uVnJuwhz2wgcGf5HwUeQRlLns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Apr 30 19:52:19 2024 GMT Not After : May 7 19:52:19 2024 GMT Subject: CN=66314bf3-cf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:28:a7:e8:33:89:bc:b8:a3:97:2c:28:c2: 40:8f:89:50:aa:8d:d5:04:7a:f3:02:17:3e:cb:8f: b4:a8:ec:da:3f:08:17:bf:13:fe:d2:33:77:a5:70: c5:b9:67:57:29:9e:b8:4c:f0:70:53:87:3a:64:cc: fe:72:16:d2:96:4c:7a:60:7e:19:ad:69:fd:0b:11: 6d:6a:de:42:07:18:1f:c7:6e:47:6c:bd:41:de:d1: a2:99:6b:27:6c:49:75:38:41:94:ff:83:84:1a:22: ec:15:4d:bc:9e:e5:c8:12:38:90:a1:1a:a1:88:ca: e5:b9:fd:42:a0:66:a5:48:c3:83:ad:53:9c:22:f4: c2:d6:9f:14:80:5c:55:67:2c:10:04:6b:b7:95:d9: 5d:80:99:b7:24:66:9d:c4:df:76:28:4c:5a:75:04: 4b:7f:9d:65:12:c6:23:d2:9c:db:6b:c2:f8:b9:19: 8c:bb:f7:55:ac:7d:6b:4e:b2:6d:26:6a:a4:14:99: b0:c1:11:7f:86:38:af:30:97:28:bc:37:e9:23:bb: b5:5f:0b:1c:17:a4:c4:f9:4a:2d:c1:3c:68:76:2d: 8f:ee:e5:24:78:7e:10:a6:6f:10:fa:66:8f:e9:d0: 66:43:4f:4a:31:12:9a:61:8c:4d:81:dc:c1:28:2b: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:C1:CC:5C:F9:63:03:0C:2F:11:21:0A:AF:52:61:2A:36:E3:EF X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6a:32:b1:15:25:c5:29:6a:78:82:15:25:07:34:9e:be:5e: 92:88:9e:55:37:f7:ee:3f:1c:cb:bc:2f:9d:93:3c:0f:26:c4: bf:f0:e3:93:bc:8c:4c:6b:cc:25:55:c9:8e:f9:11:90:4f:c4: 83:3e:84:73:59:2d:e1:86:84:a0:1d:6f:90:e0:0d:72:b0:d6: f2:cf:90:dc:69:3b:13:3f:d9:ac:34:4c:82:3d:51:e2:74:a5: 8d:f8:81:d2:89:db:44:be:74:8c:39:d7:d2:9e:76:14:40:df: 31:df:5e:f2:51:70:67:aa:c1:5d:9a:4e:56:3f:6c:41:71:87: 46:a6:a5:92:a8:8c:be:74:57:10:93:ec:91:30:ff:44:58:6a: ec:ae:d7:26:a8:6c:ec:e6:a6:e7:ac:2a:e7:eb:a6:4a:d8:09: 59:4c:5f:ce:88:f8:7e:00:15:f3:66:6a:44:41:1d:ae:68:dd: 97:97:36:80:10:ec:db:73:e7:18:fb:12:2c:62:06:72:e6:70: 68:eb:e0:80:24:c7:c9:1f:d4:67:8f:4c:a5:c5:b6:bf:7d:73: 2d:c0:b1:72:05:31:25:73:29:2b:05:94:9f:1d:8e:c3:01:dc: 75:1d:95:81:0a:89:44:5a:d2:50:37:26:d5:e6:58:b8:44:ac: f7:91:42:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjQwNDMwMTk1MjE5WhcNMjQwNTA3MTk1MjE5WjAYMRYwFAYD VQQDEw02NjMxNGJmMy1jZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7Aop+gziby4o5csKMJAj4lQqo3VBHrzAhc+y4+0qOzaPwgXvxP+0jN3pXDF uWdXKZ64TPBwU4c6ZMz+chbSlkx6YH4ZrWn9CxFtat5CBxgfx25HbL1B3tGimWsn bEl1OEGU/4OEGiLsFU28nuXIEjiQoRqhiMrluf1CoGalSMODrVOcIvTC1p8UgFxV ZywQBGu3ldldgJm3JGadxN92KExadQRLf51lEsYj0pzba8L4uRmMu/dVrH1rTrJt JmqkFJmwwRF/hjivMJcovDfpI7u1XwscF6TE+UotwTxodi2P7uUkeH4Qpm8Q+maP 6dBmQ09KMRKaYYxNgdzBKCv57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgZwcxc +WMDDC8RIQqvUmEqNuPvMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvajKxFSXFKWp4ghUlBzSevl6SiJ5VN/fuPxzLvC+dkzwPJsS/8OOT vIxMa8wlVcmO+RGQT8SDPoRzWS3hhoSgHW+Q4A1ysNbyz5DcaTsTP9msNEyCPVHi dKWN+IHSidtEvnSMOdfSnnYUQN8x317yUXBnqsFdmk5WP2xBcYdGpqWSqIy+dFcQ k+yRMP9EWGrsrtcmqGzs5qbnrCrn66ZK2AlZTF/OiPh+ABXzZmpEQR2uaN2XlzaA EOzbc+cY+xIsYgZy5nBo6+CAJMfJH9Rnj0ylxba/fXMtwLFyBTElcykrBZSfHY7D Adx1HZWBColEWtJQNybV5li4RKz3kUJh -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:52 2024 by rpki-client on console-ams.rpki-client.org