$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: eNmFewqyYy3SajTSb5dzdHTZZGHWEDgWhVwK310Lbvs= Subject key identifier: FA:D5:E4:8F:2D:19:08:43:BE:B1:56:5F:E6:BB:9A:D5:CB:5E:32:5D Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 09A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 113B Signing time: Mon 06 May 2024 20:59:06 +0000 Manifest this update: Mon 06 May 2024 20:59:05 +0000 Manifest next update: Mon 13 May 2024 20:59:05 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: 2oAs7u1LsjnvJKYaIB8rMNzca+UbfJIOSCnrEjAKd7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2464 (0x9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: May 6 20:59:05 2024 GMT Not After : May 13 20:59:05 2024 GMT Subject: CN=66394499-ff61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:89:ef:c3:ff:ab:52:ad:f7:1c:78:8d:98: 9d:07:30:cf:30:61:b9:37:f6:3c:aa:4a:89:11:31: 1d:8c:94:06:53:fc:53:3d:40:0c:38:77:1f:20:85: b3:99:33:c9:d0:01:08:97:d7:59:e7:20:c0:bb:23: 99:1e:97:be:01:f0:e9:67:2d:6f:41:8a:ce:a5:c7: 70:87:45:8c:23:4d:60:7b:25:b0:51:a0:69:5e:72: f2:de:4a:2d:29:55:7d:95:42:e1:91:91:69:5f:87: 4b:df:4b:5c:8f:2d:8d:0a:42:a1:cb:be:a1:ac:15: 36:20:3c:a3:72:04:30:e0:4f:a8:de:b5:b8:fd:43: 47:13:a8:cf:30:de:59:4f:e6:29:01:06:04:56:e2: 61:49:a4:ef:a6:19:82:55:f7:13:45:f3:fb:81:74: 1a:84:ed:19:00:2d:a1:8f:72:33:2c:10:00:30:ff: fe:5c:6e:e1:0c:f7:02:47:ef:90:18:4d:0c:bd:7d: 3d:63:d6:7d:81:42:ad:48:6f:2b:69:54:26:c1:f8: 69:5f:c1:e2:96:24:5c:ce:87:bc:32:cc:95:47:20: 5e:cf:1c:3d:dc:d5:2b:c1:fa:4b:5b:13:b9:aa:b4: d2:f0:f6:b4:3d:8d:a4:d7:1a:e6:6c:44:b4:2e:12: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D5:E4:8F:2D:19:08:43:BE:B1:56:5F:E6:BB:9A:D5:CB:5E:32:5D X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:17:6f:a9:08:36:5b:8c:69:a7:2b:27:38:6a:26:1e:b0:19: 58:f8:5e:38:96:02:58:ee:0d:78:9e:95:15:ab:37:ae:0c:c9: ca:42:c8:35:65:6a:f9:58:8c:cc:33:9e:10:ce:1c:f8:e7:af: 71:d4:ec:12:b1:c9:b3:ba:7a:9e:30:97:5e:71:16:0f:1c:b6: 74:d6:85:f8:48:54:7c:ff:68:78:b2:93:9b:79:39:91:a8:01: 49:4d:5e:25:24:a2:27:53:f8:41:70:2b:c0:a8:25:a1:c3:34: 95:cd:6e:86:02:61:aa:18:a6:1a:af:1d:f9:2d:82:88:90:41: 22:8a:5e:21:e0:53:07:f6:a1:6c:c5:23:01:79:44:c1:2e:9a: fc:d8:d8:ae:67:1b:28:44:28:3e:35:a5:40:c5:8e:88:e9:ba: 36:be:93:9a:6c:9f:17:96:e2:b6:b2:3b:f9:fa:7b:5b:43:1f: 1a:11:b6:b8:b1:39:b9:ca:c5:b8:c8:9b:5b:1e:77:47:be:13: cb:40:97:db:97:b0:40:ab:cc:82:4c:5b:f5:ce:80:03:98:87: 37:d1:30:4f:b4:9d:04:b9:2d:92:57:39:85:5c:66:e9:53:0b: 51:c1:7c:bd:f5:85:20:07:d7:de:13:a2:c0:9f:da:8e:5f:33: 22:57:49:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjQwNTA2MjA1OTA1WhcNMjQwNTEzMjA1OTA1WjAYMRYwFAYD VQQDEw02NjM5NDQ5OS1mZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySSJ78P/q1Kt9xx4jZidBzDPMGG5N/Y8qkqJETEdjJQGU/xTPUAMOHcfIIWz mTPJ0AEIl9dZ5yDAuyOZHpe+AfDpZy1vQYrOpcdwh0WMI01geyWwUaBpXnLy3kot KVV9lULhkZFpX4dL30tcjy2NCkKhy76hrBU2IDyjcgQw4E+o3rW4/UNHE6jPMN5Z T+YpAQYEVuJhSaTvphmCVfcTRfP7gXQahO0ZAC2hj3IzLBAAMP/+XG7hDPcCR++Q GE0MvX09Y9Z9gUKtSG8raVQmwfhpX8HiliRczoe8MsyVRyBezxw93NUrwfpLWxO5 qrTS8Pa0PY2k1xrmbES0LhKg1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrV5I8t GQhDvrFWX+a7mtXLXjJdMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzF2+pCDZbjGmnKyc4aiYesBlY+F44lgJY7g14npUVqzeuDMnKQsg1 ZWr5WIzMM54Qzhz4569x1OwSscmzunqeMJdecRYPHLZ01oX4SFR8/2h4spObeTmR qAFJTV4lJKInU/hBcCvAqCWhwzSVzW6GAmGqGKYarx35LYKIkEEiil4h4FMH9qFs xSMBeUTBLpr82NiuZxsoRCg+NaVAxY6I6bo2vpOabJ8XluK2sjv5+ntbQx8aEba4 sTm5ysW4yJtbHndHvhPLQJfbl7BAq8yCTFv1zoADmIc30TBPtJ0EuS2SVzmFXGbp UwtRwXy99YUgB9feE6LAn9qOXzMiV0mO -----END CERTIFICATE-----Generated at Mon May 6 22:40:54 2024 by rpki-client on console-ams.rpki-client.org