$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: fjRzgtZQi7iOjc63fSGIChVtk/mdiV4WdG7p/Q7kzwc= Subject key identifier: 11:E2:3C:E8:07:21:46:83:0D:A8:51:90:7C:3B:B0:C0:C9:E1:DC:DC Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 33D2 Signing time: Tue 30 Apr 2024 14:20:13 +0000 Manifest this update: Tue 30 Apr 2024 14:20:13 +0000 Manifest next update: Tue 07 May 2024 14:20:13 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: 9aM7rvWJBejoJEp0DAiBfiy9COaZ3shBqLboeMYKH40=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: c22mNO/5Hdkx8PFMzFu3jsnlkAhn1ItEIOY2vepnAxw=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 4DCzMrS23y6D/kybetlk2S0srHOzdeBvs5HMeNPfJ5E=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: 5+0P2oMrZxwSpuHlRVHY+lcirmBZELX1piLb/+FKwgs=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: gJW+TAeBH6/09GAAcj5GBSbWEG1hRAtGAZaYFpZwTIU=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: E3U3F8lmAlNXbZSa6yPrVPMaCU4q4mH/ZxI+07ugJOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13361 (0x3431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Apr 30 14:20:13 2024 GMT Not After : May 7 14:20:13 2024 GMT Subject: CN=6630fe1d-b230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:8e:16:0a:37:ca:3a:98:db:2a:e8:7b:9d: 9b:94:17:9f:ab:74:13:c6:9d:8e:10:7c:b1:b1:96: ff:e5:cf:27:7e:13:03:ac:72:f4:7c:a7:c0:56:0d: 16:4f:3c:04:c4:a8:71:c8:f7:a6:08:4e:05:c3:52: 00:bb:5a:2f:17:38:17:5a:01:5f:33:52:0a:50:81: 6f:4b:23:60:b8:e7:8e:04:58:ae:1a:f5:f3:26:98: 17:9a:0f:f6:06:bb:68:dd:42:3e:fd:98:3d:e1:07: 64:ef:19:25:52:3f:31:4a:5a:45:e7:9f:14:b8:4a: 16:c5:12:f3:b3:dd:a7:9b:e3:03:51:06:92:7d:c4: bd:56:2c:67:20:4c:c4:59:8b:eb:c1:b8:b7:bd:ea: 17:13:78:90:32:88:dd:56:7f:1c:6f:60:3a:9c:b3: 20:b5:57:22:47:24:af:16:f3:a0:64:93:fd:36:a3: db:93:8c:72:ee:78:63:ce:54:f6:02:b8:5e:59:1d: 9b:3c:68:6b:ce:57:f2:17:e4:5e:72:f0:0b:d5:8c: 8d:62:93:eb:a5:33:6c:40:9a:e7:d9:a8:e7:f3:9b: f8:5f:02:c9:d7:bd:e4:df:31:a9:71:6a:8f:67:34: c8:24:03:f3:f0:e2:78:07:1b:6c:43:da:23:c5:d2: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:3C:E8:07:21:46:83:0D:A8:51:90:7C:3B:B0:C0:C9:E1:DC:DC X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:81:1f:b3:0f:d9:c8:4a:08:b4:6f:36:12:5a:97:b0:fe:77: 65:83:9c:9b:4c:1d:a0:45:8a:88:65:1a:a7:ad:27:34:31:1c: 60:06:53:95:94:5d:27:b2:92:75:c0:65:66:57:38:7a:28:a6: 23:e3:6a:9c:92:1b:62:19:4a:aa:11:b3:e8:fb:e3:4b:61:a5: 1d:be:5b:ce:a3:28:73:53:55:a9:3e:cc:0a:63:c2:19:33:dd: cb:2b:50:ba:35:cb:3a:76:a6:4e:b3:b1:7c:24:4c:a6:10:63: e0:90:52:a6:9e:23:de:93:ce:32:96:1a:fa:23:d1:d6:c4:c1: 33:6d:a5:44:ce:6c:78:a6:14:6a:03:74:6e:14:93:f9:86:a6: 98:35:6e:c1:76:59:90:e8:cf:d0:60:ea:2c:74:be:fc:e3:49: 9e:e3:4d:22:5b:39:f1:90:ab:5d:fd:e1:aa:11:59:8e:e9:64: 52:57:31:d1:29:68:29:1c:e9:fc:ef:eb:6b:30:e8:89:0c:a8: 5c:b5:88:69:92:cd:07:79:0a:a7:a5:06:e6:f1:d4:26:d3:7e: 88:87:25:43:57:3a:ae:eb:78:a4:86:e4:d3:9c:54:c1:6a:58: 0a:15:22:89:36:3f:fd:11:0a:57:b8:81:6a:fa:e3:63:37:ad: ef:ad:9d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjQwNDMwMTQyMDEzWhcNMjQwNTA3MTQyMDEzWjAYMRYwFAYD VQQDEw02NjMwZmUxZC1iMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKaOFgo3yjqY2yroe52blBefq3QTxp2OEHyxsZb/5c8nfhMDrHL0fKfAVg0W TzwExKhxyPemCE4Fw1IAu1ovFzgXWgFfM1IKUIFvSyNguOeOBFiuGvXzJpgXmg/2 Brto3UI+/Zg94Qdk7xklUj8xSlpF558UuEoWxRLzs92nm+MDUQaSfcS9VixnIEzE WYvrwbi3veoXE3iQMojdVn8cb2A6nLMgtVciRySvFvOgZJP9NqPbk4xy7nhjzlT2 ArheWR2bPGhrzlfyF+RecvAL1YyNYpPrpTNsQJrn2ajn85v4XwLJ173k3zGpcWqP ZzTIJAPz8OJ4BxtsQ9ojxdKXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHiPOgH IUaDDahRkHw7sMDJ4dzcMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkgR+zD9nISgi0bzYSWpew/ndlg5ybTB2gRYqIZRqnrSc0MRxgBlOV lF0nspJ1wGVmVzh6KKYj42qckhtiGUqqEbPo++NLYaUdvlvOoyhzU1WpPswKY8IZ M93LK1C6Ncs6dqZOs7F8JEymEGPgkFKmniPek84ylhr6I9HWxMEzbaVEzmx4phRq A3RuFJP5hqaYNW7BdlmQ6M/QYOosdL7840me400iWznxkKtd/eGqEVmO6WRSVzHR KWgpHOn87+trMOiJDKhctYhpks0HeQqnpQbm8dQm036IhyVDVzqu63ikhuTTnFTB algKFSKJNj/9EQpXuIFq+uNjN63vrZ1W -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:10 2024 by rpki-client on console-ams.rpki-client.org