$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: 5273mwXfDa2hP4iNdEMqUWB4GuZALjbmTCvnVlu9Z0k= Subject key identifier: 93:D0:6D:4F:6C:25:01:BB:E8:28:EF:FE:D6:12:DA:89:0F:D9:29:D1 Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 13DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 13D2 Signing time: Mon 22 Apr 2024 17:30:02 +0000 Manifest this update: Mon 22 Apr 2024 17:30:01 +0000 Manifest next update: Mon 29 Apr 2024 17:30:01 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: iesPI0zBcmkTKw6AfZjSU2InyFgFMr8L1TzHGsWDHSc=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: 3TAeoADoUSB3POhUma+elKDotqf5jHNMzMECIe1qOeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 17:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5083 (0x13db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Apr 22 17:30:01 2024 GMT Not After : Apr 29 17:30:01 2024 GMT Subject: CN=66269e99-e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:c4:f2:ce:e4:c9:7c:cd:91:6c:3f:d0:fc: 43:13:3e:1d:c9:7c:5d:b3:aa:1d:86:22:4a:9a:79: 9a:7d:12:b2:a7:bc:58:8f:b3:0d:db:09:83:cd:d9: ed:c1:ef:8f:20:fa:af:7e:88:09:dc:eb:f3:ea:37: 8c:fc:2e:7a:0c:da:3d:81:d1:34:c1:d7:1d:e5:b4: 78:3a:14:26:34:7d:f6:83:22:50:3b:f2:ad:00:42: 66:44:c8:04:d4:df:0c:95:16:87:c8:66:a4:8a:3a: 25:5c:81:db:cf:e1:4b:5a:3b:5f:2a:42:af:c5:ff: 2b:41:82:d1:2d:2c:24:a2:5b:3c:0d:b7:c1:47:4e: 23:84:1d:65:ab:c1:71:b2:e4:4a:6a:53:e4:78:2a: 6c:ec:f6:b7:4a:9c:ef:7a:96:b7:f8:51:95:44:ca: 1e:15:a1:a3:4e:e5:55:18:76:82:ae:a2:b4:03:4b: c0:08:ea:8b:ac:05:4d:10:7b:9e:fc:82:b8:08:8c: 74:1f:ee:a2:96:7f:a7:e7:cc:af:37:c8:34:87:5a: 70:52:32:82:ba:47:3b:68:6a:ed:32:00:d4:19:d0: 6c:31:66:f5:86:27:2c:c0:41:68:dd:6e:36:36:8d: 19:34:32:bf:12:92:d8:3d:7b:50:12:23:ba:cf:5b: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D0:6D:4F:6C:25:01:BB:E8:28:EF:FE:D6:12:DA:89:0F:D9:29:D1 X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:75:61:b7:07:37:68:56:64:af:3d:82:68:16:11:c6:67:f6: 0b:b3:b6:fc:15:0b:28:36:ac:89:30:70:b0:a3:4a:c7:02:aa: 7b:b2:a1:0f:ee:f4:67:d7:bc:1b:bf:b2:06:b2:8f:e8:ce:54: 69:43:37:68:ca:ba:7f:bd:74:3c:b8:18:3a:0b:e1:9c:b0:82: 28:86:eb:99:08:92:92:3e:bc:4e:81:5a:2c:f8:3d:43:a0:cd: 8b:4a:38:8d:79:2d:da:30:6d:d8:0b:fb:91:94:ed:b6:44:a7: 07:72:39:88:de:e2:f9:b3:eb:b1:2a:5e:27:55:26:7e:6a:59: 20:db:44:99:d9:ea:6e:74:fd:0a:74:2e:a0:ea:7b:40:e9:19: 84:cf:7d:98:c9:66:fb:8c:49:14:49:09:af:45:29:ee:76:74: 0c:e5:9b:ec:68:00:c4:43:43:b7:e2:e0:3e:96:96:65:12:92: a0:8d:7e:26:4c:8d:3e:23:5f:13:ee:a9:aa:2a:3e:52:3d:d1: 5e:2b:c0:ff:cc:53:d8:d6:2e:56:53:52:2d:b9:2b:6d:5a:66: 0e:ab:50:b7:64:22:1b:a8:78:f9:7a:74:af:a7:db:20:44:f0: c0:30:73:cd:85:d7:bb:d8:3c:92:9d:da:79:e0:5e:49:1d:7d: ee:3a:3f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjQwNDIyMTczMDAxWhcNMjQwNDI5MTczMDAxWjAYMRYwFAYD VQQDEw02NjI2OWU5OS1lMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyHE8s7kyXzNkWw/0PxDEz4dyXxds6odhiJKmnmafRKyp7xYj7MN2wmDzdnt we+PIPqvfogJ3Ovz6jeM/C56DNo9gdE0wdcd5bR4OhQmNH32gyJQO/KtAEJmRMgE 1N8MlRaHyGakijolXIHbz+FLWjtfKkKvxf8rQYLRLSwkols8DbfBR04jhB1lq8Fx suRKalPkeCps7Pa3Spzvepa3+FGVRMoeFaGjTuVVGHaCrqK0A0vACOqLrAVNEHue /IK4CIx0H+6iln+n58yvN8g0h1pwUjKCukc7aGrtMgDUGdBsMWb1hicswEFo3W42 No0ZNDK/EpLYPXtQEiO6z1t/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPQbU9s JQG76Cjv/tYS2okP2SnRMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedWG3BzdoVmSvPYJoFhHGZ/YLs7b8FQsoNqyJMHCwo0rHAqp7sqEP 7vRn17wbv7IGso/ozlRpQzdoyrp/vXQ8uBg6C+GcsIIohuuZCJKSPrxOgVos+D1D oM2LSjiNeS3aMG3YC/uRlO22RKcHcjmI3uL5s+uxKl4nVSZ+alkg20SZ2epudP0K dC6g6ntA6RmEz32YyWb7jEkUSQmvRSnudnQM5ZvsaADEQ0O34uA+lpZlEpKgjX4m TI0+I18T7qmqKj5SPdFeK8D/zFPY1i5WU1ItuSttWmYOq1C3ZCIbqHj5enSvp9sg RPDAMHPNhde72DySndp54F5JHX3uOj+Z -----END CERTIFICATE-----Generated at Tue Apr 23 18:32:38 2024 by rpki-client on console-fra.rpki-client.org