$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: sAmVguwPkSVHq/PCvl8XsR4ndWj/Ilya1nLkuO6xH9Y= Subject key identifier: 99:F0:72:45:6E:7E:06:2A:BC:43:54:B3:D3:1D:E0:E3:D8:90:08:FA Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 06E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 06DF Signing time: Mon 06 May 2024 22:53:08 +0000 Manifest this update: Mon 06 May 2024 22:53:07 +0000 Manifest next update: Mon 13 May 2024 22:53:07 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: cR/9LWgp+uFDLJ39chN4QQXcVU8UlMdRCrIauery+io=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: 9aX02VEfMunOMBUH2LvHCcIZVyh/HAUdUMwOncauNcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1763 (0x6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: May 6 22:53:07 2024 GMT Not After : May 13 22:53:07 2024 GMT Subject: CN=66395f54-2af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:2e:07:7a:01:9e:6a:0c:cd:99:56:5d:44: f2:8d:dc:45:2c:14:e3:cf:13:d5:0f:17:92:3f:01: 98:32:7d:c7:9a:a0:bc:2b:30:de:14:6f:64:6e:84: 8b:9f:e1:cd:a5:52:67:88:b3:f9:20:2f:cd:5e:67: 7f:8c:35:81:95:88:d9:6c:7b:a9:cc:42:05:dc:50: be:b7:ad:0f:bc:c6:69:9e:68:87:35:d4:77:be:fa: d0:cf:11:81:f6:27:c0:c8:14:89:31:4b:3b:f4:94: 05:b6:22:44:ce:e2:17:ef:3e:20:58:07:93:33:a0: 63:de:04:1a:e9:af:ae:98:4d:ab:2c:de:b5:33:01: 2b:5e:de:5b:81:21:f2:02:60:b3:47:ea:04:3a:38: e8:b6:4d:8e:af:c3:11:37:c9:cc:4c:39:6a:a1:41: f6:97:12:97:3d:c7:81:64:e9:53:f0:4e:6d:53:ec: df:24:05:10:70:10:62:a6:ba:bb:79:c8:fd:c3:d9: 51:9f:7b:a2:6c:55:70:d5:a7:d2:d3:7b:22:d0:96: 80:32:a7:54:90:c3:4b:af:5c:fc:de:6e:93:eb:fe: da:af:34:d5:b2:9c:ff:af:ef:da:9a:9b:84:84:9c: 28:56:86:8d:ea:35:04:67:fb:60:48:fd:c3:90:68: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F0:72:45:6E:7E:06:2A:BC:43:54:B3:D3:1D:E0:E3:D8:90:08:FA X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c0:3d:a6:52:b3:fc:d8:78:ef:66:6c:d1:ce:db:85:5c:8f: 89:2a:b3:a4:c3:e7:e5:2c:81:9e:41:f5:9a:32:62:f7:f5:04: 64:2e:66:93:a4:67:b3:62:16:d1:11:f1:0d:77:e4:f9:c7:37: 6d:9a:ee:f3:57:73:7e:ff:d6:fd:f7:8e:1a:29:fd:23:a9:6b: e2:2a:72:91:cf:ae:f7:ca:34:a4:7c:b5:65:a0:9f:5e:b8:61: b7:f0:e6:83:d7:17:63:66:e2:b2:57:42:f6:d2:a0:f3:21:2b: 39:c7:ae:a6:90:a4:70:9f:db:d6:c9:0f:d5:76:05:ea:ba:3a: 12:1d:ba:95:d9:53:bd:c7:0c:0d:2d:13:0f:e4:db:42:1d:be: 63:51:60:12:17:61:0e:a8:53:77:ad:50:6a:6c:79:90:6c:48: ee:49:8b:01:81:fd:53:c4:59:62:26:6d:18:2c:1c:c6:68:25: 89:16:c3:62:74:d5:20:56:cd:1e:4f:45:6a:d6:54:85:dd:c7: a1:f4:3a:cb:93:b2:5c:0c:be:2e:de:c8:40:39:98:0d:13:e3: e9:eb:03:88:18:f4:c5:43:2b:01:52:de:90:a0:d4:b3:b9:da: 5d:4b:a7:26:70:75:7e:2a:cd:fe:be:df:29:e6:25:ff:a3:cd: b3:58:3e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjQwNTA2MjI1MzA3WhcNMjQwNTEzMjI1MzA3WjAYMRYwFAYD VQQDEw02NjM5NWY1NC0yYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxMuB3oBnmoMzZlWXUTyjdxFLBTjzxPVDxeSPwGYMn3HmqC8KzDeFG9kboSL n+HNpVJniLP5IC/NXmd/jDWBlYjZbHupzEIF3FC+t60PvMZpnmiHNdR3vvrQzxGB 9ifAyBSJMUs79JQFtiJEzuIX7z4gWAeTM6Bj3gQa6a+umE2rLN61MwErXt5bgSHy AmCzR+oEOjjotk2Or8MRN8nMTDlqoUH2lxKXPceBZOlT8E5tU+zfJAUQcBBiprq7 ecj9w9lRn3uibFVw1afS03si0JaAMqdUkMNLr1z83m6T6/7arzTVspz/r+/ampuE hJwoVoaN6jUEZ/tgSP3DkGhq9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnwckVu fgYqvENUs9Md4OPYkAj6MB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANwD2mUrP82HjvZmzRztuFXI+JKrOkw+flLIGeQfWaMmL39QRkLmaT pGezYhbREfENd+T5xzdtmu7zV3N+/9b9944aKf0jqWviKnKRz673yjSkfLVloJ9e uGG38OaD1xdjZuKyV0L20qDzISs5x66mkKRwn9vWyQ/VdgXqujoSHbqV2VO9xwwN LRMP5NtCHb5jUWASF2EOqFN3rVBqbHmQbEjuSYsBgf1TxFliJm0YLBzGaCWJFsNi dNUgVs0eT0Vq1lSF3ceh9DrLk7JcDL4u3shAOZgNE+Pp6wOIGPTFQysBUt6QoNSz udpdS6cmcHV+Ks3+vt8p5iX/o82zWD4h -----END CERTIFICATE-----Generated at Tue May 7 01:58:17 2024 by rpki-client on console-fra.rpki-client.org