$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft File: 8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json) Hash identifier: DoGDBrmrlsd7ZqvL2pN0dzTUFaDYgn04f+EL0apXGGQ= Subject key identifier: 31:52:E5:B6:AB:A5:EB:05:E4:5C:68:9B:AC:3C:59:3A:36:E4:6C:CC Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 Certificate issuer: /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft Manifest number: 067A Signing time: Thu 02 May 2024 23:35:03 +0000 Manifest this update: Thu 02 May 2024 23:35:02 +0000 Manifest next update: Thu 09 May 2024 23:35:02 +0000 Files and hashes: 1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: lIrYB8sUrzDuSpcQfx4lCtutccjMK0QYvKDpz0O09W8=) 2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: BUCMAVGIMlnR8k8i7KszkAOXuwUyfuND14A8FxskuTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Validity Not Before: May 2 23:35:02 2024 GMT Not After : May 9 23:35:02 2024 GMT Subject: CN=66342327-2cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:77:3d:df:3b:f7:2a:b0:39:cc:af:9d:d4: 19:77:00:07:c5:dd:b0:aa:91:ee:dc:05:aa:1a:4d: 45:4f:b2:bb:32:c3:5e:03:da:5a:1d:c0:32:4a:f9: bb:c3:8b:7b:da:42:9e:c4:ff:24:a5:8b:b5:11:13: 33:00:06:c2:9e:b3:3f:12:8c:b1:ea:ba:68:e9:d9: 1b:b3:1d:29:9c:ab:5b:1e:a7:68:d8:fa:5b:05:6d: d5:8f:f5:7b:24:52:68:7c:35:af:1c:f0:26:7f:3f: e6:5e:23:99:38:97:b5:37:c8:25:79:f4:33:00:6f: c3:bc:a2:67:0f:09:4e:99:e1:f1:92:44:33:7d:7b: 3a:a6:15:00:a0:65:d0:81:76:64:6a:66:97:e3:e4: b9:d6:3c:49:de:cb:f7:37:b5:8d:09:35:c5:1f:b0: 5b:04:05:b7:24:e4:4b:b1:46:f0:cd:49:0c:f0:e3: 99:78:a3:4c:93:36:fe:ab:04:af:61:05:79:a1:ad: 19:de:cf:c5:c0:57:96:4e:95:c4:39:90:9c:0c:b1: 68:8e:41:aa:9a:a0:1b:d4:35:54:f6:ed:5e:9c:08: 3e:3b:b6:ab:9a:46:71:56:f3:5b:c9:87:86:32:40: 6c:fc:a5:b5:cb:e1:b2:39:66:22:9f:9d:9e:30:ef: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:E5:B6:AB:A5:EB:05:E4:5C:68:9B:AC:3C:59:3A:36:E4:6C:CC X509v3 Authority Key Identifier: keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:ea:90:86:51:6e:cf:38:ea:38:42:e9:24:aa:b3:ac:04: ba:ad:17:46:47:26:37:96:f9:37:0c:b1:a1:63:37:3d:57:45: a1:5d:65:6f:ff:0c:da:89:a0:fd:cd:a1:5b:d9:1d:25:f2:d8: 42:de:de:77:9b:eb:66:3c:0a:94:66:6d:6c:49:e7:e5:b3:b4: ab:73:57:d6:bc:a4:00:75:2d:fe:46:ba:fa:c9:e0:84:cf:2e: eb:f5:ba:c8:94:65:bf:9e:ee:05:65:61:26:5a:ba:49:5c:ce: ce:de:05:fe:96:2b:7e:b0:95:bf:bd:0e:87:e0:8f:d7:7f:1b: a1:a6:57:3d:d0:70:7c:65:fd:1a:c5:86:d7:db:ab:08:3e:ce: 71:3b:28:88:42:69:6e:86:37:ba:c3:86:9d:9c:19:1e:af:c5: 43:97:d6:4e:90:fe:6c:9d:f8:43:45:f4:04:b5:3c:cf:f0:7f: fd:91:1e:5c:a8:7f:87:b3:1e:03:de:98:c5:4a:41:fa:e5:b9: e0:08:1c:56:8c:f1:66:a6:cd:f5:97:9d:ac:2d:5e:62:36:57: 58:01:71:f2:8d:9d:3a:6c:92:35:f0:33:50:2e:9e:37:f7:b4: 34:f5:f3:74:d8:9b:31:66:25:f5:4c:d4:7b:c4:cc:7f:e9:6e: 78:e0:37:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND NEU4Qzk2MDAwHhcNMjQwNTAyMjMzNTAyWhcNMjQwNTA5MjMzNTAyWjAYMRYwFAYD VQQDEw02NjM0MjMyNy0yY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpB3Pd879yqwOcyvndQZdwAHxd2wqpHu3AWqGk1FT7K7MsNeA9paHcAySvm7 w4t72kKexP8kpYu1ERMzAAbCnrM/Eoyx6rpo6dkbsx0pnKtbHqdo2PpbBW3Vj/V7 JFJofDWvHPAmfz/mXiOZOJe1N8glefQzAG/DvKJnDwlOmeHxkkQzfXs6phUAoGXQ gXZkamaX4+S51jxJ3sv3N7WNCTXFH7BbBAW3JORLsUbwzUkM8OOZeKNMkzb+qwSv YQV5oa0Z3s/FwFeWTpXEOZCcDLFojkGqmqAb1DVU9u1enAg+O7armkZxVvNbyYeG MkBs/KW1y+GyOWYin52eMO9WTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFS5bar pesF5Fxom6w8WTo25GzMMB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNG+qQhlFuzzjqOELpJKqzrAS6rRdGRyY3lvk3DLGhYzc9V0WhXWVv /wzaiaD9zaFb2R0l8thC3t53m+tmPAqUZm1sSefls7Src1fWvKQAdS3+Rrr6yeCE zy7r9brIlGW/nu4FZWEmWrpJXM7O3gX+lit+sJW/vQ6H4I/Xfxuhplc90HB8Zf0a xYbX26sIPs5xOyiIQmluhje6w4adnBker8VDl9ZOkP5snfhDRfQEtTzP8H/9kR5c qH+Hsx4D3pjFSkH65bngCBxWjPFmps31l52sLV5iNldYAXHyjZ06bJI18DNQLp43 97Q09fN02JsxZiX1TNR7xMx/6W544Ddq -----END CERTIFICATE-----Generated at Fri May 3 00:28:38 2024 by rpki-client on console-fra.rpki-client.org