$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: 5lH8xH6Upx5AD9UXSt68d23iGSr4f8YQ3iR6thAPCLo= Subject key identifier: 58:93:3C:5E:16:63:46:29:85:EE:86:DF:1E:91:4B:0B:3B:6E:31:41 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 05D3 Signing time: Sun 05 May 2024 00:14:08 +0000 Manifest this update: Sun 05 May 2024 00:14:08 +0000 Manifest next update: Sun 12 May 2024 00:14:08 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: sdAKWWjyPIOfuFaH1wmT2wadgAYAKFwnmRE2BOmUCi8=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: lD6q0sRf2yTNxzGHBdawOBClgrppu6NH/3PWIE+9RCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: May 5 00:14:08 2024 GMT Not After : May 12 00:14:08 2024 GMT Subject: CN=6636cf50-9646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:46:f9:32:ae:95:ab:54:1f:2b:49:70:c2: 1a:76:3e:95:a9:5c:7d:47:ce:9f:b5:7b:35:92:88: 11:dc:74:a0:2b:b3:9a:5e:2c:3b:d3:62:ca:02:20: 79:32:07:c0:50:46:8e:22:b6:07:12:d7:c3:22:13: 2f:8f:7f:e7:9d:73:08:8f:65:57:07:e2:ea:2d:e0: 7a:84:3e:e3:bd:a0:13:3f:e8:9e:f7:7d:d8:ba:60: 15:0a:6e:6f:91:07:17:39:f7:d8:d1:77:a1:92:a6: 19:a9:be:d2:b3:6f:95:af:8b:81:f4:e2:0a:a6:25: 84:eb:c3:ba:d3:0a:28:28:3b:25:e2:d2:0e:76:3b: f1:02:e4:12:8f:be:5a:60:d2:b7:a6:36:02:fe:f6: 92:78:fa:42:11:f1:d9:3d:1c:c9:3b:9a:05:f5:02: 5d:0a:98:4c:15:4c:cf:75:ae:1b:f5:06:3c:3a:2e: c2:44:b0:f1:ed:d9:61:6d:c0:a6:1b:4a:71:b2:f2: b6:9a:11:b3:d9:46:04:3e:78:3d:a0:7b:4a:1c:fa: 74:74:e1:ef:39:11:66:e0:2f:11:6e:4a:35:73:05: 1f:99:a4:6e:29:99:3e:bb:10:fd:2c:f9:8f:c0:a7: 90:89:0f:8f:40:05:73:2c:18:f9:15:2b:f9:ad:46: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:93:3C:5E:16:63:46:29:85:EE:86:DF:1E:91:4B:0B:3B:6E:31:41 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:85:39:2d:df:f3:d5:27:a6:81:f4:f5:fd:59:43:19:06:25: 34:e6:fa:8d:7d:3d:79:56:1a:24:59:9c:f7:71:10:c2:36:41: 2e:21:ba:80:ae:2c:a9:45:2f:f2:bf:34:6d:93:be:49:1e:13: 9f:5a:27:53:3f:ca:35:0d:65:99:6c:dc:c9:36:04:cc:41:a4: 75:c2:c1:3a:8d:90:df:3d:43:36:5f:d7:d8:cf:fa:84:cf:11: 32:59:89:b6:56:71:8e:a3:ba:c1:17:26:20:e1:82:2a:9b:bf: d4:10:ef:62:ec:8a:f9:b9:84:84:cc:b6:5d:26:fb:96:d5:ce: e0:52:62:a7:e7:31:3e:72:f7:92:c7:21:78:78:0a:6f:37:1a: ce:51:83:8d:47:80:d0:2c:68:cd:36:96:e6:d4:43:88:84:93: 0d:2f:b1:26:96:0d:72:ae:0f:9e:bd:2f:99:2f:47:62:34:9f: a8:08:d6:23:7b:c2:3b:a6:34:c7:ef:24:24:0f:7c:6a:4d:f6: 44:ea:a9:90:5b:f4:93:16:f2:52:61:fa:13:8c:fa:59:1d:1d: e8:1e:64:40:10:20:e7:f8:7e:8a:9c:c1:cc:a1:65:10:5d:bd: 86:f1:ad:0e:e2:4c:8c:e1:2e:a4:53:75:12:14:bc:de:53:d5: db:74:55:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjQwNTA1MDAxNDA4WhcNMjQwNTEyMDAxNDA4WjAYMRYwFAYD VQQDEw02NjM2Y2Y1MC05NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36RG+TKulatUHytJcMIadj6VqVx9R86ftXs1kogR3HSgK7OaXiw702LKAiB5 MgfAUEaOIrYHEtfDIhMvj3/nnXMIj2VXB+LqLeB6hD7jvaATP+ie933YumAVCm5v kQcXOffY0XehkqYZqb7Ss2+Vr4uB9OIKpiWE68O60wooKDsl4tIOdjvxAuQSj75a YNK3pjYC/vaSePpCEfHZPRzJO5oF9QJdCphMFUzPda4b9QY8Oi7CRLDx7dlhbcCm G0pxsvK2mhGz2UYEPng9oHtKHPp0dOHvORFm4C8Rbko1cwUfmaRuKZk+uxD9LPmP wKeQiQ+PQAVzLBj5FSv5rUZW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiTPF4W Y0Yphe6G3x6RSws7bjFBMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALhTkt3/PVJ6aB9PX9WUMZBiU05vqNfT15VhokWZz3cRDCNkEuIbqA riypRS/yvzRtk75JHhOfWidTP8o1DWWZbNzJNgTMQaR1wsE6jZDfPUM2X9fYz/qE zxEyWYm2VnGOo7rBFyYg4YIqm7/UEO9i7Ir5uYSEzLZdJvuW1c7gUmKn5zE+cveS xyF4eApvNxrOUYONR4DQLGjNNpbm1EOIhJMNL7Emlg1yrg+evS+ZL0diNJ+oCNYj e8I7pjTH7yQkD3xqTfZE6qmQW/STFvJSYfoTjPpZHR3oHmRAECDn+H6KnMHMoWUQ Xb2G8a0O4kyM4S6kU3USFLzeU9XbdFWG -----END CERTIFICATE-----Generated at Sun May 5 01:22:22 2024 by rpki-client on console-fra.rpki-client.org