$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: vcvp/bQ4JYv5YJ7blweIkffuovmJVX1YA4vRKvEoq28= Subject key identifier: 93:68:72:7E:80:5E:80:7E:63:6E:53:62:B6:4B:C5:4A:35:84:8F:A7 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 08B5 Signing time: Thu 02 May 2024 21:36:59 +0000 Manifest this update: Thu 02 May 2024 21:36:58 +0000 Manifest next update: Thu 09 May 2024 21:36:58 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: VghB+Kv93fpYyGkJ+P7dfG8jvt6NEePPIgUQlDjaQbk=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: cMG40wPogbZyuPpH7ULSVKyNIF0JbOFinMIbSJbiVg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: May 2 21:36:58 2024 GMT Not After : May 9 21:36:58 2024 GMT Subject: CN=6634077b-534c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:ac:a3:35:1b:4f:e2:dc:35:db:5e:0d:76: 64:31:40:98:9c:04:38:78:65:ef:8d:eb:68:ca:f2: 6f:34:95:8a:7e:cc:8b:5a:e9:aa:8d:16:a0:c5:cb: ad:93:78:d1:c7:28:5c:aa:6b:13:be:4f:61:d6:15: e8:4d:b4:db:df:7b:39:2e:eb:73:c1:ad:90:f0:e4: c4:43:2d:a2:7f:52:96:72:a1:63:39:4b:c5:0d:bd: 31:61:98:3d:1e:f3:96:25:af:ae:d7:6b:a2:29:a6: f2:b1:0a:f7:e1:fe:de:67:b1:45:13:24:8b:2a:20: 09:84:04:66:a4:27:47:b3:fb:14:04:ed:58:e1:19: c1:7f:59:b7:53:52:d4:a5:0f:51:32:64:a6:69:17: bf:34:ff:f2:b9:da:21:55:11:08:40:5a:45:19:5d: 12:da:3e:ae:e0:71:d2:df:09:7c:d7:b7:2f:f3:fc: 02:b8:08:7c:8a:60:e9:2c:70:1d:da:46:a4:73:5d: c9:e4:16:59:4e:b8:90:19:84:40:97:ee:b4:b8:9c: b0:96:65:5b:a2:88:e4:d0:27:79:ed:19:0d:58:1c: 41:17:6d:37:28:78:4d:a2:f3:c2:be:ee:63:25:41: 11:f6:b5:20:73:02:e9:fe:ec:b4:0a:18:f7:85:af: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:72:7E:80:5E:80:7E:63:6E:53:62:B6:4B:C5:4A:35:84:8F:A7 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:57:85:63:65:62:b5:58:ab:5c:0d:40:2a:f2:85:f0:c5: b8:2a:7f:c6:47:d8:c5:de:10:cb:fd:07:7c:56:81:81:1a:09: ce:6f:01:6b:89:f3:24:ec:b4:08:96:b8:d7:18:e0:6f:67:cf: 70:7a:2c:3d:70:d6:e0:b0:fe:0c:6d:db:37:37:36:e7:aa:a6: 3b:a8:56:b0:fc:da:f6:9e:e4:32:a4:41:52:4a:d1:1f:5b:d8: 51:a2:78:29:63:06:a7:49:2a:b7:f2:46:ae:ec:30:9e:9b:61: 53:45:ec:fa:8e:1d:b1:8a:f3:06:30:56:6e:27:37:fd:35:10: 65:ed:e2:2b:a8:68:20:ef:72:13:09:8e:de:29:29:a1:46:af: 27:bd:7b:d2:60:88:f4:00:d2:e6:72:16:76:e6:8e:2b:12:70: 33:7b:8d:95:9b:95:c0:2c:6d:dd:38:0b:56:46:c3:9b:70:36: 1b:42:d0:35:6b:b9:4c:77:52:74:78:d8:24:7e:ae:83:0e:a1: 8e:47:e8:e8:3e:e3:32:a7:48:37:05:51:91:37:f9:50:ba:59: 50:45:18:bb:f4:a7:2f:83:ff:39:55:5f:93:58:e5:c6:bc:b6: db:dc:2c:36:09:4d:09:56:04:6b:e3:fd:d1:9b:51:82:40:0a: 68:0d:1d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjQwNTAyMjEzNjU4WhcNMjQwNTA5MjEzNjU4WjAYMRYwFAYD VQQDEw02NjM0MDc3Yi01MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTqsozUbT+LcNdteDXZkMUCYnAQ4eGXvjetoyvJvNJWKfsyLWumqjRagxcut k3jRxyhcqmsTvk9h1hXoTbTb33s5Lutzwa2Q8OTEQy2if1KWcqFjOUvFDb0xYZg9 HvOWJa+u12uiKabysQr34f7eZ7FFEySLKiAJhARmpCdHs/sUBO1Y4RnBf1m3U1LU pQ9RMmSmaRe/NP/yudohVREIQFpFGV0S2j6u4HHS3wl817cv8/wCuAh8imDpLHAd 2kakc13J5BZZTriQGYRAl+60uJywlmVboojk0Cd57RkNWBxBF203KHhNovPCvu5j JUER9rUgcwLp/uy0Chj3ha9aYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNocn6A XoB+Y25TYrZLxUo1hI+nMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAif1eFY2VitVirXA1AKvKF8MW4Kn/GR9jF3hDL/Qd8VoGBGgnObwFr ifMk7LQIlrjXGOBvZ89weiw9cNbgsP4Mbds3NzbnqqY7qFaw/Nr2nuQypEFSStEf W9hRongpYwanSSq38kau7DCem2FTRez6jh2xivMGMFZuJzf9NRBl7eIrqGgg73IT CY7eKSmhRq8nvXvSYIj0ANLmchZ25o4rEnAze42Vm5XALG3dOAtWRsObcDYbQtA1 a7lMd1J0eNgkfq6DDqGOR+joPuMyp0g3BVGRN/lQullQRRi79Kcvg/85VV+TWOXG vLbb3Cw2CU0JVgRr4/3Rm1GCQApoDR0n -----END CERTIFICATE-----Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org