$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: HNzgBlrpY6emfcY5JyJJNFB2M2bvvKB+SLqE2I1we7Y= Subject key identifier: 45:7B:8B:6D:4A:28:BB:4D:2A:B2:9F:2C:35:17:7D:85:29:AF:DE:BA Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 0928 Signing time: Sat 04 May 2024 21:20:33 +0000 Manifest this update: Sat 04 May 2024 21:20:33 +0000 Manifest next update: Sat 11 May 2024 21:20:33 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: EdAANyHhbxVLLGqaS5N/feZAonptwP7pnYCpjRu72RQ=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: May 4 21:20:33 2024 GMT Not After : May 11 21:20:33 2024 GMT Subject: CN=6636a6a1-04ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:d5:6d:83:32:5a:b8:62:82:fa:65:33:a4: 6f:e3:24:35:6b:d5:e0:9c:c7:78:6a:00:98:d2:f8: 8c:a1:d9:76:8d:3e:4c:d7:4b:33:25:ee:36:e1:d1: e4:a6:e8:95:7e:9f:f7:48:d2:4c:bd:fd:62:42:12: 74:f4:38:de:89:1b:11:52:e1:ed:2d:64:7c:dc:e9: fe:e2:61:39:47:05:5e:2c:94:a5:25:49:a1:14:46: 81:14:7f:89:ce:1d:64:10:a2:2e:c3:77:bb:77:ef: 4f:4a:8d:9a:3b:6a:67:b4:d8:c4:e3:0c:8b:27:b0: aa:e5:a9:8c:4c:b9:e5:37:ac:b7:58:a4:10:f0:08: 24:b7:14:76:bd:a0:02:88:a7:35:39:c9:0a:71:eb: ff:76:70:12:36:0f:fd:42:03:d1:f4:05:8e:50:57: 78:01:9c:1a:ed:7d:1b:8e:3f:b2:19:03:95:1a:51: 67:81:dc:bb:6f:ce:04:17:49:c9:b3:55:ba:95:06: e2:25:5e:be:b0:49:77:28:8b:b4:0e:98:53:77:40: 16:47:9f:71:29:35:65:26:95:ab:1b:2a:d2:1f:71: 45:df:9d:ed:d4:3b:13:47:13:ac:8c:14:cd:6a:af: 1a:5b:64:2d:d5:39:83:bf:4a:c1:f1:c9:f0:a2:5c: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:8B:6D:4A:28:BB:4D:2A:B2:9F:2C:35:17:7D:85:29:AF:DE:BA X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0b:cf:54:f1:7b:df:0e:1b:c9:7c:8c:14:f0:ae:42:54:71: c6:8c:1a:18:7c:6c:db:7e:da:3a:2b:28:f4:82:8a:71:45:e1: f0:34:ef:78:69:97:95:74:74:a6:23:09:bc:7f:d7:38:e2:c7: 62:b8:66:5e:54:b9:bd:41:e4:99:4f:63:07:32:96:37:4b:41: de:40:5c:e6:9e:b3:34:72:5c:29:00:25:5c:ce:32:95:74:59: c8:be:f4:d6:95:3a:88:8a:27:ab:e7:9a:67:39:ab:44:12:f7: 4e:f1:d3:c4:78:b3:b3:e1:b5:a7:e7:54:60:50:2c:09:bd:0d: 52:c0:f0:3b:68:1c:5a:84:cc:a8:44:bf:5e:b1:e3:54:46:19: c0:b0:7c:11:c8:a2:e8:61:f0:db:65:84:d7:81:c4:a1:e0:0a: e6:db:2d:11:e0:ed:ce:cb:d5:0c:40:e9:a0:a2:72:e0:b1:b1: d3:64:cc:8f:95:b8:ee:df:cc:fe:63:ec:dd:6a:fe:cd:ed:cc: bf:b0:b9:a0:82:bd:2a:55:13:ff:a9:59:1d:a9:5f:2e:59:7f: 2e:95:15:f3:03:9b:d6:04:c4:24:7d:a6:c5:7a:b7:71:61:1c: 4c:7b:2b:6c:5b:b9:ff:ef:a9:c1:fa:fb:53:6c:03:75:e8:8a: 1a:f4:ed:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjQwNTA0MjEyMDMzWhcNMjQwNTExMjEyMDMzWjAYMRYwFAYD VQQDEw02NjM2YTZhMS0wNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUvVbYMyWrhigvplM6Rv4yQ1a9XgnMd4agCY0viModl2jT5M10szJe424dHk puiVfp/3SNJMvf1iQhJ09DjeiRsRUuHtLWR83On+4mE5RwVeLJSlJUmhFEaBFH+J zh1kEKIuw3e7d+9PSo2aO2pntNjE4wyLJ7Cq5amMTLnlN6y3WKQQ8AgktxR2vaAC iKc1OckKcev/dnASNg/9QgPR9AWOUFd4AZwa7X0bjj+yGQOVGlFngdy7b84EF0nJ s1W6lQbiJV6+sEl3KIu0DphTd0AWR59xKTVlJpWrGyrSH3FF353t1DsTRxOsjBTN aq8aW2Qt1TmDv0rB8cnwolwc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV7i21K KLtNKrKfLDUXfYUpr966MB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6C89U8XvfDhvJfIwU8K5CVHHGjBoYfGzbfto6Kyj0gopxReHwNO94 aZeVdHSmIwm8f9c44sdiuGZeVLm9QeSZT2MHMpY3S0HeQFzmnrM0clwpACVczjKV dFnIvvTWlTqIiier55pnOatEEvdO8dPEeLOz4bWn51RgUCwJvQ1SwPA7aBxahMyo RL9eseNURhnAsHwRyKLoYfDbZYTXgcSh4Arm2y0R4O3Oy9UMQOmgonLgsbHTZMyP lbju38z+Y+zdav7N7cy/sLmggr0qVRP/qVkdqV8uWX8ulRXzA5vWBMQkfabFerdx YRxMeytsW7n/76nB+vtTbAN16Ioa9O2P -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org