$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: 5HP8FslVXqn///JldHVxbJ8HWAVQsPS4R4lZ8Ga6p/I= Subject key identifier: 64:EC:64:C0:D4:16:5E:EB:53:D8:A7:F8:91:FB:41:BB:43:A7:A8:35 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 8D Signing time: Wed 15 May 2024 07:08:00 +0000 Manifest this update: Wed 15 May 2024 07:07:59 +0000 Manifest next update: Wed 22 May 2024 07:07:59 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: xk7JYPRaag4XNayGtWUYVPOyybSFyiMEyB8Jty1Gmy0=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: Zcn6K1Xsm3ZgaUeGXnfJEHlcjqEmSwEDrqkEaYWqQ6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: May 15 07:07:59 2024 GMT Not After : May 22 07:07:59 2024 GMT Subject: CN=66445f4f-602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:12:7b:b8:ca:13:07:90:bd:be:02:3e:4f: da:51:45:ec:c1:0f:6c:de:13:34:10:8e:0b:ea:52: 54:7e:22:08:1d:35:48:b9:d1:09:b5:61:25:c0:40: fe:5d:ed:27:ee:e0:b6:18:27:b5:76:e7:fa:83:f0: e3:09:e5:b1:ea:56:c2:73:22:5a:8a:5f:37:47:43: 0f:98:c5:f0:57:7b:21:eb:33:a9:2c:08:a8:81:a2: 59:17:14:58:7e:ac:0f:38:75:a7:55:74:75:9b:40: 8c:05:a6:38:f7:2d:75:ed:ed:f6:fe:74:c4:37:68: 81:a2:0b:aa:72:a5:70:8c:82:e4:93:4c:93:77:8c: 16:be:86:8e:c2:ca:14:f2:fb:5c:d4:55:6a:a9:e5: ee:af:9a:77:18:9b:f9:9e:ed:5b:dd:c4:5f:6c:62: 75:85:7f:4e:cf:e7:80:b8:7c:71:94:d5:5e:09:9e: 8f:06:5c:df:6e:d4:84:c2:ff:2b:55:5f:3f:50:92: a6:60:fc:5c:1d:ed:1d:f4:60:cb:c5:e2:1e:0b:bb: 9f:61:92:45:e4:f9:2e:a6:47:58:d7:34:20:de:cc: af:af:89:60:6c:70:da:7d:08:94:28:56:5b:68:3d: d0:49:31:54:1a:b6:87:95:b2:f4:b8:cf:54:ef:20: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:64:C0:D4:16:5E:EB:53:D8:A7:F8:91:FB:41:BB:43:A7:A8:35 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a4:89:95:fa:fe:0d:b2:38:0a:c7:a5:da:1d:10:ce:98:9e: 56:38:b5:4f:03:c4:34:85:a8:07:f5:f6:25:ca:48:bb:0b:21: 4f:8a:48:05:fa:5d:db:6f:fe:39:82:ae:75:2b:67:16:31:d7: 73:57:70:92:cb:90:5e:18:8d:55:f9:99:50:e2:12:c8:d8:2f: 05:ee:75:f4:26:ed:f1:e9:c2:7c:72:0e:9d:c9:21:77:94:de: e1:d6:89:6c:b1:39:99:c4:47:8e:d5:15:10:6c:ce:3e:f0:fe: 9f:c2:50:be:84:18:3d:24:75:0c:ed:b7:58:5d:04:b5:07:b1: cf:5e:60:82:89:08:36:33:40:46:79:63:85:25:1e:75:c6:6c: c7:59:cd:9c:a0:bc:94:ca:f0:4c:7f:e5:63:40:28:93:c7:ec: d4:77:33:0f:9a:27:10:8a:69:55:12:ff:c8:7e:a5:22:a8:66: 9e:19:ce:ab:ba:2a:a6:75:8d:ea:c9:73:1d:6f:19:bf:9f:0a: 8a:d8:d1:ca:57:ce:36:9b:80:b9:e5:08:e6:6b:b9:4d:c9:ce: a8:42:59:1c:24:47:fc:78:08:a3:5f:13:76:1e:21:8c:6c:96: 3e:14:49:57:1e:18:5b:a6:9d:f4:d2:2c:af:c9:66:e9:2d:e1: 42:fe:45:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjQwNTE1MDcwNzU5WhcNMjQwNTIyMDcwNzU5WjAYMRYwFAYD VQQDEw02NjQ0NWY0Zi02MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDMSe7jKEweQvb4CPk/aUUXswQ9s3hM0EI4L6lJUfiIIHTVIudEJtWElwED+ Xe0n7uC2GCe1duf6g/DjCeWx6lbCcyJail83R0MPmMXwV3sh6zOpLAiogaJZFxRY fqwPOHWnVXR1m0CMBaY49y117e32/nTEN2iBoguqcqVwjILkk0yTd4wWvoaOwsoU 8vtc1FVqqeXur5p3GJv5nu1b3cRfbGJ1hX9Oz+eAuHxxlNVeCZ6PBlzfbtSEwv8r VV8/UJKmYPxcHe0d9GDLxeIeC7ufYZJF5PkupkdY1zQg3syvr4lgbHDafQiUKFZb aD3QSTFUGraHlbL0uM9U7yCX7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTsZMDU Fl7rU9in+JH7QbtDp6g1MB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9pImV+v4NsjgKx6XaHRDOmJ5WOLVPA8Q0hagH9fYlyki7CyFPikgF +l3bb/45gq51K2cWMddzV3CSy5BeGI1V+ZlQ4hLI2C8F7nX0Ju3x6cJ8cg6dySF3 lN7h1olssTmZxEeO1RUQbM4+8P6fwlC+hBg9JHUM7bdYXQS1B7HPXmCCiQg2M0BG eWOFJR51xmzHWc2coLyUyvBMf+VjQCiTx+zUdzMPmicQimlVEv/IfqUiqGaeGc6r uiqmdY3qyXMdbxm/nwqK2NHKV842m4C55Qjma7lNyc6oQlkcJEf8eAijXxN2HiGM bJY+FElXHhhbpp300iyvyWbpLeFC/kWh -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org