$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: NCsxpuEJCe45roO2e79XwBuh5G4L6xRzCfO/rzPjZ8s= Subject key identifier: 8B:0F:53:73:56:DD:C0:F1:A6:04:3C:90:CE:F2:88:39:52:1B:AA:D8 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0A9C Signing time: Fri 26 Apr 2024 20:09:39 +0000 Manifest this update: Fri 26 Apr 2024 20:09:38 +0000 Manifest next update: Fri 03 May 2024 20:09:38 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: sHVVDqheNpK4bhuZc5xmKz7OUnChdjNFWU4iS3evTtw=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: RkDmfgQMwwny9x9xlb//KIEAOQmfjHqeRQZx8EIpneY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Apr 26 20:09:38 2024 GMT Not After : May 3 20:09:38 2024 GMT Subject: CN=662c0a03-51db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:b8:ce:98:38:f6:8d:2b:32:5c:f1:ec:d1: f0:91:80:03:95:22:f9:b0:61:c8:4a:34:1c:1e:75: 94:a2:bd:fa:6e:62:d7:b7:f1:b2:dc:cd:bf:d6:2a: 95:a8:e8:61:7f:2e:ef:91:91:dc:5d:17:ff:59:c3: 73:03:6a:ab:4c:8b:b3:90:61:33:6a:4d:a9:24:06: f1:6c:12:23:7e:c1:ac:08:28:4a:4c:90:c3:36:3f: 7f:09:93:15:29:a1:de:e3:04:98:a8:47:02:97:03: 52:6c:7a:1c:0a:7a:b6:38:8c:97:c8:7f:83:77:79: 66:ed:59:51:93:81:12:bb:c2:c0:be:d8:40:34:1c: b2:de:d7:6a:af:c9:14:c1:cb:5c:1f:c9:dd:99:80: 3b:1d:4b:99:34:2b:9d:45:c6:1a:4c:65:2b:6e:d8: cb:9d:46:35:cc:f5:22:3a:d2:36:c1:2e:bd:ac:73: 6b:d5:f3:75:fe:b0:f8:5c:80:39:85:bc:08:9f:07: 0f:f2:f5:50:04:8e:f0:13:13:da:ad:c1:79:74:5b: a2:e7:52:f6:1b:ef:fc:69:30:4f:39:58:82:f4:fa: b9:e1:3b:b9:db:8b:4d:ee:b5:b5:07:54:4f:f2:31: ab:72:67:36:25:9c:45:dc:75:35:7d:41:29:98:8a: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:53:73:56:DD:C0:F1:A6:04:3C:90:CE:F2:88:39:52:1B:AA:D8 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:80:d1:75:08:6b:0a:7a:dc:19:45:c3:6a:c6:cc:c9:ca:03: 49:5b:cf:fb:5f:4d:ce:55:e1:6e:f8:16:10:0d:e5:47:a6:c1: e4:53:78:ae:e2:28:32:7b:aa:5f:42:66:23:71:04:5a:6d:cc: cf:7c:bc:4b:66:00:0f:49:ad:04:43:20:40:b3:ee:a0:52:4f: 05:4b:5e:e0:6d:ba:22:a9:d1:c6:b4:40:d8:1e:fa:10:5f:c2: d4:e7:63:6a:36:2a:aa:6b:57:6c:98:a9:10:cb:e5:92:cb:c7: bd:2b:46:f6:3b:8d:09:9d:48:3f:cf:b7:a3:98:04:25:d7:20: 2e:3a:38:1c:b4:76:4a:92:83:2d:5d:88:2a:bb:ed:28:2a:22: 0c:9f:49:12:34:08:4d:c4:fb:0b:2b:e4:3d:77:67:ae:d2:80: 5b:25:05:5a:28:8a:63:55:05:e0:38:4c:f4:9a:3d:86:7f:74: 8a:15:ba:88:6c:e5:64:ae:be:e8:4d:b3:87:f5:47:8e:dc:47: 10:e6:16:f9:25:43:c7:2c:76:82:89:1f:7a:c0:54:55:b9:d6: a9:cc:b0:26:b5:ff:cc:2f:e0:fd:b1:18:5b:73:0e:6c:d4:2f: 10:db:56:4a:0c:f2:4c:05:53:be:c4:20:a8:9b:64:66:a0:95: 8b:9c:88:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjQwNDI2MjAwOTM4WhcNMjQwNTAzMjAwOTM4WjAYMRYwFAYD VQQDEw02NjJjMGEwMy01MWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Cm4zpg49o0rMlzx7NHwkYADlSL5sGHISjQcHnWUor36bmLXt/Gy3M2/1iqV qOhhfy7vkZHcXRf/WcNzA2qrTIuzkGEzak2pJAbxbBIjfsGsCChKTJDDNj9/CZMV KaHe4wSYqEcClwNSbHocCnq2OIyXyH+Dd3lm7VlRk4ESu8LAvthANByy3tdqr8kU wctcH8ndmYA7HUuZNCudRcYaTGUrbtjLnUY1zPUiOtI2wS69rHNr1fN1/rD4XIA5 hbwInwcP8vVQBI7wExParcF5dFui51L2G+/8aTBPOViC9Pq54Tu524tN7rW1B1RP 8jGrcmc2JZxF3HU1fUEpmIraFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsPU3NW 3cDxpgQ8kM7yiDlSG6rYMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/gNF1CGsKetwZRcNqxszJygNJW8/7X03OVeFu+BYQDeVHpsHkU3iu 4igye6pfQmYjcQRabczPfLxLZgAPSa0EQyBAs+6gUk8FS17gbboiqdHGtEDYHvoQ X8LU52NqNiqqa1dsmKkQy+WSy8e9K0b2O40JnUg/z7ejmAQl1yAuOjgctHZKkoMt XYgqu+0oKiIMn0kSNAhNxPsLK+Q9d2eu0oBbJQVaKIpjVQXgOEz0mj2Gf3SKFbqI bOVkrr7oTbOH9UeO3EcQ5hb5JUPHLHaCiR96wFRVudapzLAmtf/ML+D9sRhbcw5s 1C8Q21ZKDPJMBVO+xCCom2RmoJWLnIix -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:15 2024 by rpki-client on console-ams.rpki-client.org