$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: +25NZ6TpWSz+Jo+Ed1HT2IGYtpN158wp+snSpD7v178= Subject key identifier: A9:4F:F6:3A:B5:71:01:BD:51:20:73:44:53:C0:0B:2D:C2:B2:1F:8E Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 05ED Signing time: Sat 25 May 2024 00:09:47 +0000 Manifest this update: Sat 25 May 2024 00:09:47 +0000 Manifest next update: Sat 01 Jun 2024 00:09:47 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: 50t6z7oqa+ifRkMhjAWfUXvkypSHipfVCGaxs4dzb2U=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: taFGAacxq2sm6Y1QRRo3KlRLFJEopO93ww8dAQZR/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 23:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: May 25 00:09:47 2024 GMT Not After : Jun 1 00:09:47 2024 GMT Subject: CN=66512c4b-6dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:57:0b:33:87:30:38:b1:74:3a:29:16:c0: b2:a6:c1:8f:6b:97:d8:6d:b3:04:2a:53:14:0d:27: 15:cd:85:47:6d:ae:3a:62:11:65:26:78:67:c2:4b: b2:e2:b4:8c:04:45:5d:c6:4a:25:a2:ed:78:69:d0: cf:4b:57:0c:5a:95:0b:bd:0a:85:7e:32:e7:40:ae: 18:54:3f:51:51:c9:bf:33:96:be:92:13:62:23:b5: c6:53:ec:fd:85:23:af:ca:09:bf:42:b2:b5:23:c3: 1f:87:fb:f5:01:8d:ac:61:00:89:49:68:01:8f:fc: 27:2b:53:f6:14:0d:bf:5b:d2:b0:30:c8:e7:45:68: a7:f6:49:a7:5f:65:f0:9a:87:b0:32:4e:30:80:45: d7:be:59:19:22:3c:32:aa:13:21:43:e8:02:b7:c2: e2:69:c3:91:19:cf:35:e4:63:db:c9:fa:63:64:11: b0:b9:c3:86:10:d9:22:16:0d:ef:38:8f:e8:66:d1: 01:0d:a3:10:ab:3f:af:66:98:ed:f3:f6:59:15:d7: 35:c1:05:6e:eb:61:10:f8:22:05:53:84:83:9e:92: 40:0f:65:bb:84:21:09:56:ef:2f:38:f7:61:79:71: 26:56:4f:47:a0:96:fb:89:eb:91:06:e1:9a:9c:9c: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:F6:3A:B5:71:01:BD:51:20:73:44:53:C0:0B:2D:C2:B2:1F:8E X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:40:d6:90:d0:0a:e0:96:f3:45:99:c3:74:bf:bf:5d:a8:e1: 7e:ee:7f:d7:32:a5:b2:ba:ff:84:94:e2:ab:2e:76:26:4c:03: aa:f8:b8:a1:32:1b:e0:17:37:0c:ab:ea:25:1a:09:28:de:36: ab:15:0b:bc:94:c0:e8:cd:d0:e1:c9:c1:f0:89:16:c7:1f:ef: e7:0a:33:b3:e9:a2:52:53:fe:c3:d3:2d:a4:8f:85:cb:de:80: 97:b4:7a:47:67:bf:0e:3d:1e:fa:df:74:ca:be:27:c1:45:2c: 05:a5:ac:76:dd:b7:b9:3d:0d:f1:68:82:10:b4:6d:7e:b0:8b: ae:b4:84:f7:87:21:55:3a:70:97:0a:87:f7:04:99:88:47:c1: ed:1e:1e:c0:8d:0a:5c:8c:75:be:63:f4:98:b2:5d:8e:24:f0: 8f:78:4d:d3:de:35:90:71:4b:9c:c3:0c:35:0a:52:97:1f:50: 22:0a:b2:2a:d3:74:a3:ce:ae:db:88:31:e7:72:78:8a:cb:ae: ea:1e:dd:c8:a6:cb:1b:bd:df:e1:d0:f2:78:3d:0d:03:b6:7d: 07:90:7f:a3:3b:e8:07:1f:58:88:3e:dd:53:88:8d:f5:d7:41: 64:81:f2:bd:81:8c:f9:69:56:77:e9:c8:59:e8:a1:f5:cb:bd: ff:5d:f5:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjQwNTI1MDAwOTQ3WhcNMjQwNjAxMDAwOTQ3WjAYMRYwFAYD VQQDEw02NjUxMmM0Yi02ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzRXCzOHMDixdDopFsCypsGPa5fYbbMEKlMUDScVzYVHba46YhFlJnhnwkuy 4rSMBEVdxkolou14adDPS1cMWpULvQqFfjLnQK4YVD9RUcm/M5a+khNiI7XGU+z9 hSOvygm/QrK1I8Mfh/v1AY2sYQCJSWgBj/wnK1P2FA2/W9KwMMjnRWin9kmnX2Xw moewMk4wgEXXvlkZIjwyqhMhQ+gCt8LiacORGc815GPbyfpjZBGwucOGENkiFg3v OI/oZtEBDaMQqz+vZpjt8/ZZFdc1wQVu62EQ+CIFU4SDnpJAD2W7hCEJVu8vOPdh eXEmVk9HoJb7ieuRBuGanJw99QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlP9jq1 cQG9USBzRFPACy3Csh+OMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/QNaQ0ArglvNFmcN0v79dqOF+7n/XMqWyuv+ElOKrLnYmTAOq+Lih MhvgFzcMq+olGgko3jarFQu8lMDozdDhycHwiRbHH+/nCjOz6aJSU/7D0y2kj4XL 3oCXtHpHZ78OPR7633TKvifBRSwFpax23be5PQ3xaIIQtG1+sIuutIT3hyFVOnCX Cof3BJmIR8HtHh7AjQpcjHW+Y/SYsl2OJPCPeE3T3jWQcUucwww1ClKXH1AiCrIq 03Sjzq7biDHncniKy67qHt3Ipssbvd/h0PJ4PQ0Dtn0HkH+jO+gHH1iIPt1TiI31 10FkgfK9gYz5aVZ36chZ6KH1y73/XfUs -----END CERTIFICATE-----Generated at Sat May 25 01:00:17 2024 by rpki-client on console-ams.rpki-client.org