$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: AkAIbK+4NCswOTFJgtrm/YrosGvv7Wuo7iRG2ZSt4AQ= Subject key identifier: 61:21:F3:2D:C7:D5:8F:4E:BF:CD:C5:0A:8C:D3:A0:C4:83:2C:2C:AA Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 0623 Signing time: Wed 01 May 2024 00:08:10 +0000 Manifest this update: Wed 01 May 2024 00:08:10 +0000 Manifest next update: Wed 08 May 2024 00:08:10 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: vgPQ447t4y0WR3YUyFeC2WbbCdLXRiEtnzVMH02fazs=) 2: 14D6A2A0EE3A11ED9BD27558C4F9AE02.roa (hash: cRW6xls82aNu9r4zlZg3aNPT8AuOMYQ8YEx35nnpvAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: May 1 00:08:10 2024 GMT Not After : May 8 00:08:10 2024 GMT Subject: CN=663187ea-c0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:8a:fb:94:3b:15:36:d0:58:20:27:1d:3a: f6:40:7a:a8:b4:fb:68:75:8a:9e:96:1c:0c:ed:0b: ea:88:34:53:06:6b:69:ea:b3:ca:1c:39:1c:9f:81: 5f:c6:e0:6d:1a:36:55:02:87:18:a6:c8:f4:75:f5: 5b:e9:2d:87:ad:3a:6b:14:b3:9d:37:81:9a:98:ed: 65:72:f7:2b:50:27:32:b3:af:64:ec:f7:96:0d:a9: b5:d2:bf:da:98:9d:a0:62:1f:03:a0:06:e0:b5:93: 6d:db:e5:f2:f5:23:48:cb:65:de:32:11:68:01:9b: 16:66:cc:3c:b9:6c:15:0d:1f:9b:2a:92:28:22:da: ca:df:97:55:2a:47:95:a3:ee:39:55:f5:44:e3:7f: fc:fe:5c:f5:13:7a:68:52:21:57:69:71:4f:db:fa: c1:15:3f:bb:72:a9:75:72:4f:0e:b9:45:69:8b:8d: 0c:30:7f:a0:d2:7b:1f:e8:f9:d7:0d:07:9e:d1:fe: ae:a4:3f:ae:6c:f6:42:36:d1:8f:83:7a:94:55:ad: d3:83:f1:29:bd:a5:d8:a3:a0:dc:54:27:fe:88:51: be:d0:c1:a3:31:c8:ed:d8:50:38:d5:12:8c:4b:7d: 8b:23:82:41:5f:29:f1:0b:e5:ad:d6:e1:38:a6:e7: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:F3:2D:C7:D5:8F:4E:BF:CD:C5:0A:8C:D3:A0:C4:83:2C:2C:AA X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:75:b6:41:0d:ff:be:3f:09:ec:7e:0c:4c:f0:79:6b:da:9b: 37:e5:a7:be:fa:96:fa:6e:6d:2c:7b:9b:be:c8:55:a4:2b:30: 3c:93:f2:16:a0:d9:b2:2c:4f:f9:1a:54:e6:c8:e8:1f:08:8d: 18:42:98:bc:40:91:1e:c2:cc:3a:1c:1a:51:85:34:fd:20:0b: c4:1b:b0:3e:38:1b:e5:4b:eb:de:ea:97:2f:b4:89:9b:e7:42: 47:14:b8:11:e2:22:81:c0:c5:4a:50:83:29:dd:93:18:d4:36: 23:28:ca:34:33:f3:0a:b1:c9:1f:e5:7f:91:23:07:6e:fd:60: cc:d6:18:4c:39:b8:91:3f:a1:98:53:66:73:64:eb:d3:13:5c: 93:91:c6:3d:d4:f8:59:54:c4:43:0b:77:e0:5e:02:68:d2:85: 00:9c:6f:a4:f3:f4:b8:ed:b2:6b:fb:ee:8f:97:61:9b:b8:75: 55:df:eb:69:80:22:23:e7:42:66:59:69:d0:8b:07:58:62:f1: ef:55:0e:e8:2a:9c:54:0b:3d:78:c0:67:10:6c:98:a4:bc:5b: 2f:9c:35:e3:02:ce:84:11:1e:5c:87:64:8d:6b:14:65:e7:f6: 0d:7e:76:c5:c5:fa:ce:6c:bf:9d:6b:48:bb:1d:03:55:84:86: fa:5b:c4:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjQwNTAxMDAwODEwWhcNMjQwNTA4MDAwODEwWjAYMRYwFAYD VQQDEw02NjMxODdlYS1jMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH+K+5Q7FTbQWCAnHTr2QHqotPtodYqelhwM7QvqiDRTBmtp6rPKHDkcn4Ff xuBtGjZVAocYpsj0dfVb6S2HrTprFLOdN4GamO1lcvcrUCcys69k7PeWDam10r/a mJ2gYh8DoAbgtZNt2+Xy9SNIy2XeMhFoAZsWZsw8uWwVDR+bKpIoItrK35dVKkeV o+45VfVE43/8/lz1E3poUiFXaXFP2/rBFT+7cql1ck8OuUVpi40MMH+g0nsf6PnX DQee0f6upD+ubPZCNtGPg3qUVa3Tg/EpvaXYo6DcVCf+iFG+0MGjMcjt2FA41RKM S32LI4JBXynxC+Wt1uE4pueitQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEh8y3H 1Y9Ov83FCozToMSDLCyqMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHdbZBDf++PwnsfgxM8Hlr2ps35ae++pb6bm0se5u+yFWkKzA8k/IW oNmyLE/5GlTmyOgfCI0YQpi8QJEewsw6HBpRhTT9IAvEG7A+OBvlS+ve6pcvtImb 50JHFLgR4iKBwMVKUIMp3ZMY1DYjKMo0M/MKsckf5X+RIwdu/WDM1hhMObiRP6GY U2ZzZOvTE1yTkcY91PhZVMRDC3fgXgJo0oUAnG+k8/S47bJr++6Pl2GbuHVV3+tp gCIj50JmWWnQiwdYYvHvVQ7oKpxUCz14wGcQbJikvFsvnDXjAs6EER5ch2SNaxRl 5/YNfnbFxfrObL+da0i7HQNVhIb6W8Qg -----END CERTIFICATE-----Generated at Wed May 1 00:35:51 2024 by rpki-client on console-ams.rpki-client.org