$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: kc+y5G3wGlEZX2cv2xfsklcv3TxH7zK4IbGq/2W2970= Subject key identifier: D6:A4:2B:6E:55:AE:72:FB:27:75:42:A9:3C:F4:71:21:18:B1:DD:76 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 8A Signing time: Fri 17 May 2024 07:12:44 +0000 Manifest this update: Fri 17 May 2024 07:12:44 +0000 Manifest next update: Fri 24 May 2024 07:12:44 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: skgiocodJ+Id8yunJGLcIU74J/IN89suONTzUC78J5U=) 2: C1B91228477711EEB1D76A7FC4F9AE02.roa (hash: xf35Rt9HKRX/xo925LqoqkXmAJHqGVXvyNm/ND5XLGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: May 17 07:12:44 2024 GMT Not After : May 24 07:12:44 2024 GMT Subject: CN=6647036c-7f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:e5:8c:4c:23:64:4f:4d:0a:65:fb:06:2f: bc:a5:fc:e3:e5:9a:81:d7:ae:c8:41:ee:a0:9a:35: 74:8a:fe:65:6b:c7:28:0b:3e:bf:91:ca:42:d1:73: 6c:21:4d:1f:07:ae:c4:45:6a:dc:13:55:77:cf:dc: 25:1b:21:0c:75:c6:87:41:3f:17:66:be:8f:7f:8a: 73:50:e2:bc:17:16:3c:14:52:1d:e5:4b:e6:e1:c0: c8:43:d8:98:6d:69:26:db:81:b7:ed:e1:29:53:bb: 6f:13:0f:a4:9c:2d:cb:bf:25:f5:c3:a1:7d:2d:de: 4a:99:35:9c:44:1a:40:96:4e:58:44:a5:8c:20:2c: 0d:b0:4a:15:98:93:ff:15:23:84:15:2a:6f:dc:a1: a2:e2:82:47:44:8f:97:76:43:58:a7:4c:2d:4c:f2: 9e:df:4a:5d:02:e1:b6:a7:64:b3:89:66:73:ba:c9: 64:f4:83:84:82:37:c7:e9:cb:8e:97:70:44:d3:a2: 66:cb:f8:a9:7c:51:04:f8:1f:b2:58:40:29:42:56: 87:31:d8:9c:f7:39:d6:da:55:b3:cf:69:c2:3b:5d: d3:fb:33:58:7d:04:cc:fe:60:6d:e4:c7:2f:e0:35: 93:69:e4:33:3e:8c:40:02:2f:45:b2:b1:a0:e3:35: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:2B:6E:55:AE:72:FB:27:75:42:A9:3C:F4:71:21:18:B1:DD:76 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:db:05:02:3b:ba:8f:ef:9d:d0:f6:e7:2a:cc:43:e8:99:3a: 33:8e:7c:c5:c4:f9:16:c4:83:1c:ca:b2:a0:27:70:8f:26:35: 97:22:18:10:f0:c5:2b:58:0d:62:10:c3:6f:97:4b:1f:1b:e5: 7c:7d:be:e0:c5:09:52:ac:e8:26:ce:b0:27:03:e6:64:4d:75: 7e:37:9f:dd:2f:ba:d4:3d:52:43:1f:bb:f3:c8:7e:74:2b:4a: b4:a7:5a:94:6e:f5:3d:e0:be:28:07:a2:55:ff:2d:65:e5:88: b8:fa:f7:9e:bf:75:f7:3e:22:35:9d:37:29:ae:07:8d:ea:0e: 4a:97:88:81:20:b7:0c:58:a9:a1:8e:60:d1:c4:67:c5:13:59: 59:7a:04:18:8b:41:90:87:d6:39:e4:ff:80:ed:d0:e2:75:2f: 53:b5:65:b3:aa:53:8c:d3:25:84:f9:e7:5e:7d:32:f3:c3:8a: 09:0a:f0:2c:24:63:a0:c8:85:91:28:39:c1:2a:f3:14:63:17: 82:fa:7f:9f:4c:39:da:3b:5d:30:fe:ca:5e:47:8a:10:65:23: 5d:28:90:74:ed:ae:6e:0d:bd:bb:6f:72:17:10:9e:98:10:38: c7:f5:22:1f:21:a7:fb:cb:19:7d:3a:40:61:d4:25:79:b3:de: d4:f4:88:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjQwNTE3MDcxMjQ0WhcNMjQwNTI0MDcxMjQ0WjAYMRYwFAYD VQQDEw02NjQ3MDM2Yy03ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnS3ljEwjZE9NCmX7Bi+8pfzj5ZqB167IQe6gmjV0iv5la8coCz6/kcpC0XNs IU0fB67ERWrcE1V3z9wlGyEMdcaHQT8XZr6Pf4pzUOK8FxY8FFId5Uvm4cDIQ9iY bWkm24G37eEpU7tvEw+knC3LvyX1w6F9Ld5KmTWcRBpAlk5YRKWMICwNsEoVmJP/ FSOEFSpv3KGi4oJHRI+XdkNYp0wtTPKe30pdAuG2p2SziWZzuslk9IOEgjfH6cuO l3BE06Jmy/ipfFEE+B+yWEApQlaHMdic9znW2lWzz2nCO13T+zNYfQTM/mBt5Mcv 4DWTaeQzPoxAAi9FsrGg4zXFBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNakK25V rnL7J3VCqTz0cSEYsd12MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw2wUCO7qP753Q9ucqzEPomTozjnzFxPkWxIMcyrKgJ3CPJjWXIhgQ 8MUrWA1iEMNvl0sfG+V8fb7gxQlSrOgmzrAnA+ZkTXV+N5/dL7rUPVJDH7vzyH50 K0q0p1qUbvU94L4oB6JV/y1l5Yi4+veev3X3PiI1nTcprgeN6g5Kl4iBILcMWKmh jmDRxGfFE1lZegQYi0GQh9Y55P+A7dDidS9TtWWzqlOM0yWE+edefTLzw4oJCvAs JGOgyIWRKDnBKvMUYxeC+n+fTDnaO10w/speR4oQZSNdKJB07a5uDb27b3IXEJ6Y EDjH9SIfIaf7yxl9OkBh1CV5s97U9Igk -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org