$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json) Hash identifier: Y3/hTyA2NFRWrg5ZWICc0q+zDoTfrBOgDXvfxGY9Foc= Subject key identifier: D2:4A:4B:46:74:AB:39:06:F3:FE:49:B0:BE:0E:6A:13:A7:86:20:2E Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft Manifest number: 0356 Signing time: Sat 27 Apr 2024 02:50:00 +0000 Manifest this update: Sat 27 Apr 2024 02:50:00 +0000 Manifest next update: Sat 04 May 2024 02:50:00 +0000 Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: gBRUdWSZfbGHpjMhRrtqb1rEwPVT/V+k7RBvnqrw2Qc=) 2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: w4nO5TSv3rVjeya2Tca2wapl0c2JKLgMMt0fIqkCHB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Validity Not Before: Apr 27 02:50:00 2024 GMT Not After : May 4 02:50:00 2024 GMT Subject: CN=662c67d8-592c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:bb:30:7b:93:74:08:a0:a0:ba:4e:48:1f: c7:ee:4f:60:9a:ff:0f:12:bc:ee:cc:7d:bc:82:84: 04:54:53:08:8f:74:d6:90:dd:14:3b:48:e7:36:3f: ca:4c:5e:32:1e:b4:fe:71:88:fb:1e:86:d7:df:8f: 7b:a8:ac:79:fe:e4:7f:d3:b4:4d:9a:5c:86:00:fa: 5c:32:ec:eb:8e:d1:43:1b:8c:46:a9:a5:ea:81:17: e2:f5:d8:48:ad:fa:ba:33:f7:da:bc:1d:a8:b0:84: 9f:3d:1d:32:92:ef:94:d5:7b:11:9b:60:a6:56:30: a5:56:48:71:8f:b2:4d:85:0a:08:cb:59:d6:fb:1e: a7:ce:52:31:79:a0:d8:7d:e8:5f:0b:aa:ef:c9:18: d6:6d:72:18:34:7c:6f:95:d2:15:30:71:4d:fc:77: 92:da:f0:49:6e:d2:4e:ad:70:02:88:79:b2:4b:c8: 8f:88:2c:b0:44:8c:10:29:ba:61:da:fd:3e:ed:33: 3f:06:c1:69:53:9b:2d:8d:90:97:92:44:fd:e3:ad: e2:4f:71:3f:ef:ea:9c:7e:5b:27:46:c9:e8:d3:6b: 12:78:83:bd:26:eb:5c:1b:7d:11:6f:90:04:07:d9: 05:6a:fd:16:cd:aa:6b:2c:38:f9:f2:8c:55:be:70: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4A:4B:46:74:AB:39:06:F3:FE:49:B0:BE:0E:6A:13:A7:86:20:2E X509v3 Authority Key Identifier: keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:18:bc:4d:1f:10:5c:3e:04:a6:4f:41:ba:74:0d:0a:57:87: b6:de:14:49:a5:9f:4b:d0:44:38:85:66:b6:b4:f1:d6:2e:47: 5b:bb:fe:93:0f:40:30:dc:97:1f:7b:06:7f:d0:a9:2d:42:8e: b8:d2:c6:65:e4:6e:b7:48:c2:4c:d9:5e:3d:d0:4b:42:e3:43: ff:0a:cd:f4:8a:30:fc:24:4c:d0:3a:2a:1c:ba:8b:0f:14:3d: 18:c5:a8:b7:d6:c9:75:26:de:92:b5:6d:33:cd:cb:d7:40:52: 31:ef:36:b5:d5:2e:ac:44:f5:b5:2f:cd:84:32:31:60:0e:90: b8:db:f0:d8:2a:1f:68:3c:a8:f3:2c:3e:50:79:94:3d:99:bb: eb:28:07:5f:be:0e:80:a3:76:7c:20:d8:8b:32:8b:e6:d1:f0: 0d:c2:10:65:03:c3:c0:a8:ab:d4:98:e2:a3:ee:3e:e9:e8:2d: c2:45:bd:67:59:a7:6d:95:06:75:f9:59:81:03:85:18:40:7e: 01:6a:c9:02:e5:5e:f6:70:62:34:54:4b:2c:9a:a8:68:1a:b7: ba:b6:4f:5b:55:c8:59:b9:ff:c9:fa:50:af:c7:bc:81:78:c3: 3b:73:98:ac:52:30:55:c7:de:f8:9f:88:fd:fb:69:58:f0:c6: 0f:37:ed:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5 OTczOTE0QUIwHhcNMjQwNDI3MDI1MDAwWhcNMjQwNTA0MDI1MDAwWjAYMRYwFAYD VQQDEw02NjJjNjdkOC01OTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAC7MHuTdAigoLpOSB/H7k9gmv8PErzuzH28goQEVFMIj3TWkN0UO0jnNj/K TF4yHrT+cYj7HobX3497qKx5/uR/07RNmlyGAPpcMuzrjtFDG4xGqaXqgRfi9dhI rfq6M/favB2osISfPR0yku+U1XsRm2CmVjClVkhxj7JNhQoIy1nW+x6nzlIxeaDY fehfC6rvyRjWbXIYNHxvldIVMHFN/HeS2vBJbtJOrXACiHmyS8iPiCywRIwQKbph 2v0+7TM/BsFpU5stjZCXkkT9463iT3E/7+qcflsnRsno02sSeIO9JutcG30Rb5AE B9kFav0WzaprLDj58oxVvnAkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJKS0Z0 qzkG8/5JsL4OahOnhiAuMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2 QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4 MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxGLxNHxBcPgSmT0G6dA0KV4e23hRJpZ9L0EQ4hWa2tPHWLkdbu/6T D0Aw3JcfewZ/0KktQo640sZl5G63SMJM2V490EtC40P/Cs30ijD8JEzQOiocuosP FD0Yxai31sl1Jt6StW0zzcvXQFIx7za11S6sRPW1L82EMjFgDpC42/DYKh9oPKjz LD5QeZQ9mbvrKAdfvg6Ao3Z8INiLMovm0fANwhBlA8PAqKvUmOKj7j7p6C3CRb1n WadtlQZ1+VmBA4UYQH4BaskC5V72cGI0VEssmqhoGre6tk9bVchZuf/J+lCvx7yB eMM7c5isUjBVx974n4j9+2lY8MYPN+0k -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:20 2024 by rpki-client on console-ams.rpki-client.org