$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: OTwDWkgLH8BTkKg5FocORIg40dAw7k2/oudcxmNpcpc= Subject key identifier: 3E:FC:F4:A7:95:CE:72:E6:7E:C1:DD:1F:38:57:AC:98:BC:CC:15:1D Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: B9 Signing time: Sun 05 May 2024 06:27:18 +0000 Manifest this update: Sun 05 May 2024 06:27:18 +0000 Manifest next update: Sun 12 May 2024 06:27:18 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: 71w3xi4fCe1W6d5W1opQeDyWCDhSlfynS8je8ZaWGh0=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: YFPGip3TyPqpkro/4HA/0ayxemrORio0uFQz7OYtwPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: May 5 06:27:18 2024 GMT Not After : May 12 06:27:18 2024 GMT Subject: CN=663726c6-32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:c5:e7:4e:ff:1b:d5:f1:51:52:85:6b:ea: 3f:b3:63:0c:9a:b3:36:0a:14:d9:4a:f0:4c:41:07: 78:88:c4:c6:e7:4c:c5:ba:d7:7e:46:f0:3c:d5:71: d4:4d:61:91:01:cb:e2:fd:88:d0:6c:38:99:83:e4: b8:37:21:85:d5:f0:da:4d:30:ba:0e:16:1f:b7:69: 87:f6:11:8e:15:52:97:b8:6f:f8:96:6e:96:39:6b: a1:3a:a4:2d:7a:f7:82:1c:00:87:2f:32:73:b9:43: d1:3e:45:79:3a:33:00:42:f5:5b:37:70:3d:ce:aa: ad:20:17:80:96:2a:fc:58:3d:cd:22:03:cb:d8:23: 80:a7:69:ba:8c:a1:9a:64:2d:ce:51:40:4b:73:5d: a8:7c:0a:14:bc:9f:58:52:d3:3b:64:10:c2:25:e1: d4:83:64:33:07:8a:20:ba:16:76:ef:86:33:4a:87: 5d:46:52:00:35:da:f3:25:84:1f:32:7f:0e:97:c4: a7:3f:c0:87:11:62:cb:c1:a2:e5:10:8d:38:2c:2a: 8c:09:05:46:28:8d:f9:d3:7b:53:54:1c:0c:62:06: 94:c6:c7:01:84:b1:6b:23:a6:f0:07:ef:be:6a:70: 7e:3f:d1:3c:ec:2d:18:47:12:07:6f:c6:fd:be:bd: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:F4:A7:95:CE:72:E6:7E:C1:DD:1F:38:57:AC:98:BC:CC:15:1D X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a0:61:3b:b3:0f:82:3e:a0:07:e7:64:28:d1:2d:9c:72:37: 35:8e:b4:56:a4:e9:33:46:85:f1:10:22:fe:bf:a9:c6:dc:6a: 2f:80:82:a5:5a:0c:ab:44:08:15:ed:12:5a:c0:f9:f8:16:2e: 62:06:ee:6c:b2:29:3f:0a:2d:1a:f5:d3:ca:79:4d:c9:32:7e: 35:d0:82:0b:bb:b1:b8:6b:d1:7e:3f:7f:4c:97:7d:fd:58:b3: de:0a:63:8e:26:37:16:36:e8:84:91:ba:1b:92:39:a3:17:a5: 3e:b7:d1:50:04:16:c3:e3:a4:65:a0:b5:15:5d:85:a1:b1:36: 4d:70:3b:5e:ef:de:ec:d5:04:56:05:ba:84:65:41:08:9a:e9: 33:7f:f1:c2:f3:9c:3e:ee:5a:dd:f8:0a:1a:57:e2:88:8f:23: 02:13:5c:28:92:27:02:b6:03:51:04:2c:7a:14:3e:f8:25:14: ca:f0:2b:60:36:0b:3a:f0:c8:88:b1:2a:bd:72:7d:63:3e:1c: 23:71:42:57:4f:d2:28:32:ca:51:5f:de:95:e1:70:38:47:89: cd:c7:d9:84:1b:39:32:c9:29:10:b3:ec:d0:4e:29:a1:5b:48: 31:14:d8:84:68:58:03:92:24:04:b8:bd:65:ac:e3:fa:65:d3: b9:fd:0b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjQwNTA1MDYyNzE4WhcNMjQwNTEyMDYyNzE4WjAYMRYwFAYD VQQDEw02NjM3MjZjNi0zMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ofF507/G9XxUVKFa+o/s2MMmrM2ChTZSvBMQQd4iMTG50zFutd+RvA81XHU TWGRAcvi/YjQbDiZg+S4NyGF1fDaTTC6DhYft2mH9hGOFVKXuG/4lm6WOWuhOqQt eveCHACHLzJzuUPRPkV5OjMAQvVbN3A9zqqtIBeAlir8WD3NIgPL2COAp2m6jKGa ZC3OUUBLc12ofAoUvJ9YUtM7ZBDCJeHUg2QzB4oguhZ274YzSoddRlIANdrzJYQf Mn8Ol8SnP8CHEWLLwaLlEI04LCqMCQVGKI3503tTVBwMYgaUxscBhLFrI6bwB+++ anB+P9E87C0YRxIHb8b9vr2ZpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD789KeV znLmfsHdHzhXrJi8zBUdMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAoGE7sw+CPqAH52Qo0S2ccjc1jrRWpOkzRoXxECL+v6nG3GovgIKl WgyrRAgV7RJawPn4Fi5iBu5ssik/Ci0a9dPKeU3JMn410IILu7G4a9F+P39Ml339 WLPeCmOOJjcWNuiEkbobkjmjF6U+t9FQBBbD46RloLUVXYWhsTZNcDte797s1QRW BbqEZUEImukzf/HC85w+7lrd+AoaV+KIjyMCE1wokicCtgNRBCx6FD74JRTK8Ctg Ngs68MiIsSq9cn1jPhwjcUJXT9IoMspRX96V4XA4R4nNx9mEGzkyySkQs+zQTimh W0gxFNiEaFgDkiQEuL1lrOP6ZdO5/Qvh -----END CERTIFICATE-----Generated at Sun May 5 08:39:11 2024 by rpki-client on console-fra.rpki-client.org