$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: ci81odnsunMsH7IDvDnEetMH6SubCujykGaX0K9/YbM= Subject key identifier: 57:A0:FB:C1:C2:83:20:F9:2F:7A:CF:2C:7E:C1:91:FF:C0:52:E1:BD Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 046A Signing time: Fri 03 May 2024 01:51:39 +0000 Manifest this update: Fri 03 May 2024 01:51:38 +0000 Manifest next update: Fri 10 May 2024 01:51:38 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: /htudHk/vScFUroolp6MLbScrIXq7movziAJPYm8nAE=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: DR/aMkDvp2qeehavqFOy98siRZaHxC68YUUog5YWi3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: May 3 01:51:38 2024 GMT Not After : May 10 01:51:38 2024 GMT Subject: CN=6634432a-2181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:71:54:44:c2:93:23:02:ac:43:32:90:86: 34:45:cd:28:3f:9e:95:a7:77:b6:ad:de:e6:d8:a8: 91:03:ca:fc:e4:e6:db:d2:4b:11:55:f9:48:5b:d4: da:88:ba:11:1b:b9:56:91:bb:d1:be:2f:58:ef:04: d5:5c:34:33:2f:eb:75:23:7c:64:f6:e4:1d:f2:f8: f5:d2:b0:68:77:e9:4c:af:b6:63:e6:15:35:d4:cf: 19:09:1b:4c:12:ae:bc:e0:a2:42:97:22:ed:b3:e2: 67:5a:cb:0a:85:56:1e:99:61:d0:0a:93:8c:a6:cf: 77:af:16:c6:c3:25:7d:24:d3:99:2d:60:3c:64:b5: bf:e1:fd:17:3a:77:0e:bd:b7:a3:f0:56:2f:e5:04: a0:60:77:78:c9:c2:e8:98:cd:8f:b5:48:85:b2:5f: 5b:d1:5e:b3:53:91:35:7f:1d:44:e8:2d:98:26:9a: e0:47:51:3d:fd:c9:aa:33:ec:17:eb:cf:15:ca:e7: 18:8a:a8:01:d7:23:93:df:9e:d8:ad:bb:35:29:73: 45:72:1f:4b:96:88:b1:cd:22:2c:a1:ff:8e:42:c2: 9a:bf:bf:4c:bb:f9:b6:f7:8e:7b:4d:14:64:ee:94: 63:12:ff:fb:fc:4e:5f:e3:68:d5:34:b0:9d:89:c7: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A0:FB:C1:C2:83:20:F9:2F:7A:CF:2C:7E:C1:91:FF:C0:52:E1:BD X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:dd:63:f6:f4:3f:24:a9:b7:0f:e9:d4:de:00:b8:8a:47:0f: 27:0a:65:ff:ac:4c:86:67:d6:d7:8e:96:48:27:cf:7f:93:5e: ad:08:53:2b:c7:19:99:ff:e7:e5:5e:0b:0b:1e:80:f9:40:87: 8d:26:15:df:cf:bf:84:b5:15:2b:21:63:a9:01:9c:e1:fe:7a: 01:81:37:9c:a3:ff:a6:d0:06:71:e3:52:7c:7b:39:a9:a8:bd: 43:c3:70:eb:e1:94:dc:a4:d8:6f:42:a2:9d:92:6c:f3:6c:15: ff:27:3e:73:7f:69:da:2c:85:81:cf:b3:26:e2:68:26:ed:e5: fc:50:3b:6b:67:63:73:02:51:bf:43:94:bc:40:64:92:5a:7a: 37:13:ae:3b:54:af:b8:b9:d5:fd:3b:0e:5d:60:e5:0f:9a:11: 68:69:e7:f0:1c:1e:02:8b:b9:c8:7d:23:56:d8:75:b2:b1:ff: f1:76:71:31:3a:e6:09:84:37:a3:62:1d:59:df:1b:ab:55:94: 7e:00:7d:67:46:3e:c4:a0:f2:f8:a0:d4:58:2f:0e:79:12:d3: 5f:6f:d2:dc:8a:49:16:da:04:ff:28:b9:6b:84:0f:8c:dc:fa: 6d:6c:3f:82:7e:ff:24:d3:18:d0:5f:8d:54:47:90:97:ff:97: be:89:00:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjQwNTAzMDE1MTM4WhcNMjQwNTEwMDE1MTM4WjAYMRYwFAYD VQQDEw02NjM0NDMyYS0yMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWxxVETCkyMCrEMykIY0Rc0oP56Vp3e2rd7m2KiRA8r85Obb0ksRVflIW9Ta iLoRG7lWkbvRvi9Y7wTVXDQzL+t1I3xk9uQd8vj10rBod+lMr7Zj5hU11M8ZCRtM Eq684KJClyLts+JnWssKhVYemWHQCpOMps93rxbGwyV9JNOZLWA8ZLW/4f0XOncO vbej8FYv5QSgYHd4ycLomM2PtUiFsl9b0V6zU5E1fx1E6C2YJprgR1E9/cmqM+wX 688VyucYiqgB1yOT357Yrbs1KXNFch9LloixzSIsof+OQsKav79Mu/m29457TRRk 7pRjEv/7/E5f42jVNLCdicc1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeg+8HC gyD5L3rPLH7Bkf/AUuG9MB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP3WP29D8kqbcP6dTeALiKRw8nCmX/rEyGZ9bXjpZIJ89/k16tCFMr xxmZ/+flXgsLHoD5QIeNJhXfz7+EtRUrIWOpAZzh/noBgTeco/+m0AZx41J8ezmp qL1Dw3Dr4ZTcpNhvQqKdkmzzbBX/Jz5zf2naLIWBz7Mm4mgm7eX8UDtrZ2NzAlG/ Q5S8QGSSWno3E647VK+4udX9Ow5dYOUPmhFoaefwHB4Ci7nIfSNW2HWysf/xdnEx OuYJhDejYh1Z3xurVZR+AH1nRj7EoPL4oNRYLw55EtNfb9LcikkW2gT/KLlrhA+M 3PptbD+Cfv8k0xjQX41UR5CX/5e+iQDB -----END CERTIFICATE-----Generated at Fri May 3 03:10:55 2024 by rpki-client on console-ams.rpki-client.org