$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: XNioPrSCZrd80+0Jc89TVhFEiUQ9mntpiO1/6tcPBQk= Subject key identifier: A0:14:77:B9:03:D8:A3:E3:7C:6D:BB:DD:57:74:F9:22:52:FC:C7:C2 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 06C8 Signing time: Sat 04 May 2024 23:09:08 +0000 Manifest this update: Sat 04 May 2024 23:09:07 +0000 Manifest next update: Sat 11 May 2024 23:09:07 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: 1PFt+b6EPu56sYCPGF6WyhLOZPfh28Mk27LVrOIRVt0=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: YCjgtUnq0bK/nQUFojfVd+RvvleBXGJZLtaNdj95Zd4=) 3: 245DB0FE0C2B11EBAD607865C4F9AE02.roa (hash: e1RlAPLRReoXwau/miWWoK+7uPsm81zsRXmW+T8sh/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: May 4 23:09:07 2024 GMT Not After : May 11 23:09:07 2024 GMT Subject: CN=6636c014-2fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:06:09:1d:89:9a:aa:8a:72:4d:3a:a9:67: d0:8a:d6:2d:e2:19:5f:cc:a5:42:9d:4e:be:07:bb: 15:8e:53:66:46:c7:47:8b:2e:a4:85:d2:3a:47:fe: 48:f6:04:47:fc:9a:db:e9:20:94:6d:f7:16:ed:1e: 9d:6d:c4:3a:2d:b8:f8:82:69:27:79:a1:70:e3:a6: fc:d4:15:87:d3:28:8e:ec:11:53:48:5d:14:c0:62: 6a:fa:b8:b3:bd:6c:c8:2e:58:25:be:2d:a4:11:fa: b5:ef:d7:9b:c0:d5:22:dc:ac:88:a4:3a:4c:94:40: ac:db:b6:4b:8f:57:b5:77:8e:19:69:36:75:d5:5f: fe:1f:24:d3:0d:0a:25:31:71:7e:49:9c:da:6f:c4: b9:7f:65:e1:d3:a1:e6:7f:30:21:16:75:7c:16:e3: 16:0d:6d:76:c5:74:79:96:c9:81:16:ff:4e:bf:69: ec:98:9f:4f:68:2b:f4:61:44:3d:d2:1a:46:7b:b5: f8:42:0e:a4:12:a7:d1:30:0a:a0:80:93:92:18:57: 9a:92:f8:54:15:bd:0c:86:bc:cb:6c:6a:de:0b:85: 46:d7:07:e2:b1:76:f1:1a:7d:bb:23:00:a9:c4:c1: 77:31:31:5c:59:e4:17:e0:2e:fb:7d:7c:bc:8d:c2: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:14:77:B9:03:D8:A3:E3:7C:6D:BB:DD:57:74:F9:22:52:FC:C7:C2 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d3:cf:eb:7a:c1:59:a6:8a:2e:a9:d6:fa:d4:9f:1e:af:86: 0f:f6:c9:49:70:52:7e:27:26:0c:83:c9:22:62:72:c7:14:ba: d4:d6:93:3f:6b:5f:50:39:0e:67:a0:db:1e:db:e4:76:d1:da: 71:00:b7:e7:c8:ea:4a:1e:46:4a:13:28:c4:be:4a:42:9e:b0: ef:0f:c2:22:95:f7:f8:ed:fe:d6:8d:ee:6b:3e:51:e7:9b:35: 45:6f:a1:cc:db:64:d7:39:27:b0:3c:ea:76:50:dd:1c:d9:84: 4c:f0:88:33:b5:2f:43:ae:3c:79:4f:d7:f4:98:c2:f6:bf:b7: b0:09:71:e1:bb:26:ca:d4:15:e6:92:c4:34:14:44:89:f7:7b: 0e:be:34:72:53:55:31:e9:58:45:4f:61:a9:50:1e:29:81:ff: de:b2:ec:c5:66:ab:8d:31:a9:c6:66:d7:46:0b:a6:43:0c:3e: 4f:44:02:d3:88:6b:46:75:be:0f:14:2c:59:7a:5d:2d:96:70: 32:2e:af:3d:0f:a6:b4:f6:36:52:bf:93:01:a9:17:ca:39:fa: b2:6e:ed:f8:11:2d:7e:80:39:a3:94:1c:7f:df:76:85:ef:ea: a0:9e:a6:4e:6c:0f:3f:aa:7d:66:f9:e6:58:d9:79:96:08:18: 08:33:f6:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjQwNTA0MjMwOTA3WhcNMjQwNTExMjMwOTA3WjAYMRYwFAYD VQQDEw02NjM2YzAxNC0yZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUcGCR2JmqqKck06qWfQitYt4hlfzKVCnU6+B7sVjlNmRsdHiy6khdI6R/5I 9gRH/Jrb6SCUbfcW7R6dbcQ6Lbj4gmkneaFw46b81BWH0yiO7BFTSF0UwGJq+riz vWzILlglvi2kEfq179ebwNUi3KyIpDpMlECs27ZLj1e1d44ZaTZ11V/+HyTTDQol MXF+SZzab8S5f2Xh06HmfzAhFnV8FuMWDW12xXR5lsmBFv9Ov2nsmJ9PaCv0YUQ9 0hpGe7X4Qg6kEqfRMAqggJOSGFeakvhUFb0MhrzLbGreC4VG1wfisXbxGn27IwCp xMF3MTFcWeQX4C77fXy8jcKbwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAUd7kD 2KPjfG273Vd0+SJS/MfCMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS08/resFZpoouqdb61J8er4YP9slJcFJ+JyYMg8kiYnLHFLrU1pM/ a19QOQ5noNse2+R20dpxALfnyOpKHkZKEyjEvkpCnrDvD8Iilff47f7Wje5rPlHn mzVFb6HM22TXOSewPOp2UN0c2YRM8IgztS9Drjx5T9f0mML2v7ewCXHhuybK1BXm ksQ0FESJ93sOvjRyU1Ux6VhFT2GpUB4pgf/esuzFZquNManGZtdGC6ZDDD5PRALT iGtGdb4PFCxZel0tlnAyLq89D6a09jZSv5MBqRfKOfqybu34ES1+gDmjlBx/33aF 7+qgnqZObA8/qn1m+eZY2XmWCBgIM/Zv -----END CERTIFICATE-----Generated at Sun May 5 00:12:29 2024 by rpki-client on console-fra.rpki-client.org