$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: sLOS14PsAIB8eZ7lvnITANQ165TdLxRw+6RkVH+71hE= Subject key identifier: E3:2A:51:38:40:0D:BE:FD:36:F7:94:76:45:DE:A9:92:C4:43:16:C2 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0987 Signing time: Mon 06 May 2024 21:03:27 +0000 Manifest this update: Mon 06 May 2024 21:03:27 +0000 Manifest next update: Mon 13 May 2024 21:03:27 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: guAkMVVtfbr75llVJ3qFHOw1YKS//AuXV8kWQK5ZuaA=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: BfaBbqdTeXcprKlCZnPR/VFXV6AoP9YV7kqFZXcvXOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: May 6 21:03:27 2024 GMT Not After : May 13 21:03:27 2024 GMT Subject: CN=6639459f-6826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:15:4f:50:e7:09:07:ef:53:80:56:bd:e2: 34:ff:4e:eb:2b:e9:b2:97:cc:55:97:cb:84:92:c2: 49:18:93:68:61:35:c5:05:03:0a:19:e3:6e:29:f1: 2a:1d:f9:71:8a:cc:2e:37:88:7f:1b:58:d2:31:25: be:51:63:0c:31:13:da:d8:9a:12:00:b2:70:21:37: 5f:ef:22:53:4a:6e:a8:c1:44:e7:c9:3c:c8:6d:c9: 7c:52:72:79:c2:05:94:f6:9b:8c:4c:e5:1d:77:07: 2e:7d:3c:94:af:51:43:64:a3:3d:69:e2:0e:b6:ce: 28:77:41:71:be:9c:bc:e1:ab:9b:60:8d:81:a5:05: 2c:a7:cd:cd:f1:8e:47:00:60:e8:00:b5:e9:1c:1d: 7a:b7:86:c0:07:6b:78:15:2c:2e:2a:1c:17:c2:be: 8d:50:6f:86:30:bf:3d:38:f4:49:ae:b3:ad:6b:6c: 66:0d:a9:34:ce:9b:94:0a:b8:2c:09:00:c1:83:94: 8a:08:86:62:2d:2c:91:64:c6:01:a3:54:c4:da:83: 9e:96:9b:95:8e:dd:29:87:cb:ee:9e:bf:0c:1f:29: 0d:8e:ac:09:63:be:d5:99:c4:0e:cd:75:1f:98:6f: 4e:a1:66:c1:9b:07:06:46:91:89:ae:26:5c:df:a7: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:51:38:40:0D:BE:FD:36:F7:94:76:45:DE:A9:92:C4:43:16:C2 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cc:a7:a4:57:e2:69:03:b6:da:ab:03:e3:04:f9:46:37:30: a6:77:02:c2:e6:76:45:4c:a2:84:0c:66:14:97:de:7f:38:de: 87:a6:58:31:b8:95:3c:06:1a:00:10:74:6b:82:29:21:96:34: 90:a3:a7:32:88:f3:0c:a9:73:c0:6b:dd:18:b3:26:83:ed:20: d1:97:44:af:5a:46:3f:6f:a5:e5:aa:48:7a:ad:07:99:80:bd: 49:f0:c1:35:f4:cb:4b:41:2b:cd:90:5c:18:c5:54:ea:e6:14: 00:ed:5b:dc:6b:91:09:11:b4:08:d5:31:14:28:cc:ec:d6:5d: ea:26:70:dd:e9:48:c1:b1:a1:0e:23:7c:61:e0:bd:b1:0c:30: b7:2a:18:b7:6c:fe:be:42:75:6b:e4:9a:65:9e:95:d0:fb:a9: 09:c1:0a:fe:ac:b1:ea:3f:d5:25:f0:08:56:87:9f:0f:3d:43: 4e:51:8c:95:b9:24:ed:60:22:97:c2:1b:57:1c:74:8b:96:58: 45:a5:07:3b:e8:69:ab:d1:20:08:44:2b:20:af:d8:12:52:56: 7c:70:6b:ed:4c:06:6d:39:cf:96:5c:02:4d:da:50:59:43:84: e1:fb:4a:f3:c7:32:ec:6c:3d:6d:36:22:e9:04:0d:be:86:41: 66:d9:e4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjQwNTA2MjEwMzI3WhcNMjQwNTEzMjEwMzI3WjAYMRYwFAYD VQQDEw02NjM5NDU5Zi02ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FwVT1DnCQfvU4BWveI0/07rK+myl8xVl8uEksJJGJNoYTXFBQMKGeNuKfEq HflxiswuN4h/G1jSMSW+UWMMMRPa2JoSALJwITdf7yJTSm6owUTnyTzIbcl8UnJ5 wgWU9puMTOUddwcufTyUr1FDZKM9aeIOts4od0Fxvpy84aubYI2BpQUsp83N8Y5H AGDoALXpHB16t4bAB2t4FSwuKhwXwr6NUG+GML89OPRJrrOta2xmDak0zpuUCrgs CQDBg5SKCIZiLSyRZMYBo1TE2oOelpuVjt0ph8vunr8MHykNjqwJY77VmcQOzXUf mG9OoWbBmwcGRpGJriZc36cYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMqUThA Db79NveUdkXeqZLEQxbCMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwzKekV+JpA7baqwPjBPlGNzCmdwLC5nZFTKKEDGYUl95/ON6Hplgx uJU8BhoAEHRrgikhljSQo6cyiPMMqXPAa90YsyaD7SDRl0SvWkY/b6Xlqkh6rQeZ gL1J8ME19MtLQSvNkFwYxVTq5hQA7Vvca5EJEbQI1TEUKMzs1l3qJnDd6UjBsaEO I3xh4L2xDDC3Khi3bP6+QnVr5JplnpXQ+6kJwQr+rLHqP9Ul8AhWh58PPUNOUYyV uSTtYCKXwhtXHHSLllhFpQc76Gmr0SAIRCsgr9gSUlZ8cGvtTAZtOc+WXAJN2lBZ Q4Th+0rzxzLsbD1tNiLpBA2+hkFm2eRd -----END CERTIFICATE-----Generated at Mon May 6 22:41:02 2024 by rpki-client on console-ams.rpki-client.org