$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: +6S6Gl1gg0sl6uyrWOU4+yPKeIpgx77rI2/2LI7ejn8= Subject key identifier: 7C:8E:C7:B3:FC:C3:F9:79:3C:B7:D0:82:36:A2:8A:0B:16:58:42:F0 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0125 Signing time: Sat 01 Jun 2024 06:31:59 +0000 Manifest this update: Sat 01 Jun 2024 06:31:59 +0000 Manifest next update: Sat 08 Jun 2024 06:31:59 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: Zb+aPeQU4cADofcvcydiobNmRdPkq9hN+wlO7PnDwKo=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: p+ufr7iuPp3HMFVR+tYrXf+b7pzblZD7Phxle2huKCM=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: ZQjOfJY9i+1M5p2GYBl5mRwvZ5haSFVGstB4GimOTbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Jun 1 06:31:59 2024 GMT Not After : Jun 8 06:31:59 2024 GMT Subject: CN=665ac05f-c7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:46:fe:4c:d2:b5:e5:56:d7:54:23:81:d6: 4b:97:bf:ef:7e:6f:d3:3a:ab:fa:2c:b8:78:4e:c7: e9:71:60:fd:70:aa:8a:90:bb:09:ec:67:65:6c:f0: ca:d8:52:10:82:03:4e:a6:11:a6:fa:c0:3d:75:e9: 4d:f9:1d:2e:a5:95:9b:e9:6d:87:5c:c0:91:1e:5b: 3f:a3:01:f2:1d:a4:a0:63:3a:3c:16:37:93:ca:c1: 21:cb:6e:63:96:33:38:75:f5:3d:92:00:04:7a:68: d8:e0:51:b2:ef:92:38:79:6d:bc:1c:a9:e3:91:8c: 91:47:b4:51:93:6b:b3:d3:de:d2:c1:fd:72:a4:8b: 14:24:c6:09:cd:28:96:67:03:22:a4:f6:93:3c:e6: 8b:19:80:3c:f3:7f:7e:35:32:d7:14:1b:1b:93:e7: f8:4c:fc:ff:8e:cf:20:d0:4f:7e:e3:a5:10:db:1f: f9:dd:55:99:e7:bb:15:b7:97:b5:fb:89:05:8e:50: 75:b3:86:78:d6:5b:76:be:25:0b:c2:31:3e:4a:ab: 1a:13:36:20:75:91:39:4e:61:2b:c1:cf:ac:80:66: e0:b9:bc:6d:bf:3a:19:7c:bf:09:c7:6f:97:f5:aa: cb:77:e3:58:76:ff:2a:28:f3:49:4d:73:70:39:ef: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8E:C7:B3:FC:C3:F9:79:3C:B7:D0:82:36:A2:8A:0B:16:58:42:F0 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:11:d7:d6:23:e0:bb:53:3b:a2:a7:a9:73:f2:9d:96:06:f4: 7a:f9:30:a0:8d:68:2f:b5:e1:49:b0:38:ea:ae:96:38:0e:db: 2e:e0:01:03:a4:73:7d:2a:4a:0d:04:f1:ef:72:9b:e8:29:2d: f9:3e:1c:10:2a:bb:d2:8f:99:ed:bb:de:7c:4d:00:1c:28:fa: 4d:52:76:2d:76:3f:ab:80:55:0c:5c:af:0e:6f:aa:90:07:83: 9e:e1:0e:54:0d:f2:ce:b3:7b:5b:51:e3:4e:85:17:ae:f1:9b: 74:d6:82:77:d2:6e:40:7a:f2:0e:74:f5:8f:99:f3:73:ba:1b: 20:39:3f:85:a8:81:1f:8b:cf:f2:5c:e5:f7:75:2a:2e:f7:a4: fb:bc:24:d5:eb:4c:4d:90:de:46:0b:f8:9e:a9:7b:2e:54:5f: 1a:7d:9f:7a:76:fe:d5:b0:0b:79:5d:17:07:0b:e2:76:89:d1: 8d:62:6e:da:f3:8b:72:ca:3f:5f:9c:cb:63:4f:89:b5:78:48: a4:97:ae:94:43:3e:8a:33:35:52:17:45:66:3e:43:63:01:6d: 4d:b7:73:e9:7c:82:dc:e4:37:6c:cc:4d:ac:67:5d:cf:75:36: e5:bf:3b:c3:22:d4:a3:64:a8:99:b1:2d:5f:8d:df:ac:33:d1: ff:43:90:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjQwNjAxMDYzMTU5WhcNMjQwNjA4MDYzMTU5WjAYMRYwFAYD VQQDEw02NjVhYzA1Zi1jN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sBG/kzSteVW11QjgdZLl7/vfm/TOqv6LLh4TsfpcWD9cKqKkLsJ7GdlbPDK 2FIQggNOphGm+sA9delN+R0upZWb6W2HXMCRHls/owHyHaSgYzo8FjeTysEhy25j ljM4dfU9kgAEemjY4FGy75I4eW28HKnjkYyRR7RRk2uz097Swf1ypIsUJMYJzSiW ZwMipPaTPOaLGYA8839+NTLXFBsbk+f4TPz/js8g0E9+46UQ2x/53VWZ57sVt5e1 +4kFjlB1s4Z41lt2viULwjE+SqsaEzYgdZE5TmErwc+sgGbgubxtvzoZfL8Jx2+X 9arLd+NYdv8qKPNJTXNwOe8/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyOx7P8 w/l5PLfQgjaiigsWWELwMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYEdfWI+C7Uzuip6lz8p2WBvR6+TCgjWgvteFJsDjqrpY4Dtsu4AED pHN9KkoNBPHvcpvoKS35PhwQKrvSj5ntu958TQAcKPpNUnYtdj+rgFUMXK8Ob6qQ B4Oe4Q5UDfLOs3tbUeNOhReu8Zt01oJ30m5AevIOdPWPmfNzuhsgOT+FqIEfi8/y XOX3dSou96T7vCTV60xNkN5GC/ieqXsuVF8afZ96dv7VsAt5XRcHC+J2idGNYm7a 84tyyj9fnMtjT4m1eEikl66UQz6KMzVSF0VmPkNjAW1Nt3PpfILc5DdszE2sZ13P dTblvzvDItSjZKiZsS1fjd+sM9H/Q5Bv -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org