$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: BOthVNhCgk+gUqLoQs9/u66m5MUnWz5nSTPVwY+/yX4= Subject key identifier: 6C:0C:8C:84:EA:CB:E3:3C:EC:A9:FE:00:E5:C6:7B:E4:0E:BB:5E:70 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 86 Signing time: Fri 17 May 2024 07:13:04 +0000 Manifest this update: Fri 17 May 2024 07:13:04 +0000 Manifest next update: Fri 24 May 2024 07:13:04 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: E/T1S56lbZ+rZf8UH2oxN0fkloTA7ucaN7iDtTCd0gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: May 17 07:13:04 2024 GMT Not After : May 24 07:13:04 2024 GMT Subject: CN=66470380-9344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:a9:46:de:bb:ba:25:41:8e:47:4c:b4:64: d8:04:d6:90:3a:a0:5c:39:c1:69:ef:14:51:3d:9a: df:18:28:cd:40:16:7d:ef:62:5c:63:b5:92:8e:84: 92:2f:e6:bd:00:20:69:12:11:18:c0:df:dd:97:e6: 34:85:3c:e3:f8:20:5e:2a:a3:72:13:87:11:74:36: 0c:83:09:40:87:93:0f:7e:a2:4d:d4:82:1c:93:be: 18:e0:5e:4c:59:50:1a:d6:1e:e9:17:56:81:92:5d: bc:b0:c0:9f:22:7a:3c:3b:52:df:87:da:21:8a:36: c9:a5:57:8f:70:11:a5:d7:5e:bd:de:31:6a:8b:10: cf:e7:97:16:35:e5:f0:6c:33:9e:97:8e:24:2c:b9: b8:e4:f0:9f:35:64:a8:60:c4:0b:6b:31:a3:5f:0d: 16:ee:6a:75:fa:9a:9a:ce:86:ed:d9:56:26:60:5e: c4:b1:7d:78:64:d7:d7:04:51:61:26:89:18:9f:5b: 6c:83:73:07:27:bd:44:ab:2a:21:4e:4d:40:1b:3a: b7:e7:03:e6:63:07:f7:16:96:07:d2:13:38:9b:ad: 51:43:9f:5b:6a:99:ad:c0:ef:87:ff:04:e5:72:9d: b1:1f:8f:85:85:65:21:ef:a0:af:5f:68:43:b2:32: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0C:8C:84:EA:CB:E3:3C:EC:A9:FE:00:E5:C6:7B:E4:0E:BB:5E:70 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:18:e2:6b:f8:e8:b8:fb:be:6d:5f:cd:4a:ff:70:c0:28:b5: 2d:52:a7:2b:97:c1:89:e4:ba:d6:89:0a:72:4e:62:d4:c8:b9: 39:74:3d:e5:0f:1e:ca:b7:e2:41:cb:8a:2c:9e:3e:3b:e2:6b: cf:4f:ae:f5:47:fc:67:11:6e:d1:e6:be:57:f1:d1:e4:f9:4e: 62:62:2a:f0:6b:dc:a1:d9:0f:6c:47:14:75:4e:48:54:a1:d9: 60:a8:b4:c3:10:0e:02:9a:88:bc:d9:80:0f:14:9b:c2:f4:08: 9f:42:e9:29:e9:7e:ae:63:dc:3f:d2:3d:ea:a7:b4:ee:2a:a7: a1:4d:e1:ac:68:36:c0:f4:02:e4:81:4a:da:49:d9:27:75:9d: 8a:c4:6c:7e:40:3b:52:32:ad:9f:b3:c5:05:0b:52:b7:44:cf: ed:e6:d8:d3:7b:a5:28:3b:b2:22:31:dd:9e:02:94:2b:90:60: 7b:a5:59:c1:79:c1:0c:46:3f:c6:d1:62:81:fc:ea:01:37:75: 5c:d3:64:f7:67:db:1b:20:7d:15:fe:52:3f:4c:bd:f7:98:12: 41:bc:27:f3:01:34:bf:ef:ff:f2:8d:06:2a:62:61:7f:fb:83: d1:57:c3:19:dc:e9:a4:f8:3a:a5:3c:7e:c0:c1:1d:67:c6:cf: 5f:94:20:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjQwNTE3MDcxMzA0WhcNMjQwNTI0MDcxMzA0WjAYMRYwFAYD VQQDEw02NjQ3MDM4MC05MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nipRt67uiVBjkdMtGTYBNaQOqBcOcFp7xRRPZrfGCjNQBZ972JcY7WSjoSS L+a9ACBpEhEYwN/dl+Y0hTzj+CBeKqNyE4cRdDYMgwlAh5MPfqJN1IIck74Y4F5M WVAa1h7pF1aBkl28sMCfIno8O1Lfh9ohijbJpVePcBGl11693jFqixDP55cWNeXw bDOel44kLLm45PCfNWSoYMQLazGjXw0W7mp1+pqazobt2VYmYF7EsX14ZNfXBFFh JokYn1tsg3MHJ71EqyohTk1AGzq35wPmYwf3FpYH0hM4m61RQ59bapmtwO+H/wTl cp2xH4+FhWUh76CvX2hDsjKqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwMjITq y+M87Kn+AOXGe+QOu15wMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhGOJr+Oi4+75tX81K/3DAKLUtUqcrl8GJ5LrWiQpyTmLUyLk5dD3l Dx7Kt+JBy4osnj474mvPT671R/xnEW7R5r5X8dHk+U5iYirwa9yh2Q9sRxR1TkhU odlgqLTDEA4Cmoi82YAPFJvC9AifQukp6X6uY9w/0j3qp7TuKqehTeGsaDbA9ALk gUraSdkndZ2KxGx+QDtSMq2fs8UFC1K3RM/t5tjTe6UoO7IiMd2eApQrkGB7pVnB ecEMRj/G0WKB/OoBN3Vc02T3Z9sbIH0V/lI/TL33mBJBvCfzATS/7//yjQYqYmF/ +4PRV8MZ3Omk+DqlPH7AwR1nxs9flCC1 -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org