$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: Q+TPoKDSvYCHrbeYvqd2qWJ2tJefBJfkHUeExHrQOKk= Subject key identifier: BA:94:5D:ED:E8:C6:1B:AB:55:8B:E2:A2:8C:2B:C4:CE:16:A4:CF:12 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0680 Signing time: Sat 01 Jun 2024 00:18:19 +0000 Manifest this update: Sat 01 Jun 2024 00:18:18 +0000 Manifest next update: Sat 08 Jun 2024 00:18:18 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: TFqVG/0O+B2Mjx5nNF2ktM6vtLHbq8GBNfEVh972T2A=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: N/IK4l9L83s8U5dGpeXFymDYnkY5mAHFGvsvPCstQRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Jun 1 00:18:18 2024 GMT Not After : Jun 8 00:18:18 2024 GMT Subject: CN=665a68cb-fda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:ba:f7:2f:50:62:9b:cc:69:41:47:c9:22: 1f:3a:44:86:df:33:bd:22:d2:59:eb:20:58:f6:8a: e9:ce:a7:56:32:c5:ff:41:b2:07:1b:29:ba:37:cb: 6b:d2:1b:97:fe:86:b2:78:73:0a:bf:24:2a:f3:69: d4:72:5d:3f:74:c7:fe:4e:f8:8a:f9:9e:a8:da:88: ba:e8:c5:c8:3d:2a:c1:e9:22:69:75:b7:76:6e:9b: fb:09:2e:19:54:41:05:75:29:64:3b:76:34:06:7c: 76:fc:3b:c9:26:81:64:ed:5d:71:7b:19:0c:6f:d5: 30:63:f7:4d:1e:52:96:ce:c0:ab:f0:28:7a:ac:96: eb:e9:0e:8f:25:78:a1:b2:59:38:79:7b:97:20:62: 1a:5d:a8:1f:aa:2c:8c:ca:fa:2d:ed:0e:f3:ed:43: 2e:05:c4:01:99:30:06:0d:ab:55:c9:a2:ef:f4:79: 98:b5:0f:e7:9a:35:e6:fd:41:b4:70:45:f0:3c:7f: 9f:89:db:89:fb:ab:39:a9:0c:0b:98:e7:3b:49:fc: b9:b3:32:fd:01:15:cb:1d:99:55:78:7e:a5:e4:c6: 68:e5:8c:33:c0:bc:87:07:e0:bc:a7:d6:76:00:8a: 7f:a9:ab:ed:98:e2:2c:30:3e:68:78:11:e3:02:d1: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:5D:ED:E8:C6:1B:AB:55:8B:E2:A2:8C:2B:C4:CE:16:A4:CF:12 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:27:27:40:b7:61:80:dc:3e:43:14:82:12:94:5e:d4:67:64: 7d:f0:87:c4:c1:da:1a:be:02:22:c0:c4:88:81:2e:12:11:96: ac:8b:2f:96:49:ac:0c:95:23:ff:4f:b7:2f:fb:76:f6:91:55: 7d:f9:c1:7d:d1:fd:47:87:02:e2:20:73:7a:0a:6c:06:8b:89: 9c:53:aa:df:89:4c:91:50:e3:59:6e:a4:f3:92:db:99:43:45: 02:c8:75:d0:2d:37:c1:09:9d:3b:8c:8d:e2:9a:4f:df:19:0d: 4a:c4:c8:b9:55:7f:98:e9:cd:bf:25:fc:1e:d4:bf:0b:3e:1e: a6:2b:37:f7:54:b2:72:ff:04:c4:62:93:8f:12:af:86:b6:56: 5f:97:bc:67:fc:d3:7e:b0:c7:e0:a1:65:64:72:55:a1:5f:7f: 52:e5:8e:31:37:b3:e7:a1:af:f7:7b:18:13:0f:5b:11:4a:46: 2e:a7:b9:d2:4d:85:4c:13:c0:ba:a4:19:05:2b:a4:e5:f0:4a: a5:65:e8:53:05:f4:f3:0d:31:03:24:05:93:84:96:f5:2c:a7: 4d:da:f5:93:ec:12:a1:3b:94:ff:7e:4e:5b:28:af:cc:e0:08: d0:ad:61:68:62:24:cd:90:ec:db:9c:54:06:a3:71:42:cb:ad: 10:0f:78:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjQwNjAxMDAxODE4WhcNMjQwNjA4MDAxODE4WjAYMRYwFAYD VQQDEw02NjVhNjhjYi1mZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvje69y9QYpvMaUFHySIfOkSG3zO9ItJZ6yBY9orpzqdWMsX/QbIHGym6N8tr 0huX/oayeHMKvyQq82nUcl0/dMf+TviK+Z6o2oi66MXIPSrB6SJpdbd2bpv7CS4Z VEEFdSlkO3Y0Bnx2/DvJJoFk7V1xexkMb9UwY/dNHlKWzsCr8Ch6rJbr6Q6PJXih slk4eXuXIGIaXagfqiyMyvot7Q7z7UMuBcQBmTAGDatVyaLv9HmYtQ/nmjXm/UG0 cEXwPH+fiduJ+6s5qQwLmOc7Sfy5szL9ARXLHZlVeH6l5MZo5YwzwLyHB+C8p9Z2 AIp/qavtmOIsMD5oeBHjAtHWPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqUXe3o xhurVYvioowrxM4WpM8SMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5JydAt2GA3D5DFIISlF7UZ2R98IfEwdoavgIiwMSIgS4SEZasiy+W SawMlSP/T7cv+3b2kVV9+cF90f1HhwLiIHN6CmwGi4mcU6rfiUyRUONZbqTzktuZ Q0UCyHXQLTfBCZ07jI3imk/fGQ1KxMi5VX+Y6c2/Jfwe1L8LPh6mKzf3VLJy/wTE YpOPEq+GtlZfl7xn/NN+sMfgoWVkclWhX39S5Y4xN7Pnoa/3exgTD1sRSkYup7nS TYVME8C6pBkFK6Tl8EqlZehTBfTzDTEDJAWThJb1LKdN2vWT7BKhO5T/fk5bKK/M 4AjQrWFoYiTNkOzbnFQGo3FCy60QD3id -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:46 2024 by rpki-client on console-fra.rpki-client.org