$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft File: P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json) Hash identifier: 1rcNiV+pDlTQoGSsCRxas0Pmpd1bJod7lSh5CbOk0Ng= Subject key identifier: 89:CB:D8:0B:7A:05:EE:09:48:58:46:34:F1:4E:D7:5D:CB:48:D9:9B Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 Certificate issuer: /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft Manifest number: F8 Signing time: Sun 05 May 2024 05:45:59 +0000 Manifest this update: Sun 05 May 2024 05:45:58 +0000 Manifest next update: Sun 12 May 2024 05:45:58 +0000 Files and hashes: 1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: if/2wGWt50ekCkJ9jmfLALbnsolmpYTjyUXfz2qEs+M=) 2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: dWlV6mF93NqSHzlZSlOBWes3YObkb7bTCG+mae4p1y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Validity Not Before: May 5 05:45:58 2024 GMT Not After : May 12 05:45:58 2024 GMT Subject: CN=66371d16-608b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:88:ec:3b:d0:e1:82:fc:44:db:d3:15:20: c1:a1:5b:ce:11:a3:c7:0b:5b:06:35:fc:92:86:bf: f8:59:20:9b:eb:47:9e:a8:80:ac:f4:dd:2a:7f:89: 42:5c:8a:93:a3:c2:c7:ec:35:36:d2:00:7e:54:27: 94:d4:05:03:aa:1f:5e:05:69:29:24:2e:4e:80:55: 13:8c:28:2a:98:d9:a9:2a:35:59:e5:e6:a0:43:68: 50:92:c3:12:9c:21:e4:60:4d:9b:c2:be:28:56:dc: 38:03:96:78:d1:d6:d0:98:42:d8:03:0e:74:b6:07: 71:a1:ed:2a:aa:92:dc:0f:2c:ed:59:0e:cb:e2:2e: 17:97:7d:06:4e:80:70:96:f1:7c:89:d0:a0:78:a4: 81:99:9e:58:bf:c7:2b:24:db:df:e3:d0:cc:c8:cf: c9:6c:00:3a:ba:50:4b:ee:c4:e4:0e:6e:3d:f9:93: 29:00:cc:6a:1c:29:ec:fb:0e:ab:b9:0d:bb:09:1e: c0:98:bf:9e:8b:3a:b6:51:08:43:3a:76:02:c8:2c: 2a:6e:50:d9:05:64:00:6c:72:8f:55:31:07:0f:07: 54:e4:34:2c:d6:ce:b2:10:2a:b5:8a:8a:98:b6:19: a4:69:57:89:0b:8c:b3:22:38:90:58:26:d7:6a:14: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CB:D8:0B:7A:05:EE:09:48:58:46:34:F1:4E:D7:5D:CB:48:D9:9B X509v3 Authority Key Identifier: keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d8:fd:bf:1f:b9:b1:fd:df:e5:7e:85:ce:9a:18:2d:39:21: bc:3d:4e:1c:23:24:f9:65:69:2e:02:57:c0:3b:6c:ed:27:b0: 2f:c4:31:8e:3c:26:72:1f:23:a2:3c:9b:39:35:a5:10:16:31: 5e:89:16:2d:ac:0b:06:d4:1a:a2:4a:82:55:33:ff:a1:c1:e8: 8e:81:0a:62:37:34:11:4e:db:d2:b9:73:6e:31:d5:5c:9e:07: ef:d1:d0:57:ef:82:86:28:7f:ef:5c:a2:3e:50:aa:46:2b:0a: 6f:cb:aa:7e:89:fe:59:ff:22:d5:a9:97:eb:aa:b1:1c:de:04: 56:17:df:0f:a0:49:ad:9e:6f:88:39:d9:f4:bc:de:d6:91:3f: 5a:92:5e:48:fc:11:b4:c5:00:59:1f:72:8a:10:33:4c:78:82: 61:3f:62:5e:61:4b:9b:80:6a:9d:4c:4d:e4:9e:d2:36:e9:77: dc:7f:1d:da:ba:3d:10:70:8c:f7:a6:ec:81:f3:a1:ef:de:ca: d8:43:59:fd:df:08:a3:a2:50:44:cd:85:92:c4:ec:98:f1:25: 14:ea:c8:83:a9:e0:61:a1:0c:7c:96:84:87:be:f7:e1:a6:c6: d2:ab:a6:1f:92:6f:69:6d:2c:e0:1f:40:b0:ff:ed:4d:c7:71: d2:99:27:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2 RjJCMDYxNDgwHhcNMjQwNTA1MDU0NTU4WhcNMjQwNTEyMDU0NTU4WjAYMRYwFAYD VQQDEw02NjM3MWQxNi02MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytmI7DvQ4YL8RNvTFSDBoVvOEaPHC1sGNfyShr/4WSCb60eeqICs9N0qf4lC XIqTo8LH7DU20gB+VCeU1AUDqh9eBWkpJC5OgFUTjCgqmNmpKjVZ5eagQ2hQksMS nCHkYE2bwr4oVtw4A5Z40dbQmELYAw50tgdxoe0qqpLcDyztWQ7L4i4Xl30GToBw lvF8idCgeKSBmZ5Yv8crJNvf49DMyM/JbAA6ulBL7sTkDm49+ZMpAMxqHCns+w6r uQ27CR7AmL+eizq2UQhDOnYCyCwqblDZBWQAbHKPVTEHDwdU5DQs1s6yECq1ioqY thmkaVeJC4yzIjiQWCbXahT6QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInL2At6 Be4JSFhGNPFO113LSNmbMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU2P2/H7mx/d/lfoXOmhgtOSG8PU4cIyT5ZWkuAlfAO2ztJ7AvxDGO PCZyHyOiPJs5NaUQFjFeiRYtrAsG1BqiSoJVM/+hweiOgQpiNzQRTtvSuXNuMdVc ngfv0dBX74KGKH/vXKI+UKpGKwpvy6p+if5Z/yLVqZfrqrEc3gRWF98PoEmtnm+I Odn0vN7WkT9akl5I/BG0xQBZH3KKEDNMeIJhP2JeYUubgGqdTE3kntI26Xfcfx3a uj0QcIz3puyB86Hv3srYQ1n93wijolBEzYWSxOyY8SUU6siDqeBhoQx8loSHvvfh psbSq6Yfkm9pbSzgH0Cw/+1Nx3HSmSej -----END CERTIFICATE-----Generated at Sun May 5 08:39:13 2024 by rpki-client on console-fra.rpki-client.org