$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: lRFf3Rz1cbJSWOmxmoS5TWEfHAh55lEEgSymWlk2Mbk= Subject key identifier: BF:8F:FB:41:CD:18:A5:C4:B2:FB:AE:44:CC:86:36:9B:8D:CD:A5:EE Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0ABB Signing time: Fri 26 Apr 2024 23:14:47 +0000 Manifest this update: Fri 26 Apr 2024 23:14:46 +0000 Manifest next update: Fri 03 May 2024 23:14:46 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: g7KhOU3fRWzV55eR6ceyRTMPaVy+5Fb1pm60B+D12n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Apr 26 23:14:46 2024 GMT Not After : May 3 23:14:46 2024 GMT Subject: CN=662c3567-f400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:45:5c:4d:25:41:74:3a:51:b2:89:46:7b: 1b:e4:5f:09:04:ae:d4:75:bb:84:41:70:7a:88:e9: 43:f8:bf:79:0f:b8:c8:23:55:6e:83:05:8e:46:18: 0d:4a:18:37:2b:0a:4d:e3:e2:11:54:6f:c0:c0:95: 38:37:1d:cc:91:eb:4a:76:11:2f:cc:16:d2:0d:93: bb:79:e0:6e:d3:47:a5:a7:2c:8d:1c:f6:c6:2f:4f: 8a:ec:4f:c5:43:be:cd:f1:c1:57:22:84:da:92:a7: a6:43:89:7e:d0:76:83:f9:c1:fa:57:1f:49:4a:bd: fa:74:a3:48:50:f7:9a:8f:9f:1b:51:65:f2:52:15: d0:0d:84:eb:05:b9:18:ea:7f:df:8f:da:f8:61:06: 13:b5:c3:31:a1:46:d3:70:b2:5a:5d:04:68:a8:f5: 00:47:62:ad:a8:0a:7f:e1:f8:7d:28:4c:2c:98:77: 80:89:34:ee:f5:c7:4e:77:1c:2d:db:9c:0a:47:49: 7f:17:af:80:d3:f7:8d:e4:ec:1f:34:86:56:9e:c5: c5:5b:0d:a7:80:cf:5f:c8:6c:aa:71:4e:f4:7b:d7: 13:6c:8b:50:7f:d8:75:b9:a7:84:a4:9a:ff:89:9e: 19:70:b1:f8:4d:81:9c:b1:e5:20:31:3f:44:b5:37: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:FB:41:CD:18:A5:C4:B2:FB:AE:44:CC:86:36:9B:8D:CD:A5:EE X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:de:28:71:50:8a:a8:74:c9:94:7c:5f:c3:3e:ad:09:c8: d4:3e:3f:81:a2:9a:26:48:54:1c:5a:a5:da:96:96:a5:5f:8d: ed:f6:59:d1:a7:d2:22:a4:2c:34:16:2c:77:da:a7:a3:7c:9d: ec:25:3a:86:4e:73:6b:3a:fc:a3:0d:52:7e:e9:d8:de:25:f6: 16:7f:93:61:ad:88:bb:f4:df:4e:f1:0c:5b:98:1c:b3:d4:7d: f0:9e:ca:2c:51:3a:72:79:19:31:2f:20:6d:7d:86:af:21:8b: 4c:77:09:6c:40:e0:52:b6:35:13:bc:66:56:bc:ab:2d:bf:7e: b7:3f:73:96:7c:60:bd:8d:66:9b:5a:b8:a8:90:83:b8:db:ba: 70:e7:9a:bb:61:94:19:8e:c7:bc:03:ef:e6:53:3b:02:eb:f5: d6:1f:9a:4f:6c:d9:f1:bd:89:d5:43:c7:f2:b3:c7:0f:2f:98: 0e:65:5c:16:eb:f9:3b:ac:21:7c:e1:c9:64:79:c0:71:a8:69: 19:39:25:f1:a8:8d:b7:29:d3:3d:af:50:f2:73:ea:a5:05:91: 58:cf:de:48:f2:55:cd:97:4e:fd:f5:26:11:37:1c:04:5d:fc: fe:3c:0b:56:21:2a:e0:fe:ff:17:6d:f4:02:17:24:9a:8f:0a: c0:59:11:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjQwNDI2MjMxNDQ2WhcNMjQwNTAzMjMxNDQ2WjAYMRYwFAYD VQQDEw02NjJjMzU2Ny1mNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7JFXE0lQXQ6UbKJRnsb5F8JBK7UdbuEQXB6iOlD+L95D7jII1VugwWORhgN Shg3KwpN4+IRVG/AwJU4Nx3MketKdhEvzBbSDZO7eeBu00elpyyNHPbGL0+K7E/F Q77N8cFXIoTakqemQ4l+0HaD+cH6Vx9JSr36dKNIUPeaj58bUWXyUhXQDYTrBbkY 6n/fj9r4YQYTtcMxoUbTcLJaXQRoqPUAR2KtqAp/4fh9KEwsmHeAiTTu9cdOdxwt 25wKR0l/F6+A0/eN5OwfNIZWnsXFWw2ngM9fyGyqcU70e9cTbItQf9h1uaeEpJr/ iZ4ZcLH4TYGcseUgMT9EtTeibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+P+0HN GKXEsvuuRMyGNpuNzaXuMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWf94ocVCKqHTJlHxfwz6tCcjUPj+BopomSFQcWqXalpalX43t9lnR p9IipCw0Fix32qejfJ3sJTqGTnNrOvyjDVJ+6djeJfYWf5NhrYi79N9O8QxbmByz 1H3wnsosUTpyeRkxLyBtfYavIYtMdwlsQOBStjUTvGZWvKstv363P3OWfGC9jWab WriokIO427pw55q7YZQZjse8A+/mUzsC6/XWH5pPbNnxvYnVQ8fys8cPL5gOZVwW 6/k7rCF84clkecBxqGkZOSXxqI23KdM9r1Dyc+qlBZFYz95I8lXNl0799SYRNxwE Xfz+PAtWISrg/v8XbfQCFySajwrAWRHt -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:35 2024 by rpki-client on console-ams.rpki-client.org