$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft File: 8hTt1--NAG-Coif85lvF8-ZIo_o.mft (raw, json) Hash identifier: 4lCGr5ywCzW+ZlD1mhKZBnP0/kgV6m5sNcDsWZWMWJk= Subject key identifier: 57:12:B7:FE:94:E4:C1:9C:95:AD:1E:FA:40:4B:87:24:30:41:9D:26 Authority key identifier: F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA Certificate issuer: /CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft Manifest number: 032E Signing time: Sat 01 Jun 2024 04:07:26 +0000 Manifest this update: Sat 01 Jun 2024 04:07:25 +0000 Manifest next update: Sat 08 Jun 2024 04:07:25 +0000 Files and hashes: 1: 8hTt1--NAG-Coif85lvF8-ZIo_o.crl (hash: vjGJTlN7Dhk9qLHoF79wN8Q/6OBgbh/wbZiL2jda7Bo=) 2: 1A15CABE7DD111ECBB4A7D84C4F9AE02.roa (hash: zz2Bw66bfqL3b1K/2KDRvrvXLAcxtClotk8fBB8gWgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA Validity Not Before: Jun 1 04:07:25 2024 GMT Not After : Jun 8 04:07:25 2024 GMT Subject: CN=665a9e7e-8a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:c5:83:36:6b:93:f4:49:b5:aa:90:f9:96: 6f:aa:cc:15:ba:68:88:d2:30:f3:7f:c5:35:d5:fa: d4:9f:1b:ea:9f:33:b5:ee:35:d8:5a:25:94:c3:24: 4d:c1:fb:87:96:25:08:3f:bd:96:46:f9:45:2b:f6: 4f:16:f6:58:19:11:46:bb:68:59:9e:c9:8a:92:14: f4:4e:8c:5c:ad:6b:6f:78:23:0c:26:71:9d:38:5f: 2d:e0:0f:13:19:32:5b:f6:9f:a7:77:91:fa:84:29: d6:a8:93:c3:39:d8:75:91:8c:4c:a3:c4:a5:59:b7: ff:16:81:2c:c0:8e:4e:55:f9:0d:33:1f:e1:df:ec: de:16:e0:40:47:3e:77:26:d4:10:a3:77:6e:df:92: b8:2c:a4:10:7c:3c:c0:9b:8f:11:34:44:8f:d6:11: 98:95:72:e4:61:d3:ae:4a:87:c7:a7:ba:2e:74:0d: bc:00:6a:10:42:75:fc:96:54:43:7f:b3:2a:eb:69: 84:f8:ac:eb:1e:7e:9b:bb:f4:02:e3:6b:30:78:80: 51:55:34:8a:36:5e:89:75:8d:d9:64:79:a0:82:6b: d2:36:46:24:58:ce:c3:90:ac:25:22:4d:bd:28:11: dd:a1:31:51:07:6f:ac:46:1b:68:e4:3e:c9:ab:a6: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:12:B7:FE:94:E4:C1:9C:95:AD:1E:FA:40:4B:87:24:30:41:9D:26 X509v3 Authority Key Identifier: keyid:F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:59:ed:f3:09:8b:b0:57:64:64:e3:9a:c1:a3:0c:5a:32:6a: a3:05:f7:1c:a2:0b:2a:74:14:bb:db:5a:1c:e3:d3:8b:ea:50: d6:e9:a3:31:f1:31:cf:3f:c5:ac:0f:a5:5f:44:e0:3c:c8:1b: c7:ec:a2:bf:46:d5:a5:5b:b6:b8:de:0c:19:c4:9f:ab:be:98: 14:14:65:e6:6a:6d:8b:cf:66:c0:06:26:f4:18:50:35:e4:bd: 13:78:cd:f7:ac:f5:67:01:89:c1:c1:75:a2:a5:a0:9a:92:8a: b0:78:fa:78:40:68:45:08:55:bb:95:58:d9:86:23:7f:b6:9f: f0:cf:61:15:9f:d4:95:31:86:ef:05:0f:22:2c:f3:7c:15:e4: 37:2b:3f:f4:18:f1:1e:14:65:11:1b:ce:20:97:42:82:ea:f8: f3:45:cd:03:19:da:e6:aa:53:0e:b7:7a:22:ae:b4:b3:a7:da: 01:f9:c9:36:89:f5:10:6d:5b:1f:a1:ce:c0:36:08:f8:22:03: 11:90:a1:08:aa:96:4f:d0:48:76:13:f4:8b:01:2f:d3:03:13: 35:46:bb:de:77:32:4a:a7:80:15:99:fc:02:74:da:f1:d4:bd: 31:6d:8c:6e:8b:66:f0:63:86:c6:47:3b:46:79:19:f0:30:6e: 58:9f:73:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJEMjcxMTAvBgNVBAUTKEYyMTRFREQ3RUY4RDAwNkY4MkEyMjdGQ0U2NUJDNUYz RTY0OEEzRkEwHhcNMjQwNjAxMDQwNzI1WhcNMjQwNjA4MDQwNzI1WjAYMRYwFAYD VQQDEw02NjVhOWU3ZS04YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHvFgzZrk/RJtaqQ+ZZvqswVumiI0jDzf8U11frUnxvqnzO17jXYWiWUwyRN wfuHliUIP72WRvlFK/ZPFvZYGRFGu2hZnsmKkhT0ToxcrWtveCMMJnGdOF8t4A8T GTJb9p+nd5H6hCnWqJPDOdh1kYxMo8SlWbf/FoEswI5OVfkNMx/h3+zeFuBARz53 JtQQo3du35K4LKQQfDzAm48RNESP1hGYlXLkYdOuSofHp7oudA28AGoQQnX8llRD f7Mq62mE+KzrHn6bu/QC42sweIBRVTSKNl6JdY3ZZHmggmvSNkYkWM7DkKwlIk29 KBHdoTFRB2+sRhto5D7Jq6Z+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcSt/6U 5MGcla0e+kBLhyQwQZ0mMB8GA1UdIwQYMBaAFPIU7dfvjQBvgqIn/OZbxfPmSKP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkQyNy9ERTVFNzc0RTdE Q0QxMUVDQTZCRDlEMzJDNEY5QUUwMi84aFR0MS0tTkFHLUNvaWY4NWx2RjgtWklv X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhoVHQxLS1OQUctQ29pZjg1bHZGOC1aSW9fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkQyNy9ERTVFNzc0RTdEQ0QxMUVDQTZCRDlEMzJDNEY5QUUwMi84aFR0MS0tTkFH LUNvaWY4NWx2RjgtWklvX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAWe3zCYuwV2Rk45rBowxaMmqjBfccogsqdBS721oc49OL6lDW6aMx 8THPP8WsD6VfROA8yBvH7KK/RtWlW7a43gwZxJ+rvpgUFGXmam2Lz2bABib0GFA1 5L0TeM33rPVnAYnBwXWipaCakoqwePp4QGhFCFW7lVjZhiN/tp/wz2EVn9SVMYbv BQ8iLPN8FeQ3Kz/0GPEeFGURG84gl0KC6vjzRc0DGdrmqlMOt3oirrSzp9oB+ck2 ifUQbVsfoc7ANgj4IgMRkKEIqpZP0Eh2E/SLAS/TAxM1RrvedzJKp4AVmfwCdNrx 1L0xbYxui2bwY4bGRztGeRnwMG5Yn3Mu -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org