$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: 18Scm8zEfK6VtbaTDgmL9YgQXu0Bxu3TEAu0ASKk8GM= Subject key identifier: FD:C3:1B:26:8C:BF:EB:2E:69:7F:CF:14:58:35:2E:47:DB:3D:86:E5 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0662 Signing time: Mon 06 May 2024 23:38:44 +0000 Manifest this update: Mon 06 May 2024 23:38:44 +0000 Manifest next update: Mon 13 May 2024 23:38:44 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: 49eytvY/Z1n9QCoG0akLv5+MpQmVAk73zHmNKTyrPHk=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: //D9Kinvi7dBfUZ983cp95xtdpJtrzemhcHFvfNSaEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: May 6 23:38:44 2024 GMT Not After : May 13 23:38:44 2024 GMT Subject: CN=66396a04-5361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:cb:60:67:36:1b:a6:ef:d3:0f:6c:e7:bc: 33:88:28:a0:6b:a8:b9:d7:7a:8d:15:6d:f5:fa:c2: 2c:74:6d:0d:d1:b6:02:fb:cd:37:7e:d9:d2:ac:1f: 08:f2:dc:a8:6d:53:af:df:ce:ad:0a:8e:b0:46:db: 6e:1c:0f:82:14:a1:74:ea:d5:59:7a:61:a6:a0:f1: 77:08:d8:cf:02:23:d4:fd:3a:bc:ef:73:32:67:02: 46:88:a0:4f:3f:b4:65:a2:72:f6:dd:37:d7:79:93: e6:02:c7:42:06:83:87:f3:a2:2f:70:bc:4f:07:6e: 81:a7:a7:e1:2e:bb:65:2e:6f:6c:92:55:db:48:98: 1b:34:9c:d8:3d:00:8e:17:a8:85:e7:e5:c5:42:9f: df:34:fc:46:04:88:bb:3c:8c:92:f8:cb:e2:cc:40: 21:76:03:ab:a2:75:72:bb:a1:85:19:43:e8:a3:5a: 96:41:44:0c:aa:4b:72:44:76:44:6f:6d:1d:66:38: ea:3a:7a:b7:ef:35:dc:83:a3:49:9b:45:aa:85:2e: 80:29:eb:dc:99:19:ee:77:c1:ae:7e:9c:7d:53:00: aa:a9:6d:aa:b9:ef:7b:83:68:38:a7:73:b9:a8:0f: f2:67:bc:31:3e:4d:ac:fe:6a:fa:2a:33:b5:a0:d0: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C3:1B:26:8C:BF:EB:2E:69:7F:CF:14:58:35:2E:47:DB:3D:86:E5 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:78:2b:f2:2e:17:23:bb:b8:db:fd:ee:16:0d:3b:d6:20: 02:ec:c4:6a:27:69:ca:35:de:be:d2:08:a7:b7:91:1c:3a:05: 86:b5:9d:be:8d:52:12:e3:52:74:bb:4b:ce:e2:95:1e:b4:17: e3:81:9c:81:1c:06:19:cb:bc:80:4e:ae:cd:81:58:94:aa:ef: ed:aa:32:0f:d4:64:4e:b3:70:4e:d5:f0:dd:47:a9:dc:e7:6a: 5d:24:44:b3:fa:24:c3:a2:95:53:6e:01:5c:50:90:dd:66:01: 71:ec:94:9d:7d:75:72:aa:76:c6:d4:4b:c0:26:44:fc:ba:de: a0:8e:06:38:72:64:38:5a:5f:a4:ef:02:54:2d:21:21:93:73: 63:a1:58:28:17:16:53:45:90:19:98:ed:11:8c:bb:26:3a:65: 58:66:98:03:34:98:3e:37:57:7c:5a:26:1b:09:09:0d:16:82: 34:32:df:39:db:12:3f:f4:1d:4a:47:ac:75:61:e1:3e:3b:96: c0:af:91:d7:0a:9a:67:89:c7:2c:cc:1b:12:ce:eb:e9:88:55: c3:60:2b:7b:b2:93:31:25:2f:7e:e6:ea:d0:73:cc:60:b3:7a: 8d:6e:5f:62:06:1e:6f:32:45:53:80:55:71:a5:3e:cb:b4:72: d8:fd:5a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjQwNTA2MjMzODQ0WhcNMjQwNTEzMjMzODQ0WjAYMRYwFAYD VQQDEw02NjM5NmEwNC01MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtazLYGc2G6bv0w9s57wziCiga6i513qNFW31+sIsdG0N0bYC+803ftnSrB8I 8tyobVOv386tCo6wRttuHA+CFKF06tVZemGmoPF3CNjPAiPU/Tq873MyZwJGiKBP P7RlonL23TfXeZPmAsdCBoOH86IvcLxPB26Bp6fhLrtlLm9sklXbSJgbNJzYPQCO F6iF5+XFQp/fNPxGBIi7PIyS+MvizEAhdgOronVyu6GFGUPoo1qWQUQMqktyRHZE b20dZjjqOnq37zXcg6NJm0WqhS6AKevcmRnud8Gufpx9UwCqqW2que97g2g4p3O5 qA/yZ7wxPk2s/mr6KjO1oNDTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3DGyaM v+suaX/PFFg1LkfbPYblMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1IXgr8i4XI7u42/3uFg071iAC7MRqJ2nKNd6+0gint5EcOgWGtZ2+ jVIS41J0u0vO4pUetBfjgZyBHAYZy7yATq7NgViUqu/tqjIP1GROs3BO1fDdR6nc 52pdJESz+iTDopVTbgFcUJDdZgFx7JSdfXVyqnbG1EvAJkT8ut6gjgY4cmQ4Wl+k 7wJULSEhk3NjoVgoFxZTRZAZmO0RjLsmOmVYZpgDNJg+N1d8WiYbCQkNFoI0Mt85 2xI/9B1KR6x1YeE+O5bAr5HXCppniccszBsSzuvpiFXDYCt7spMxJS9+5urQc8xg s3qNbl9iBh5vMkVTgFVxpT7LtHLY/Vo+ -----END CERTIFICATE-----Generated at Tue May 7 00:53:25 2024 by rpki-client on console-ams.rpki-client.org