$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: vbMfYpn9UeSc5+BFuADxq71p15BBMtEaVeooYqNu7rY= Subject key identifier: E8:10:A6:60:E6:26:CA:B9:6B:F3:8D:91:24:40:AC:07:B8:BF:61:27 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 03D7 Signing time: Sat 01 Jun 2024 03:24:16 +0000 Manifest this update: Sat 01 Jun 2024 03:24:15 +0000 Manifest next update: Sat 08 Jun 2024 03:24:15 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: xLmXxexygnHt4L66Ezmmt3FNQ6U6d9468/XiQNdjyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Jun 1 03:24:15 2024 GMT Not After : Jun 8 03:24:15 2024 GMT Subject: CN=665a9460-28d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:2e:5b:8a:15:32:e1:95:c7:1a:f6:5b:e3: 3f:2b:2b:8e:99:a2:c3:80:f6:70:e6:ea:3b:6c:99: e6:12:01:4c:02:84:25:5e:47:c4:4a:e6:00:e1:67: 8a:a2:d0:97:0f:9f:da:ed:fa:73:da:5b:6d:b7:4f: 2b:d0:a9:a9:6b:cb:61:62:df:48:4f:db:8d:eb:3f: 90:b2:a3:dd:3e:e3:9b:29:65:a6:ff:4b:93:14:f5: d1:6a:df:28:45:5d:56:a2:f4:44:c6:02:75:3a:24: 4a:64:a3:17:71:62:c6:0e:4e:68:f8:e1:96:2a:ec: e1:12:b6:16:66:04:48:93:8b:9d:e2:37:41:8c:1f: 3c:9a:63:7d:c7:7d:77:27:cb:e2:0d:32:1b:80:dc: 82:1e:ef:1f:8a:db:05:8e:37:9b:40:9d:35:64:28: 0f:d6:27:83:73:9e:66:ac:ce:9f:0c:02:fc:f4:97: ef:0a:4d:a1:c5:24:9c:7a:05:f9:15:04:bf:e6:7f: 24:6f:d8:02:da:2a:1c:67:01:4c:48:31:3b:99:66: e3:46:bc:2a:f6:27:15:01:e8:3e:78:01:a8:d8:7f: 07:77:c4:27:ca:46:c8:c2:10:af:7f:8a:53:3e:b1: fd:c1:af:16:13:e5:c2:ce:f5:7d:80:65:2b:80:ca: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:10:A6:60:E6:26:CA:B9:6B:F3:8D:91:24:40:AC:07:B8:BF:61:27 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0d:21:b6:96:bd:3b:77:b6:0c:3e:82:75:24:ee:8c:a3:ce: e0:18:1b:ec:2f:57:05:e5:30:be:9a:9b:39:78:a8:13:5c:8b: 25:53:19:52:8b:d6:c3:32:87:4c:70:14:a1:7f:d3:fd:08:25: 6b:91:7d:e9:b6:dd:15:f6:8d:06:6a:2f:bf:49:f9:31:05:cf: cb:25:d2:fe:0d:63:31:8f:b8:85:4f:7c:cc:f3:d9:be:82:b8: 05:53:04:ac:28:82:f6:23:61:4e:61:b8:6d:92:bb:8b:be:29: f9:04:5e:c9:9c:71:be:97:80:5e:dc:ff:67:57:9f:dc:08:e4: 82:ff:92:52:d7:08:22:43:89:6d:95:df:02:0c:0f:95:be:81: 2b:38:24:9d:f4:2a:02:6d:7f:d3:df:cb:d3:bd:39:b1:1d:a2: f2:b4:e9:03:d7:2a:ec:be:57:3c:41:00:61:c6:c6:dc:ee:b9: 15:15:5d:26:da:d7:da:b4:97:f0:ce:54:e3:5f:50:5c:51:87: 7e:9d:bc:94:33:78:68:e3:57:02:be:40:58:da:0b:8f:76:bf: 07:59:89:59:ae:bf:98:d6:9c:9f:b1:53:0e:57:d2:da:34:8f: 11:20:7f:a0:91:86:5b:74:37:42:8e:f1:e9:32:f3:53:09:6a: 4c:e3:61:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjQwNjAxMDMyNDE1WhcNMjQwNjA4MDMyNDE1WjAYMRYwFAYD VQQDEw02NjVhOTQ2MC0yOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wUuW4oVMuGVxxr2W+M/KyuOmaLDgPZw5uo7bJnmEgFMAoQlXkfESuYA4WeK otCXD5/a7fpz2lttt08r0Kmpa8thYt9IT9uN6z+QsqPdPuObKWWm/0uTFPXRat8o RV1WovRExgJ1OiRKZKMXcWLGDk5o+OGWKuzhErYWZgRIk4ud4jdBjB88mmN9x313 J8viDTIbgNyCHu8fitsFjjebQJ01ZCgP1ieDc55mrM6fDAL89JfvCk2hxSScegX5 FQS/5n8kb9gC2iocZwFMSDE7mWbjRrwq9icVAeg+eAGo2H8Hd8QnykbIwhCvf4pT PrH9wa8WE+XCzvV9gGUrgMptnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgQpmDm Jsq5a/ONkSRArAe4v2EnMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDSG2lr07d7YMPoJ1JO6Mo87gGBvsL1cF5TC+mps5eKgTXIslUxlS i9bDModMcBShf9P9CCVrkX3ptt0V9o0Gai+/SfkxBc/LJdL+DWMxj7iFT3zM89m+ grgFUwSsKIL2I2FOYbhtkruLvin5BF7JnHG+l4Be3P9nV5/cCOSC/5JS1wgiQ4lt ld8CDA+VvoErOCSd9CoCbX/T38vTvTmxHaLytOkD1yrsvlc8QQBhxsbc7rkVFV0m 2tfatJfwzlTjX1BcUYd+nbyUM3ho41cCvkBY2guPdr8HWYlZrr+Y1pyfsVMOV9La NI8RIH+gkYZbdDdCjvHpMvNTCWpM42GU -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:08 2024 by rpki-client on console-fra.rpki-client.org