$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: yYyDPBYphIDbK9kBZLaTBB7iMzxda1YcH+WoxZSqIzQ= Subject key identifier: FF:17:87:54:D9:E6:AA:E4:25:1E:62:2A:F0:6C:CC:3E:4F:16:C5:FC Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 03C9 Signing time: Fri 03 May 2024 02:32:05 +0000 Manifest this update: Fri 03 May 2024 02:32:05 +0000 Manifest next update: Fri 10 May 2024 02:32:05 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: 7/cQHQMn0E5JpYKbwMXyONBTywxYuDjUIp2rmbJhTzo=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: gUcJ+EuUKcO6n4HGPcVCkmqC8bbqJK95obaagJ75oXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: May 3 02:32:05 2024 GMT Not After : May 10 02:32:05 2024 GMT Subject: CN=66344ca5-494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:9f:dc:b2:40:c3:9a:49:a9:65:b8:fa:76: fd:a1:09:8f:48:58:5e:71:a0:36:9d:90:eb:1c:2f: b8:66:e8:1f:91:31:3b:d8:98:0f:2f:0f:67:e0:76: da:30:ea:a2:ee:b3:bc:1e:f3:58:18:93:df:93:59: 95:fc:ad:52:e3:0f:d3:ef:15:56:6f:d5:1e:86:45: 83:8e:a5:b5:77:c0:fa:55:27:fa:3c:d5:94:8b:50: e8:7f:ef:ee:6e:17:3b:cc:ec:7f:65:1a:49:d5:f6: ed:89:5d:99:a3:18:1d:bb:6f:f4:ef:43:10:90:e2: 55:27:6b:a1:af:02:e6:1f:b1:42:bb:21:48:7f:8e: 65:cd:e6:78:e4:d6:0e:75:7f:91:af:a2:75:b5:a6: 0f:1c:a4:d9:3e:1b:ca:85:9b:a3:3f:93:fc:7f:02: 9b:96:75:57:50:e9:9f:ac:8c:9c:ee:d5:9f:f1:8a: 48:a3:15:a0:19:92:fc:7a:38:f9:c9:4b:39:6a:82: 98:3a:fc:d5:78:e0:b0:eb:58:6a:6e:7a:3e:1b:57: 51:c0:cf:2b:6a:80:78:96:54:ee:af:4f:c0:d0:10: 4d:20:19:06:7c:9c:41:60:28:a2:2b:25:72:18:3c: 0c:ea:d7:83:f7:cb:b5:81:26:a8:2a:71:37:90:30: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:87:54:D9:E6:AA:E4:25:1E:62:2A:F0:6C:CC:3E:4F:16:C5:FC X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:4a:2e:43:03:38:4f:40:db:68:54:d7:0c:2a:40:6c:18: 76:bb:28:d2:17:43:e3:4d:34:06:2c:69:26:0d:fc:a5:67:51: 3f:7f:d6:70:af:14:9d:e1:8d:fa:eb:55:fd:08:15:db:85:ea: dc:74:bb:c6:23:97:99:48:41:73:6a:94:5c:91:e3:65:b5:2a: d0:1b:df:c2:e6:8d:91:5d:0c:42:c5:c4:b0:3d:35:8d:bd:61: 97:9b:31:99:bb:ae:9b:05:3b:f4:55:16:06:9a:e8:ca:c7:e7: 58:44:84:d0:98:c6:16:7b:73:39:b8:3e:a2:dc:e5:de:38:59: 98:89:e0:09:8e:38:83:c0:09:d6:62:8e:60:0e:8a:94:eb:9c: 53:8b:a9:81:f1:19:06:ac:bf:5e:cc:6f:11:b5:f8:1d:2e:d9: ad:4c:0c:ec:11:f4:1b:d6:31:e8:19:aa:b0:23:50:89:35:c0: b2:81:dd:2a:c5:f9:b3:8f:86:37:0a:02:40:6d:8c:2d:51:4e: b2:91:a2:00:12:83:92:9a:0a:34:25:fa:16:e1:89:d8:bc:48: 1f:53:4c:ef:a2:ed:24:63:82:14:87:d3:ad:8e:0b:8a:c6:c1: f4:67:37:51:64:b9:e1:2c:85:26:56:b1:26:f2:ff:9d:41:10: 2a:f8:6e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjQwNTAzMDIzMjA1WhcNMjQwNTEwMDIzMjA1WjAYMRYwFAYD VQQDEw02NjM0NGNhNS00OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fOf3LJAw5pJqWW4+nb9oQmPSFhecaA2nZDrHC+4ZugfkTE72JgPLw9n4Hba MOqi7rO8HvNYGJPfk1mV/K1S4w/T7xVWb9UehkWDjqW1d8D6VSf6PNWUi1Dof+/u bhc7zOx/ZRpJ1fbtiV2Zoxgdu2/070MQkOJVJ2uhrwLmH7FCuyFIf45lzeZ45NYO dX+Rr6J1taYPHKTZPhvKhZujP5P8fwKblnVXUOmfrIyc7tWf8YpIoxWgGZL8ejj5 yUs5aoKYOvzVeOCw61hqbno+G1dRwM8raoB4llTur0/A0BBNIBkGfJxBYCiiKyVy GDwM6teD98u1gSaoKnE3kDDmgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8Xh1TZ 5qrkJR5iKvBszD5PFsX8MB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Z0ouQwM4T0DbaFTXDCpAbBh2uyjSF0PjTTQGLGkmDfylZ1E/f9Zw rxSd4Y3661X9CBXbhercdLvGI5eZSEFzapRckeNltSrQG9/C5o2RXQxCxcSwPTWN vWGXmzGZu66bBTv0VRYGmujKx+dYRITQmMYWe3M5uD6i3OXeOFmYieAJjjiDwAnW Yo5gDoqU65xTi6mB8RkGrL9ezG8RtfgdLtmtTAzsEfQb1jHoGaqwI1CJNcCygd0q xfmzj4Y3CgJAbYwtUU6ykaIAEoOSmgo0JfoW4YnYvEgfU0zvou0kY4IUh9OtjguK xsH0ZzdRZLnhLIUmVrEm8v+dQRAq+G4X -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org