$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: hnSt0s9TZtQns990fSw45ejPwxh5UScrxD0avcZ384Q= Subject key identifier: A3:5F:3F:BE:DA:AB:B9:A8:28:2D:FD:E0:BF:AD:3D:AD:7C:D7:38:83 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 08B1 Signing time: Thu 02 May 2024 21:37:39 +0000 Manifest this update: Thu 02 May 2024 21:37:39 +0000 Manifest next update: Thu 09 May 2024 21:37:39 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: U/N1YUnYeWbTEFYFXaIIART5oe4volZl/G7P+ipiBac=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ktdvmQq3O7BY6N2LknvoDnkjfa5kYL37ZMNO2GZxjaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: May 2 21:37:39 2024 GMT Not After : May 9 21:37:39 2024 GMT Subject: CN=663407a3-2b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:77:ac:d9:95:94:56:f6:1f:99:aa:0f:fe: d8:ff:ee:0b:51:ee:09:d6:84:8d:13:88:7c:56:3f: 42:a8:9d:e4:e1:9e:fa:cd:67:5e:3f:e3:36:92:ae: 2b:12:e6:8b:26:6d:69:74:6d:e6:96:6e:19:03:fa: 16:b3:e3:61:37:91:b9:ac:4f:81:38:7a:2c:ce:bb: 63:1b:54:b6:23:2b:d2:e6:49:a0:8b:15:fa:66:43: 4c:0c:20:74:fb:4b:86:69:8f:5b:21:91:6b:82:43: 19:b7:10:35:ca:be:b3:c5:3a:d0:38:6c:ef:06:9b: bb:38:fd:90:19:61:61:53:37:f2:ee:ee:8c:8e:30: b3:ff:c3:46:c9:2d:55:bd:09:14:2a:00:2d:84:09: 9f:a0:6a:bc:d5:e6:b0:54:0e:63:18:cb:17:ce:cf: 61:86:2b:c3:10:bf:63:d9:43:3d:78:d3:58:92:cb: 37:1c:ea:9f:de:d9:a7:a6:df:f9:5a:95:44:09:81: 55:8b:ee:f4:ea:02:f3:26:31:06:aa:bf:1d:b8:66: 98:c1:f1:25:b5:41:3f:f7:cc:6b:ae:81:61:0d:0d: 51:5a:a2:dd:28:ae:d2:c4:33:6e:b0:dd:b8:3d:71: 5e:8a:0f:11:73:6c:fa:e8:92:f4:08:4c:b3:57:49: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:3F:BE:DA:AB:B9:A8:28:2D:FD:E0:BF:AD:3D:AD:7C:D7:38:83 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ce:46:4b:5a:1c:7a:1a:ec:9a:b1:d4:1f:78:60:15:8a:e9: c4:2f:6d:05:12:aa:a1:cb:c1:89:52:be:81:b7:39:47:27:99: d5:1c:07:7a:11:76:b0:ed:96:7b:b3:2e:49:c2:ea:1c:6d:ca: a8:15:2c:5b:de:23:a4:bd:d3:f2:6b:7f:e2:80:a5:58:cf:3e: 94:6b:1f:9c:02:47:d4:7f:bf:dd:71:9b:4a:99:d6:5d:32:26: cb:93:f5:f4:16:f4:38:88:af:7e:f4:cf:fc:01:f6:7a:7d:dd: eb:34:07:2f:c4:9f:60:6d:9f:b1:55:84:bc:00:b5:0a:f8:17: 13:a2:17:cd:c6:a8:82:76:de:31:a5:09:f7:3f:89:67:d6:63: b0:5f:eb:59:8b:22:1f:43:5e:00:ad:75:85:99:b5:08:16:95: 64:34:f2:6b:a3:74:de:9f:e7:bd:33:cd:02:5d:d0:53:65:db: cd:c4:4b:0b:66:df:47:ee:f9:3e:94:34:16:e5:e8:b3:cc:bd: 09:fa:81:77:b0:89:a7:d4:90:fb:81:6c:1e:28:60:55:fa:2a: 02:5f:7e:d8:cd:24:59:80:5c:0c:0a:06:83:00:86:53:e4:08: d7:94:b6:a5:b2:05:ba:1e:36:d6:0d:a9:49:5c:9b:75:90:9e: 00:6f:76:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjQwNTAyMjEzNzM5WhcNMjQwNTA5MjEzNzM5WjAYMRYwFAYD VQQDEw02NjM0MDdhMy0yYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjl3rNmVlFb2H5mqD/7Y/+4LUe4J1oSNE4h8Vj9CqJ3k4Z76zWdeP+M2kq4r EuaLJm1pdG3mlm4ZA/oWs+NhN5G5rE+BOHoszrtjG1S2IyvS5kmgixX6ZkNMDCB0 +0uGaY9bIZFrgkMZtxA1yr6zxTrQOGzvBpu7OP2QGWFhUzfy7u6MjjCz/8NGyS1V vQkUKgAthAmfoGq81eawVA5jGMsXzs9hhivDEL9j2UM9eNNYkss3HOqf3tmnpt/5 WpVECYFVi+706gLzJjEGqr8duGaYwfEltUE/98xrroFhDQ1RWqLdKK7SxDNusN24 PXFeig8Rc2z66JL0CEyzV0lfOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNfP77a q7moKC394L+tPa181ziDMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRzkZLWhx6GuyasdQfeGAViunEL20FEqqhy8GJUr6BtzlHJ5nVHAd6 EXaw7ZZ7sy5JwuocbcqoFSxb3iOkvdPya3/igKVYzz6Uax+cAkfUf7/dcZtKmdZd MibLk/X0FvQ4iK9+9M/8AfZ6fd3rNAcvxJ9gbZ+xVYS8ALUK+BcTohfNxqiCdt4x pQn3P4ln1mOwX+tZiyIfQ14ArXWFmbUIFpVkNPJro3Ten+e9M80CXdBTZdvNxEsL Zt9H7vk+lDQW5eizzL0J+oF3sImn1JD7gWweKGBV+ioCX37YzSRZgFwMCgaDAIZT 5AjXlLalsgW6HjbWDalJXJt1kJ4Ab3ba -----END CERTIFICATE-----Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org