$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: ywwoSIk8TasQP6dKIyV4+k6o+xSIxe3x0GjNCxqHlGM= Subject key identifier: F9:8E:C9:BE:7E:AA:32:3D:68:01:EC:D2:08:D8:95:A1:7B:03:E5:C5 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 0732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 0726 Signing time: Sat 04 May 2024 22:42:10 +0000 Manifest this update: Sat 04 May 2024 22:42:10 +0000 Manifest next update: Sat 11 May 2024 22:42:10 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: ThzobT1LV0bQQeRAfe/V+FC/3mPEaK06MFOUrQcjLvE=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: Luw/We75eG/rirHUsOqrwHt6bzrOeuG6Cw782K1mlaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: May 4 22:42:10 2024 GMT Not After : May 11 22:42:10 2024 GMT Subject: CN=6636b9c2-e6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ed:da:fb:b1:a0:90:75:5d:e8:ca:41:09:21: 95:7a:15:17:8f:e9:20:86:5a:2e:fd:c3:cc:53:2b: a9:97:04:e5:94:a8:2b:98:64:50:4c:3e:26:c2:f4: ac:d1:8c:7e:86:f7:75:11:a9:2d:06:d6:1e:15:55: 78:93:4e:d4:2d:ba:f2:5a:d5:80:46:4d:65:80:81: 87:d4:c8:67:82:01:ae:6d:ef:fa:34:de:66:49:80: e5:2b:e3:92:89:f1:50:ad:f9:61:03:e0:f1:d7:4d: 92:29:c9:79:1c:22:19:ed:ed:c7:da:7c:37:3b:bf: 1d:de:91:9d:f8:9a:28:17:56:30:c2:c0:be:73:a5: d4:e6:f6:98:93:2b:f8:19:85:7a:a0:31:3b:22:40: 15:0b:b2:8c:62:bd:28:a3:47:85:21:b1:64:1f:bd: e9:7b:47:01:6a:c1:86:69:a6:b8:3e:32:80:64:49: 62:58:db:a0:ea:fb:80:14:02:4a:c9:8e:e1:1a:fd: 16:a4:17:c1:aa:48:33:50:2f:2b:b2:77:6d:ec:91: 0f:ce:7b:94:bd:c0:8e:66:65:b6:75:37:41:92:3c: c0:2b:87:67:1d:ce:09:df:a1:bb:99:83:a0:a1:07: ae:6a:71:b0:5f:8d:20:68:41:1e:71:03:4f:8c:7e: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8E:C9:BE:7E:AA:32:3D:68:01:EC:D2:08:D8:95:A1:7B:03:E5:C5 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0f:1c:46:1a:76:f3:c0:03:c0:e0:6e:ae:97:9b:0c:67:c9: d8:37:c2:d9:83:83:10:ae:1b:a8:2f:70:3b:79:c9:ba:3a:5c: a1:65:59:9f:f6:7a:ec:b0:ed:9f:b7:97:94:55:57:19:21:ab: f1:de:7d:f0:fb:28:ef:80:fa:54:b0:2f:63:d8:5f:12:0e:92: ef:8b:70:cc:02:94:3e:de:97:33:cd:83:32:72:5b:07:b3:23: 3b:10:89:44:38:0e:49:bf:7f:64:46:f5:2e:ac:7c:14:a4:31: ea:e1:df:32:19:49:e4:97:8b:0c:4a:08:a9:9c:f6:5f:5a:18: bd:5f:6b:c3:d7:6c:6d:d5:d1:72:c0:0b:e8:19:1f:7b:42:9a: 04:46:dd:ce:15:de:ba:51:c4:18:3f:fa:0c:f7:b4:02:6b:aa: 22:3c:61:39:fb:c9:0a:af:ba:51:31:9e:ae:a4:dd:bf:35:2f: 16:65:07:da:50:e7:97:c0:31:fe:df:8e:63:4e:28:fa:e6:39: bc:01:55:e8:df:17:e8:0d:1c:ce:3b:de:c2:e0:6a:bf:d7:28: 53:3c:7f:fb:ca:a5:c1:f0:e3:2c:a5:40:97:56:1f:8a:d3:f5: 8b:ad:90:4b:e7:d1:8c:6c:f0:05:ac:bb:66:7a:37:de:cf:b3: 0a:77:1b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjQwNTA0MjI0MjEwWhcNMjQwNTExMjI0MjEwWjAYMRYwFAYD VQQDEw02NjM2YjljMi1lNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6O3a+7GgkHVd6MpBCSGVehUXj+kghlou/cPMUyuplwTllKgrmGRQTD4mwvSs 0Yx+hvd1EaktBtYeFVV4k07ULbryWtWARk1lgIGH1MhnggGube/6NN5mSYDlK+OS ifFQrflhA+Dx102SKcl5HCIZ7e3H2nw3O78d3pGd+JooF1YwwsC+c6XU5vaYkyv4 GYV6oDE7IkAVC7KMYr0oo0eFIbFkH73pe0cBasGGaaa4PjKAZEliWNug6vuAFAJK yY7hGv0WpBfBqkgzUC8rsndt7JEPznuUvcCOZmW2dTdBkjzAK4dnHc4J36G7mYOg oQeuanGwX40gaEEecQNPjH58awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmOyb5+ qjI9aAHs0gjYlaF7A+XFMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWDxxGGnbzwAPA4G6ul5sMZ8nYN8LZg4MQrhuoL3A7ecm6OlyhZVmf 9nrssO2ft5eUVVcZIavx3n3w+yjvgPpUsC9j2F8SDpLvi3DMApQ+3pczzYMyclsH syM7EIlEOA5Jv39kRvUurHwUpDHq4d8yGUnkl4sMSgipnPZfWhi9X2vD12xt1dFy wAvoGR97QpoERt3OFd66UcQYP/oM97QCa6oiPGE5+8kKr7pRMZ6upN2/NS8WZQfa UOeXwDH+345jTij65jm8AVXo3xfoDRzOO97C4Gq/1yhTPH/7yqXB8OMspUCXVh+K 0/WLrZBL59GMbPAFrLtmejfez7MKdxuq -----END CERTIFICATE-----Generated at Sun May 5 00:14:47 2024 by rpki-client on console-ams.rpki-client.org