$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: MSPQDxYmjbyriOuEa0zgECO/sECOi+m2wR9hoiIGUAk= Subject key identifier: AC:53:35:81:B1:57:81:44:32:37:37:06:12:28:15:43:1F:E5:E8:28 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 06DA Signing time: Thu 02 May 2024 23:00:56 +0000 Manifest this update: Thu 02 May 2024 23:00:55 +0000 Manifest next update: Thu 09 May 2024 23:00:55 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: BKOYKjN7f0jT+/32dsAjaeze+GNRk+76JWRX9HsDJ4I=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: pJuFSDZtmR/Yhspv4OgGPJMWNh9AJpRWrHpN93ZaDjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: May 2 23:00:55 2024 GMT Not After : May 9 23:00:55 2024 GMT Subject: CN=66341b27-f7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:8a:08:e8:05:c9:75:fc:85:1b:1c:3c:c0: 4f:1d:9c:38:58:67:c6:7f:dd:3f:68:5a:57:48:84: 6e:65:25:20:46:dd:88:17:75:06:a1:6b:06:4c:f3: 8b:b0:89:a8:b0:e4:ef:08:33:0a:a2:29:e3:85:a5: 4b:25:a4:b0:d9:cc:ba:19:e9:18:74:7f:c3:ba:59: c0:8e:d3:cf:34:f6:4c:c3:5a:cf:16:32:f9:a3:1a: cb:e9:f6:7f:c0:4d:17:c3:d9:20:9d:eb:b1:97:a8: 82:7d:cb:7f:fb:7a:ce:22:d7:26:0e:66:af:3c:5f: f5:4a:41:dc:b2:76:6e:a2:7d:01:77:bb:1a:d3:0a: fa:8e:34:57:f3:68:bb:09:52:72:f0:84:84:c9:90: e4:56:df:f7:ca:a8:49:14:39:a1:02:d2:0f:2e:ac: 51:fa:e3:d0:0d:02:f8:78:41:85:23:0d:98:d7:06: 88:b5:d6:47:df:11:47:c6:50:8e:62:9d:56:c4:6e: dd:1c:b1:20:65:8a:4b:0b:d9:7e:84:6f:c1:dd:19: 62:e8:a8:2d:72:1b:aa:e6:44:39:eb:50:06:7b:0d: 7d:fb:3d:33:5e:55:7b:21:19:b4:bd:eb:dc:8c:cc: 54:9b:7d:fc:80:2a:2d:5f:2d:7f:16:36:f5:57:82: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:35:81:B1:57:81:44:32:37:37:06:12:28:15:43:1F:E5:E8:28 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:d9:cd:5b:5f:7d:21:c3:2f:82:e9:18:b3:b1:4a:fa:17: 3a:00:4a:68:30:b6:94:fc:eb:c0:89:1f:d7:26:fe:05:3b:f0: a6:29:2e:ce:f2:6a:43:b0:59:0f:53:21:30:a5:aa:d6:de:85: 08:45:df:c4:51:59:e2:71:15:eb:e5:db:25:c2:b9:65:c9:f5: f2:38:a7:86:a3:d8:35:e4:bd:e9:93:c7:95:80:93:97:dd:57: 66:57:8d:1d:60:94:3c:2d:12:ba:a1:20:5c:12:75:8b:c6:42: 38:30:ee:55:e9:c9:a6:35:32:b8:f2:b1:d6:21:22:8d:08:fc: cc:d6:2f:21:46:87:c4:bc:66:a8:ca:d7:88:8d:98:f9:b8:75: 38:7a:8c:54:13:4f:3a:69:63:60:6d:3a:da:c1:cc:b6:62:58: 6c:34:f7:e9:ee:ca:bd:1b:90:d7:3c:d4:cc:5b:ff:33:ba:3a: d7:27:f3:96:d5:95:d1:be:18:49:b7:82:16:ac:f5:bc:40:df: e6:47:eb:81:85:a0:ac:2d:e0:a7:18:12:e5:08:dc:a6:4f:a2: 1e:b6:88:34:a4:9f:c9:8a:f4:38:5a:a2:90:97:1e:18:98:f1: bc:d6:d2:8e:5e:6b:8d:bb:2c:6b:0d:09:99:e7:f9:a0:7d:66: 39:8a:b1:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjQwNTAyMjMwMDU1WhcNMjQwNTA5MjMwMDU1WjAYMRYwFAYD VQQDEw02NjM0MWIyNy1mN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMyKCOgFyXX8hRscPMBPHZw4WGfGf90/aFpXSIRuZSUgRt2IF3UGoWsGTPOL sImosOTvCDMKoinjhaVLJaSw2cy6GekYdH/DulnAjtPPNPZMw1rPFjL5oxrL6fZ/ wE0Xw9kgneuxl6iCfct/+3rOItcmDmavPF/1SkHcsnZuon0Bd7sa0wr6jjRX82i7 CVJy8ISEyZDkVt/3yqhJFDmhAtIPLqxR+uPQDQL4eEGFIw2Y1waItdZH3xFHxlCO Yp1WxG7dHLEgZYpLC9l+hG/B3Rli6Kgtchuq5kQ561AGew19+z0zXlV7IRm0vevc jMxUm338gCotXy1/Fjb1V4KQpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxTNYGx V4FEMjc3BhIoFUMf5egoMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJgdnNW199IcMvgukYs7FK+hc6AEpoMLaU/OvAiR/XJv4FO/CmKS7O 8mpDsFkPUyEwparW3oUIRd/EUVnicRXr5dslwrllyfXyOKeGo9g15L3pk8eVgJOX 3VdmV40dYJQ8LRK6oSBcEnWLxkI4MO5V6cmmNTK48rHWISKNCPzM1i8hRofEvGao yteIjZj5uHU4eoxUE086aWNgbTrawcy2YlhsNPfp7sq9G5DXPNTMW/8zujrXJ/OW 1ZXRvhhJt4IWrPW8QN/mR+uBhaCsLeCnGBLlCNymT6Ietog0pJ/JivQ4WqKQlx4Y mPG81tKOXmuNuyxrDQmZ5/mgfWY5irGa -----END CERTIFICATE-----Generated at Fri May 3 00:07:14 2024 by rpki-client on console-ams.rpki-client.org