$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: k6QcWrtBd7oBEcu5nGgc3so5Vis8hytzKCl4Fyas3cY= Subject key identifier: D5:43:84:AE:84:C5:A8:40:36:98:E2:F1:FB:E6:EB:45:59:F6:70:11 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 9C Signing time: Fri 17 May 2024 06:54:09 +0000 Manifest this update: Fri 17 May 2024 06:54:09 +0000 Manifest next update: Fri 24 May 2024 06:54:09 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: pD/Af/GPC/CxYZiF9dopX9HZwGULAznJLsx4xlgRNFA=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 42NnMWm7siDIRS+mqgDb9RRYm3WoKva1ydScizcV8Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: May 17 06:54:09 2024 GMT Not After : May 24 06:54:09 2024 GMT Subject: CN=6646ff11-7a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:e9:e8:94:12:2e:8a:79:c9:95:a0:db:54: 2a:c0:28:44:72:0b:67:bc:3b:fe:3d:f4:2b:b0:3a: 7d:91:3c:c2:86:a7:40:bd:e1:70:71:bb:11:2b:c7: 34:5c:72:87:6a:75:d3:50:7b:b2:77:32:3e:3e:e8: a6:a8:d0:34:96:ff:68:95:64:31:41:88:b7:83:ca: e5:75:47:ab:55:99:3d:eb:f2:ac:75:c6:68:da:25: 75:d7:09:84:89:c1:c4:03:eb:5a:22:84:83:40:b3: 7d:dd:86:d7:a8:77:f8:98:c4:b5:d5:e6:96:f8:fb: 42:9a:6b:f1:8a:f7:5a:db:f1:7d:45:d4:21:d7:a5: 52:c6:8c:61:d9:5a:76:ab:13:96:a0:57:31:af:f6: 0c:a4:26:61:2e:e3:79:82:b3:83:df:9d:4e:df:6d: 17:88:49:a3:92:4d:51:e7:d6:b8:91:ba:e2:91:76: d4:8a:a5:a9:df:24:09:b7:35:57:34:7f:b7:90:89: 7a:fa:31:73:16:f8:37:a8:5a:90:5a:55:c4:bc:15: 0d:6c:b8:04:0b:00:b3:d4:bc:12:b5:fa:b4:ca:78: 75:ce:e4:36:b2:7e:50:66:94:f5:05:de:27:db:33: a3:e9:23:9e:1c:d5:16:4b:10:66:d5:f3:6e:df:e6: 93:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:84:AE:84:C5:A8:40:36:98:E2:F1:FB:E6:EB:45:59:F6:70:11 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:90:3c:99:19:00:b1:79:c6:99:2a:1f:50:f2:02:b8:77:27: 78:c2:0f:e6:3e:f6:25:b4:72:08:5a:7d:e0:12:f4:66:c0:ca: b3:7d:ec:f5:e0:39:63:97:58:bd:4d:d9:04:b1:bd:5f:08:f6: a6:e9:66:64:f0:13:63:f5:0e:f8:aa:e0:46:39:f2:7f:10:8f: ed:53:eb:b6:7e:b5:9d:dc:ea:39:1a:ec:2a:33:ef:c0:6b:0b: 83:78:c5:da:7f:3f:43:1d:e8:7e:54:6f:6f:8b:a3:00:1e:56: b4:b4:ed:c6:f7:27:53:0a:28:d7:f7:c3:ad:ff:2d:16:41:24: 33:e2:d1:34:ee:69:09:8e:f6:9f:ea:f5:88:8a:6a:55:e4:ae: 44:fd:97:9b:0c:51:15:57:ed:ee:85:10:96:57:e4:7b:6f:47: 25:1f:c3:8a:53:4b:6c:77:82:27:8f:b9:d0:eb:b3:07:cb:37: 73:ea:c8:db:8e:c5:7b:fa:a1:32:40:2d:94:b4:89:f6:94:ef: 2e:34:f7:22:dc:06:14:64:82:e1:25:b6:ec:60:96:6f:98:ca: 25:14:65:d4:e9:7e:77:10:27:83:82:02:78:ad:16:fc:d8:aa: 89:3f:fa:39:9d:7d:48:a9:08:a8:41:7e:cf:e4:29:dc:5d:75: 2d:91:0b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjQwNTE3MDY1NDA5WhcNMjQwNTI0MDY1NDA5WjAYMRYwFAYD VQQDEw02NjQ2ZmYxMS03YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fjp6JQSLop5yZWg21QqwChEcgtnvDv+PfQrsDp9kTzChqdAveFwcbsRK8c0 XHKHanXTUHuydzI+PuimqNA0lv9olWQxQYi3g8rldUerVZk96/KsdcZo2iV11wmE icHEA+taIoSDQLN93YbXqHf4mMS11eaW+PtCmmvxivda2/F9RdQh16VSxoxh2Vp2 qxOWoFcxr/YMpCZhLuN5grOD351O320XiEmjkk1R59a4kbrikXbUiqWp3yQJtzVX NH+3kIl6+jFzFvg3qFqQWlXEvBUNbLgECwCz1LwStfq0ynh1zuQ2sn5QZpT1Bd4n 2zOj6SOeHNUWSxBm1fNu3+aTDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVDhK6E xahANpji8fvm60VZ9nARMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmkDyZGQCxecaZKh9Q8gK4dyd4wg/mPvYltHIIWn3gEvRmwMqzfez1 4Dljl1i9TdkEsb1fCPam6WZk8BNj9Q74quBGOfJ/EI/tU+u2frWd3Oo5GuwqM+/A awuDeMXafz9DHeh+VG9vi6MAHla0tO3G9ydTCijX98Ot/y0WQSQz4tE07mkJjvaf 6vWIimpV5K5E/ZebDFEVV+3uhRCWV+R7b0clH8OKU0tsd4Inj7nQ67MHyzdz6sjb jsV7+qEyQC2UtIn2lO8uNPci3AYUZILhJbbsYJZvmMolFGXU6X53ECeDggJ4rRb8 2KqJP/o5nX1IqQioQX7P5CncXXUtkQvw -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org