$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: D57aIJCcrON0Q7NoahZnhSi/ijBnHaxSexSfzJc7Ixc= Subject key identifier: 1E:44:79:3E:1A:79:0B:6C:32:57:B5:B9:86:65:D6:D8:8E:A2:60:52 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 02AA Signing time: Tue 07 May 2024 03:34:01 +0000 Manifest this update: Tue 07 May 2024 03:34:01 +0000 Manifest next update: Tue 14 May 2024 03:34:01 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: JXYEv1olnyRmv4xr7o73rRvg5lC0UGgd0rydQtd2b4s=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: AArq8t/jhxU12JazlbbWzfn6Htlf8feOYH1MiOaqv2s=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: a3TV3Qr98YNHe55DJ7WbLvKYcURrK12GnbhFOXLtRjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: May 7 03:34:01 2024 GMT Not After : May 14 03:34:01 2024 GMT Subject: CN=6639a129-259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:d3:e6:86:70:21:36:b3:20:2c:1c:f5:39: d3:4e:ad:54:18:ec:ff:77:e1:6a:f0:cf:00:22:42: 4a:53:3d:c0:79:fd:bb:19:93:9f:ed:fe:89:c1:13: 90:cc:b8:84:71:fb:51:11:27:66:cf:53:64:ec:cc: 71:f9:22:38:55:da:25:9a:55:9c:25:b9:15:91:5d: 8b:a2:3e:01:c5:96:6d:69:29:ba:35:2b:aa:5d:e9: 35:c6:f5:ca:e0:24:5b:f5:03:41:66:47:a7:14:19: eb:82:34:e3:b4:db:0d:e9:e3:56:fd:7a:35:ff:5c: 4e:53:e3:ff:29:81:b8:f2:f8:5a:f1:62:be:df:32: 44:14:6b:25:35:d1:79:5a:73:b0:fe:de:99:51:c0: 2a:ad:12:f0:53:a7:9f:2b:41:ee:a8:9b:21:ed:21: 16:69:da:9d:35:85:66:47:77:8b:14:97:f5:20:7d: 1a:e4:b5:e7:db:c1:d8:02:49:0c:5f:24:ef:19:52: 04:fc:a2:d5:55:7e:85:c2:33:42:26:56:cd:b1:17: 20:cb:a0:ba:56:62:71:06:11:e9:34:c5:0e:8f:34: 32:b1:94:bd:a6:2f:81:8c:0e:cb:8c:19:39:aa:b4: f9:06:7e:2d:f4:a5:d6:1a:a1:d8:7e:eb:a9:1b:d1: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:79:3E:1A:79:0B:6C:32:57:B5:B9:86:65:D6:D8:8E:A2:60:52 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cc:89:f0:2b:4b:56:b1:f6:78:0e:f3:de:ab:ec:33:de:9f: 28:93:30:41:cc:c0:f3:63:67:8f:cb:ed:ed:09:4f:be:a4:c8: cf:dc:23:a6:7c:f8:96:87:c6:70:2e:a4:1d:43:57:2e:3a:60: 7b:36:ad:90:48:74:7b:18:71:10:2a:91:82:3b:79:e7:ed:73: 49:00:17:e4:90:e8:11:41:31:24:b8:be:30:48:9c:b3:96:bd: 77:44:4a:45:e7:91:10:7a:1c:2e:0d:f2:fc:12:fd:c5:9d:3d: 90:8d:8f:dc:4a:3a:bb:14:55:0b:42:2c:96:dc:da:ad:7a:68: c9:35:bc:ea:0f:82:66:71:b8:48:1e:87:97:c8:cd:af:52:ec: 4e:2f:fc:cb:f6:68:21:03:74:1a:8d:3b:5e:3e:7e:4f:cc:38: b7:06:6f:71:af:d1:3e:92:3f:c4:df:7a:81:2c:a1:a0:43:bf: 6b:10:54:20:a3:b2:36:08:16:11:e1:ce:00:b6:45:65:ee:52: bb:84:08:1d:e8:a9:88:21:c5:a1:95:a1:0e:fb:df:5f:3c:a7: 94:8a:0e:38:fe:0b:f3:70:ac:04:2f:6d:f1:4b:fb:89:b6:e4: f4:a3:32:4e:85:57:7f:0d:cc:4b:f0:cf:db:6f:d6:bb:78:a1: f5:88:de:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjQwNTA3MDMzNDAxWhcNMjQwNTE0MDMzNDAxWjAYMRYwFAYD VQQDEw02NjM5YTEyOS0yNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4HT5oZwITazICwc9TnTTq1UGOz/d+Fq8M8AIkJKUz3Aef27GZOf7f6JwROQ zLiEcftRESdmz1Nk7Mxx+SI4VdolmlWcJbkVkV2Loj4BxZZtaSm6NSuqXek1xvXK 4CRb9QNBZkenFBnrgjTjtNsN6eNW/Xo1/1xOU+P/KYG48vha8WK+3zJEFGslNdF5 WnOw/t6ZUcAqrRLwU6efK0HuqJsh7SEWadqdNYVmR3eLFJf1IH0a5LXn28HYAkkM XyTvGVIE/KLVVX6FwjNCJlbNsRcgy6C6VmJxBhHpNMUOjzQysZS9pi+BjA7LjBk5 qrT5Bn4t9KXWGqHYfuupG9HfTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5EeT4a eQtsMle1uYZl1tiOomBSMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACzInwK0tWsfZ4DvPeq+wz3p8okzBBzMDzY2ePy+3tCU++pMjP3COm fPiWh8ZwLqQdQ1cuOmB7Nq2QSHR7GHEQKpGCO3nn7XNJABfkkOgRQTEkuL4wSJyz lr13REpF55EQehwuDfL8Ev3FnT2QjY/cSjq7FFULQiyW3NqtemjJNbzqD4JmcbhI HoeXyM2vUuxOL/zL9mghA3QajTtePn5PzDi3Bm9xr9E+kj/E33qBLKGgQ79rEFQg o7I2CBYR4c4AtkVl7lK7hAgd6KmIIcWhlaEO+99fPKeUig44/gvzcKwEL23xS/uJ tuT0ozJOhVd/DcxL8M/bb9a7eKH1iN4F -----END CERTIFICATE-----Generated at Tue May 7 04:34:53 2024 by rpki-client on console-fra.rpki-client.org