$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: GA8DT2CuPNxkkmP4oUl4Qx2zByF5X5bam7QH3U7MKM4= Subject key identifier: F6:54:FA:AF:9F:4F:EC:14:1C:0E:1F:25:BC:A7:43:53:D1:99:43:A8 Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 3120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 3120 Signing time: Tue 30 Apr 2024 15:42:54 +0000 Manifest this update: Tue 30 Apr 2024 15:42:54 +0000 Manifest next update: Tue 07 May 2024 15:42:54 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: v85/fx0hwRh1ZKRoNm6IT6buWXmDZhju1N25Cc7gV3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12576 (0x3120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Apr 30 15:42:54 2024 GMT Not After : May 7 15:42:54 2024 GMT Subject: CN=6631117e-f73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:c8:af:a3:19:f0:db:65:3c:76:b4:64:2e: f2:22:68:b2:ec:12:d7:f0:a2:83:73:73:38:0c:69: 8b:82:f3:32:19:5a:d4:3f:da:6f:72:1e:e2:b2:4b: 4b:6e:34:3f:32:fe:d3:10:65:00:20:a5:a3:8b:0a: df:c9:9c:3f:f3:61:57:b8:fa:99:62:0a:9f:e6:a2: a5:b8:d0:fb:ef:00:39:ed:b9:96:c3:ea:e3:59:aa: ed:60:26:e6:9f:bf:3d:08:7b:bf:1d:db:de:e6:1a: f5:c7:62:99:e6:70:6e:6b:86:6c:8f:37:2a:4f:ac: c5:d0:ee:81:30:5e:56:c0:36:1d:0a:48:9e:45:8d: 04:67:40:31:f9:1e:38:11:94:c2:07:6b:79:93:2b: 8d:ba:28:f7:da:c0:9d:8f:6e:d5:dd:31:37:73:7e: 17:a5:64:cd:27:a5:a4:cf:13:b8:18:f3:99:d9:5d: 3c:9c:72:c0:07:7e:0d:09:63:e1:0e:27:55:16:d9: a6:43:4b:48:e7:ff:2f:ef:c4:47:1b:a2:29:8e:1a: c8:ae:b6:e9:5d:f2:f0:8b:fc:bf:15:4a:62:56:84: 21:03:4a:0d:06:11:9c:69:4c:1e:c5:4b:a2:e7:ab: 98:c5:0d:2d:b3:c5:58:88:8f:01:1d:48:b9:2e:e9: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:54:FA:AF:9F:4F:EC:14:1C:0E:1F:25:BC:A7:43:53:D1:99:43:A8 X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cd:a1:aa:f8:fc:d9:60:42:5c:3e:50:f2:0f:b9:86:97:b1: dc:9a:94:48:b5:57:b4:e6:c7:3b:98:1a:b3:a4:17:31:03:a3: 42:d2:2d:b1:ba:4f:7a:a9:fd:8c:ef:68:89:e1:4a:8f:b9:a3: 05:81:02:f1:04:12:bd:dd:60:95:63:f7:3c:24:7f:d6:e3:69: ea:de:d5:0c:67:75:ab:7b:70:4b:e0:a8:96:f4:b2:a8:5c:b5: ea:30:34:ff:03:5b:42:13:4d:23:61:f4:02:66:32:d3:8d:f7: 5e:ea:92:57:5a:98:d2:9e:61:8c:65:fb:18:03:db:2c:f6:95: 44:cd:93:98:9d:31:a0:cf:59:3e:86:d3:46:1a:4a:43:6e:62: 12:7a:df:35:f5:df:d8:83:59:77:82:75:21:cd:c5:e8:e3:58: 9b:59:a1:3a:bc:87:d8:36:9e:80:b1:39:a3:d5:38:92:3d:cf: 59:87:90:bf:d2:e0:30:ba:e4:db:a6:e4:f9:8f:1e:22:60:9e: 31:11:e5:7e:17:33:1e:fe:40:05:39:21:fa:b2:22:66:6d:df: 1c:57:a0:b1:22:df:48:68:53:f8:e6:f8:dd:f8:62:cb:f9:c3: ec:d2:07:26:df:67:62:73:6e:32:04:5a:a1:d7:11:23:77:2a: 0a:8e:e0:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjQwNDMwMTU0MjU0WhcNMjQwNTA3MTU0MjU0WjAYMRYwFAYD VQQDEw02NjMxMTE3ZS1mNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6vIr6MZ8NtlPHa0ZC7yImiy7BLX8KKDc3M4DGmLgvMyGVrUP9pvch7isktL bjQ/Mv7TEGUAIKWjiwrfyZw/82FXuPqZYgqf5qKluND77wA57bmWw+rjWartYCbm n789CHu/Hdve5hr1x2KZ5nBua4ZsjzcqT6zF0O6BMF5WwDYdCkieRY0EZ0Ax+R44 EZTCB2t5kyuNuij32sCdj27V3TE3c34XpWTNJ6WkzxO4GPOZ2V08nHLAB34NCWPh DidVFtmmQ0tI5/8v78RHG6IpjhrIrrbpXfLwi/y/FUpiVoQhA0oNBhGcaUwexUui 56uYxQ0ts8VYiI8BHUi5LumdwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZU+q+f T+wUHA4fJbynQ1PRmUOoMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+zaGq+PzZYEJcPlDyD7mGl7HcmpRItVe05sc7mBqzpBcxA6NC0i2x uk96qf2M72iJ4UqPuaMFgQLxBBK93WCVY/c8JH/W42nq3tUMZ3Wre3BL4KiW9LKo XLXqMDT/A1tCE00jYfQCZjLTjfde6pJXWpjSnmGMZfsYA9ss9pVEzZOYnTGgz1k+ htNGGkpDbmISet819d/Yg1l3gnUhzcXo41ibWaE6vIfYNp6AsTmj1TiSPc9Zh5C/ 0uAwuuTbpuT5jx4iYJ4xEeV+FzMe/kAFOSH6siJmbd8cV6CxIt9IaFP45vjd+GLL +cPs0gcm32dic24yBFqh1xEjdyoKjuAg -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:57 2024 by rpki-client on console-ams.rpki-client.org