$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: 16MlJHwcJulV10aDJTTyr8lQ8thJyShQreZe6o4AnRc= Subject key identifier: 7B:4F:02:E4:EA:06:05:E3:0D:20:AA:61:6E:FF:61:28:B8:59:FA:80 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0BD6 Signing time: Thu 02 May 2024 19:15:05 +0000 Manifest this update: Thu 02 May 2024 19:15:05 +0000 Manifest next update: Thu 09 May 2024 19:15:05 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: BZhHQStNj7ppMxxaVx8IqhXVSyQ20Kg5PFZzobbiK28=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: xP6ndfAIUT4kjjg3Z1yDgdvpNzEsqIUZcM1cJmsAZNg=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: NI1ZoCOniGYBu2VFAx4PdtMcylM7TuUiNnsC0whwimk=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: 9hZUw6OiygXcs2VV6xxLdgPVz+MABiI7dpW7FTbMjXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: May 2 19:15:05 2024 GMT Not After : May 9 19:15:05 2024 GMT Subject: CN=6633e639-009e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:27:ce:53:cd:60:62:92:4e:ab:e3:83:c8: 7d:32:bb:2c:1c:b8:05:d4:dd:70:23:bc:ab:91:b0: 0b:c6:d5:75:7f:65:6c:50:09:c8:fd:b0:07:76:32: 18:f4:40:22:f7:b5:e6:22:73:d2:b3:92:e0:e5:6d: de:4e:70:81:3e:cc:a0:5f:d7:7e:02:4b:b2:c5:01: 4a:20:6a:40:ce:7e:46:3a:6b:d3:11:49:98:62:d5: d2:f6:51:ee:0a:63:e7:0a:b5:bc:80:f2:9b:64:20: 80:c2:a1:fe:b0:15:d2:83:98:13:fc:8f:aa:e0:37: 28:73:b9:cb:b8:c1:3c:7c:28:7e:33:33:36:bc:75: 59:13:87:fa:e5:f1:2c:52:46:da:16:f5:a9:40:e7: dc:d2:12:f2:25:7b:0a:08:0e:25:59:46:bc:2c:51: 53:3c:1c:c6:d9:3b:43:06:5e:8a:3c:82:6b:bf:b2: 3c:8c:82:00:d7:92:56:8d:12:46:87:32:ca:8e:13: 5f:d3:c8:3f:31:db:a9:6b:05:a7:4e:09:c8:de:d0: f5:90:52:9e:f8:91:6c:a7:07:32:96:de:79:cc:8a: d2:84:46:90:83:1c:cc:71:81:4e:43:0f:1f:e2:11: 13:ca:ee:e2:f2:eb:19:08:df:d2:ce:5e:9e:e2:d8: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4F:02:E4:EA:06:05:E3:0D:20:AA:61:6E:FF:61:28:B8:59:FA:80 X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:97:a4:35:bb:11:d8:db:c8:c0:a3:5e:ff:ef:1a:3c:55: 83:68:a2:e9:df:ff:9e:7c:94:bd:4a:f3:f3:7b:c7:c6:7a:84: 4f:04:ed:2f:b4:d7:22:c0:b0:b5:21:f1:0e:87:06:08:75:27: 44:54:d1:f3:68:05:19:ba:5e:8c:0d:84:37:fa:d1:21:04:9c: 53:72:8f:c6:aa:83:52:bf:84:74:0e:09:c2:24:f9:c3:69:1d: ac:d7:ba:c2:7e:d0:3a:d7:50:1b:3a:19:25:49:c0:2c:b9:78: 59:62:d1:e3:51:a8:8c:2d:7e:52:a3:c7:51:66:f8:9b:30:65: 8b:18:07:f9:93:3e:d5:2c:0a:12:d6:69:8f:dd:26:9d:ed:89: 21:d0:f7:fb:23:ab:ad:6e:45:84:6d:d7:c7:2d:e6:72:33:a2: 2b:01:b1:6e:14:64:eb:9b:d8:f9:b0:09:49:b5:3d:87:76:0e: 52:a4:11:5a:49:6a:84:00:7e:fa:57:a9:f9:e5:6f:06:2d:e7: d7:a3:b1:19:fd:15:c4:db:38:53:f3:da:b1:9e:f1:10:20:b9: cb:ef:b1:ae:9b:cc:0c:6a:9c:80:91:d6:2d:0a:9a:2f:df:2e: 11:89:57:d0:d2:29:f0:1c:9e:a5:3f:63:b1:75:59:23:7a:fe: 29:01:44:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjQwNTAyMTkxNTA1WhcNMjQwNTA5MTkxNTA1WjAYMRYwFAYD VQQDEw02NjMzZTYzOS0wMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAYnzlPNYGKSTqvjg8h9MrssHLgF1N1wI7yrkbALxtV1f2VsUAnI/bAHdjIY 9EAi97XmInPSs5Lg5W3eTnCBPsygX9d+AkuyxQFKIGpAzn5GOmvTEUmYYtXS9lHu CmPnCrW8gPKbZCCAwqH+sBXSg5gT/I+q4Dcoc7nLuME8fCh+MzM2vHVZE4f65fEs UkbaFvWpQOfc0hLyJXsKCA4lWUa8LFFTPBzG2TtDBl6KPIJrv7I8jIIA15JWjRJG hzLKjhNf08g/MdupawWnTgnI3tD1kFKe+JFspwcylt55zIrShEaQgxzMcYFOQw8f 4hETyu7i8usZCN/Szl6e4tjCRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtPAuTq BgXjDSCqYW7/YSi4WfqAMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeAZekNbsR2NvIwKNe/+8aPFWDaKLp3/+efJS9SvPze8fGeoRPBO0v tNciwLC1IfEOhwYIdSdEVNHzaAUZul6MDYQ3+tEhBJxTco/GqoNSv4R0DgnCJPnD aR2s17rCftA611AbOhklScAsuXhZYtHjUaiMLX5So8dRZvibMGWLGAf5kz7VLAoS 1mmP3Sad7Ykh0Pf7I6utbkWEbdfHLeZyM6IrAbFuFGTrm9j5sAlJtT2Hdg5SpBFa SWqEAH76V6n55W8GLefXo7EZ/RXE2zhT89qxnvEQILnL77Gum8wMapyAkdYtCpov 3y4RiVfQ0inwHJ6lP2OxdVkjev4pAURf -----END CERTIFICATE-----Generated at Thu May 2 20:50:39 2024 by rpki-client on console-fra.rpki-client.org