$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: EcJreIuWiCgKLXt9SA9Tz2IYO5CsBDB5nuRfwMB3M4o= Subject key identifier: AC:F7:F4:82:6F:C8:12:30:FE:3E:93:F8:E0:97:37:2C:32:9E:C2:E5 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0D11 Signing time: Sat 04 May 2024 18:53:14 +0000 Manifest this update: Sat 04 May 2024 18:53:14 +0000 Manifest next update: Sat 11 May 2024 18:53:14 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: fN+Vo9FszdDxKF1BWXq478znsw7N0cd2z5uYZkeoK2w=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: BJQEnl86Bx9uGan5ZQlD+aDEsBXUteyINnoashUOD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: May 4 18:53:14 2024 GMT Not After : May 11 18:53:14 2024 GMT Subject: CN=6636841a-b2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:2f:08:3a:d5:9d:29:6a:7d:39:87:95:57: 2b:e8:c7:d5:c1:4d:e2:f8:78:6b:ee:95:46:22:6b: 09:15:35:81:e1:6a:e0:a4:3a:57:3b:98:d8:af:18: 46:d6:27:5e:70:49:6b:88:45:98:83:2f:f1:77:ce: 65:c8:2b:d9:21:2e:66:80:61:1f:d7:19:45:4c:57: 72:79:06:38:68:7e:df:5f:e5:4f:9a:82:f5:5e:c1: ab:a5:19:4c:0b:37:60:1f:7b:cd:77:ee:e9:75:17: ea:a8:12:a2:8e:ac:c6:27:f8:7c:af:3e:a5:61:6e: cb:4a:e4:b7:47:c8:a8:8e:e8:65:51:e3:f2:33:c5: 83:03:70:88:bf:7b:80:67:46:4e:25:d0:f2:91:42: 59:50:79:95:df:07:79:a6:a0:07:e9:27:b6:3f:5b: 1a:bf:b6:f1:20:99:82:b7:5d:d1:42:de:67:8a:c7: 9a:23:4f:ae:88:24:8a:5a:f4:92:18:9e:b5:b5:45: 42:4e:30:f3:3e:68:2b:81:cb:40:76:cb:84:01:74: 6a:b8:92:d3:e5:00:11:34:a5:e3:62:13:d7:9c:83: 12:12:3c:d8:f6:73:a9:b6:fc:d6:e4:61:1f:80:7d: 7c:c2:56:8c:4b:ae:92:2c:2b:9a:ca:7b:08:1e:ed: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F7:F4:82:6F:C8:12:30:FE:3E:93:F8:E0:97:37:2C:32:9E:C2:E5 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:24:1a:b8:a5:54:33:32:d8:a4:5e:2c:38:0a:b4:4f:f2:5d: 07:c4:3d:35:af:a6:2e:b7:64:62:f9:04:84:93:ab:32:48:42: a8:e8:08:09:b7:bc:17:f6:4c:db:37:9b:96:3b:ef:a0:66:de: 77:1c:b0:2f:92:0f:cd:c7:d1:c6:dc:ca:d9:1c:1d:81:be:c5: 34:d5:67:11:62:fb:f9:61:b3:77:c7:89:0a:0d:13:24:65:3c: 4d:61:62:b8:18:c6:97:1f:79:35:d2:38:fd:c2:78:0d:3c:4b: 59:78:1b:03:61:5e:b9:13:6d:9c:6b:ad:e1:fb:d3:95:ed:90: 46:c9:82:e4:3b:26:5f:ed:f8:c3:70:7f:94:c9:5d:0f:7b:ff: 2e:07:6a:e7:5a:56:47:ca:3e:44:80:a9:d1:db:76:cd:2a:2f: f4:62:e9:46:27:47:c5:9f:d5:5e:ea:de:68:9e:0f:96:96:b2: 64:55:f4:80:85:2d:1c:c2:c0:16:9d:03:4f:5d:6f:02:1d:fb: 74:26:b3:cf:51:45:1a:c9:3c:a0:98:90:fa:04:bf:9e:3a:de: bb:2d:0f:3f:37:ec:e6:f8:b4:b8:b2:33:fa:03:7c:06:8c:64: 46:f5:c9:1c:12:73:3c:69:1d:32:66:c1:b0:bb:5b:a7:98:ba: af:57:f8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjQwNTA0MTg1MzE0WhcNMjQwNTExMTg1MzE0WjAYMRYwFAYD VQQDEw02NjM2ODQxYS1iMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQkvCDrVnSlqfTmHlVcr6MfVwU3i+Hhr7pVGImsJFTWB4WrgpDpXO5jYrxhG 1idecElriEWYgy/xd85lyCvZIS5mgGEf1xlFTFdyeQY4aH7fX+VPmoL1XsGrpRlM CzdgH3vNd+7pdRfqqBKijqzGJ/h8rz6lYW7LSuS3R8iojuhlUePyM8WDA3CIv3uA Z0ZOJdDykUJZUHmV3wd5pqAH6Se2P1sav7bxIJmCt13RQt5niseaI0+uiCSKWvSS GJ61tUVCTjDzPmgrgctAdsuEAXRquJLT5QARNKXjYhPXnIMSEjzY9nOptvzW5GEf gH18wlaMS66SLCuaynsIHu2yBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz39IJv yBIw/j6T+OCXNywynsLlMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpJBq4pVQzMtikXiw4CrRP8l0HxD01r6Yut2Ri+QSEk6sySEKo6AgJ t7wX9kzbN5uWO++gZt53HLAvkg/Nx9HG3MrZHB2BvsU01WcRYvv5YbN3x4kKDRMk ZTxNYWK4GMaXH3k10jj9wngNPEtZeBsDYV65E22ca63h+9OV7ZBGyYLkOyZf7fjD cH+UyV0Pe/8uB2rnWlZHyj5EgKnR23bNKi/0YulGJ0fFn9Ve6t5ong+WlrJkVfSA hS0cwsAWnQNPXW8CHft0JrPPUUUayTygmJD6BL+eOt67LQ8/N+zm+LS4sjP6A3wG jGRG9ckcEnM8aR0yZsGwu1unmLqvV/iu -----END CERTIFICATE-----Generated at Sat May 4 20:37:21 2024 by rpki-client on console-fra.rpki-client.org