$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: Gi9qCqHWU/kClOv7HCwC/OhW3WmI2Eu+v2/W16v8pfw= Subject key identifier: 14:DB:A0:ED:41:4D:B5:5F:5B:7B:76:CE:F0:1C:B3:B1:20:69:2C:11 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 086F Signing time: Sat 18 May 2024 21:39:08 +0000 Manifest this update: Sat 18 May 2024 21:39:08 +0000 Manifest next update: Sat 25 May 2024 21:39:08 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: A+yMYkvMP1Y3tR39UxDwUd9mW6VNd2/wZ1Ckf1gP910=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: JE5gBgWjPEuBwqWjXLC+rbeg5NUNYJdGGvO1gbBbxdM=) 3: E8BAA0960FDB11ED9718606AC4F9AE02.roa (hash: UqOWSdhVai9HD7S0x0deOxFD0geP+CIIVlUen0wbRj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: May 18 21:39:08 2024 GMT Not After : May 25 21:39:08 2024 GMT Subject: CN=66491ffc-a5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:01:2e:65:69:e1:2d:e8:b5:4b:d4:2f:b9: e8:7a:7e:b4:0a:ce:59:a5:1d:70:02:fa:09:80:e2: 46:a5:8e:6c:59:d1:fe:dc:cc:75:b6:1e:24:5e:f4: 8b:ee:f0:aa:91:9b:6e:62:6a:e6:4d:a5:30:3b:c1: 55:4a:a0:34:8f:c5:32:e2:0a:37:f8:81:1b:b5:fc: 30:d5:9b:98:73:12:b8:77:52:77:cf:e7:67:7e:e2: 9b:76:5a:95:20:4e:8a:91:83:25:dc:55:67:f4:88: dd:9e:1e:ac:cb:e3:9f:02:68:0d:ed:05:6c:8f:41: a3:b7:ed:73:b0:db:37:95:f0:03:a5:30:cb:18:b9: 88:58:bd:ea:ee:44:3c:a1:ec:8e:d3:b6:3b:2e:87: d6:67:5e:4e:10:93:26:74:6f:32:c3:e6:80:d1:46: 2a:c2:03:55:27:c1:0a:9b:76:ac:46:80:bf:be:9c: 06:49:4a:1e:4c:5a:67:3b:01:41:d5:cd:60:ed:22: a3:84:e1:a8:d3:65:a7:1a:06:29:91:b1:68:0f:3b: 76:b3:cf:1f:83:60:29:b9:86:bd:4e:93:e6:58:28: 53:7e:5f:81:4a:fb:97:c8:f9:71:7d:ae:f6:de:3a: 7f:83:0a:26:9a:f2:35:54:9c:4f:a7:7b:04:40:cc: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:A0:ED:41:4D:B5:5F:5B:7B:76:CE:F0:1C:B3:B1:20:69:2C:11 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d0:71:d3:f3:f1:db:72:d9:d5:34:96:cc:a2:1b:0a:89:78: 85:c2:d8:f6:9d:33:b2:11:74:69:64:ac:02:f3:5b:00:a0:4b: 10:9a:df:38:ea:31:e9:eb:b6:12:05:50:c2:07:ab:9c:1f:8b: c3:89:9e:ac:58:02:5d:bd:89:a8:d3:fc:c0:76:27:9f:89:a7: 3d:82:52:f1:cb:65:2f:0b:50:c7:dc:39:73:76:3e:33:49:ee: 55:4a:6a:94:15:7c:9f:67:de:b1:1e:a5:cb:cc:d5:78:21:91: 36:da:07:e3:f4:1b:c1:20:c3:4b:cb:26:e7:90:80:89:23:0e: d8:e1:07:85:8c:89:14:11:f8:26:d6:5b:3d:ff:a5:ae:ee:de: 4b:8b:3d:ad:b0:d6:0e:dc:6b:cb:2e:8f:55:c7:ee:55:14:88: 79:03:65:d4:d2:b2:11:34:bf:c8:7e:7c:57:e9:ac:45:4d:80: 30:c5:11:eb:1b:01:ba:b6:41:df:1c:50:73:c7:93:7f:06:b7: d0:2d:69:79:05:10:7e:c1:04:9a:0b:a6:5d:58:ec:48:33:b6: 1d:dc:84:4b:43:7b:8a:7a:e4:75:dc:86:38:71:ea:e6:d3:23: d2:ff:73:47:97:93:74:fb:50:b8:c9:3d:82:2a:f7:da:b6:d9: ec:98:b9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjQwNTE4MjEzOTA4WhcNMjQwNTI1MjEzOTA4WjAYMRYwFAYD VQQDEw02NjQ5MWZmYy1hNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBgBLmVp4S3otUvUL7noen60Cs5ZpR1wAvoJgOJGpY5sWdH+3Mx1th4kXvSL 7vCqkZtuYmrmTaUwO8FVSqA0j8Uy4go3+IEbtfww1ZuYcxK4d1J3z+dnfuKbdlqV IE6KkYMl3FVn9Ijdnh6sy+OfAmgN7QVsj0Gjt+1zsNs3lfADpTDLGLmIWL3q7kQ8 oeyO07Y7LofWZ15OEJMmdG8yw+aA0UYqwgNVJ8EKm3asRoC/vpwGSUoeTFpnOwFB 1c1g7SKjhOGo02WnGgYpkbFoDzt2s88fg2ApuYa9TpPmWChTfl+BSvuXyPlxfa72 3jp/gwommvI1VJxPp3sEQMzl0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTboO1B TbVfW3t2zvAcs7EgaSwRMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG0HHT8/HbctnVNJbMohsKiXiFwtj2nTOyEXRpZKwC81sAoEsQmt84 6jHp67YSBVDCB6ucH4vDiZ6sWAJdvYmo0/zAdiefiac9glLxy2UvC1DH3Dlzdj4z Se5VSmqUFXyfZ96xHqXLzNV4IZE22gfj9BvBIMNLyybnkICJIw7Y4QeFjIkUEfgm 1ls9/6Wu7t5Liz2tsNYO3GvLLo9Vx+5VFIh5A2XU0rIRNL/IfnxX6axFTYAwxRHr GwG6tkHfHFBzx5N/BrfQLWl5BRB+wQSaC6ZdWOxIM7Yd3IRLQ3uKeuR13IY4cerm 0yPS/3NHl5N0+1C4yT2CKvfattnsmLnD -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org