$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft File: j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json) Hash identifier: lNkXlOzNamM3bZrK5fNg2zX6V8miswxM/rYt1b6VR0I= Subject key identifier: 87:62:E8:2E:98:57:46:8E:F9:78:5E:B0:BD:6C:18:49:06:D6:06:DA Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 Certificate issuer: /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Certificate serial: 1D85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft Manifest number: 1DB4 Signing time: Sat 18 May 2024 16:28:29 +0000 Manifest this update: Sat 18 May 2024 16:28:29 +0000 Manifest next update: Sat 25 May 2024 16:28:29 +0000 Files and hashes: 1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: IHxk/ZBqjAnTjIFV1z9WYtl+dm98Bky8stnIxVELM9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7557 (0x1d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Validity Not Before: May 18 16:28:29 2024 GMT Not After : May 25 16:28:29 2024 GMT Subject: CN=6648d72d-db4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:64:31:10:d2:9a:c6:ef:da:3e:fd:07:84: 4e:6c:1e:bf:b2:ea:c7:1e:0f:da:37:f6:5d:4f:60: a4:46:05:3f:b1:6d:f0:a2:8e:5c:fb:f2:0f:e4:40: 63:1d:86:de:9c:21:cb:ac:04:e4:8d:46:5e:95:d1: 49:48:f1:22:bf:0a:e7:3e:4e:b9:c4:e8:92:7b:32: b4:45:ab:f1:f1:c0:48:a7:c8:60:e8:8e:17:32:4b: 04:4e:6a:7f:7d:bc:3c:ac:4a:40:50:31:8c:dc:62: b6:61:dd:72:3a:ed:d4:63:df:f5:30:27:ea:d2:bc: 83:65:ea:ef:01:58:b0:ee:56:b7:8a:fc:cf:06:11: 27:8f:60:1e:a6:bb:49:fd:c9:f2:f7:6b:c8:7b:28: 5f:58:db:88:4e:03:ac:f9:16:a9:a6:41:f1:65:0f: e0:2f:4b:e6:a6:95:c9:88:f6:85:26:22:25:1b:1b: 82:2e:96:86:30:fd:98:e0:f8:33:38:7e:e3:3b:6a: f0:3a:37:f5:b3:82:8d:a5:35:e8:b8:6a:d8:d0:15: a6:38:0f:94:8c:12:c9:7a:42:7c:1a:37:c8:d8:02: 66:db:8d:b3:be:3b:e6:bb:bd:b8:72:4e:3d:e4:e8: 11:c8:ff:1a:e4:86:52:a2:7b:7c:e6:f8:54:bd:a3: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:62:E8:2E:98:57:46:8E:F9:78:5E:B0:BD:6C:18:49:06:D6:06:DA X509v3 Authority Key Identifier: keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:65:d7:6a:95:03:64:1c:d9:ce:5a:fe:d9:6a:21:ca:e5:73: 10:4f:4b:2d:4b:6f:ef:8e:cd:f1:88:d7:3a:b1:35:cb:98:dc: 64:b3:22:4d:49:5f:e9:e6:28:3e:6a:f5:46:90:84:85:95:af: ad:2a:f0:0b:00:fc:3f:33:24:e0:01:69:af:55:57:14:ca:41: 18:3b:b4:ba:05:6f:78:c9:47:c0:a4:e4:b7:08:00:46:cf:c6: 7e:4a:f5:55:4f:b7:a3:cd:f6:ab:ed:e8:bc:bf:bc:54:e3:7a: 6d:63:96:a0:65:d7:5f:e4:5a:ca:d0:8d:90:49:73:77:88:30: 47:0a:4d:dd:1c:3c:0c:c8:f6:1e:0e:07:3e:77:a9:94:47:6e: 1b:ed:38:e7:d1:0c:d7:0b:62:d0:32:cd:fa:7c:07:dd:59:cc: 04:8e:42:e3:70:0b:9e:d3:1f:98:a1:23:06:d1:48:67:73:18: a1:68:54:f3:c7:fa:85:45:54:e0:ac:84:f1:7b:54:39:1d:a9: 9b:09:a2:34:d0:95:fa:ee:71:e7:90:05:0f:20:1c:6d:46:e8: e2:37:89:9d:9f:3f:d5:d7:99:bc:96:a9:73:c1:74:99:8c:09: 7e:3d:7b:37:e8:5d:d6:f8:42:36:17:ec:0d:78:10:0c:35:71: b4:f7:7b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCOTMxMTAvBgNVBAUTKDhGQzNGOERFNTIzQUYyOURCMjRBMTU5MEZENDBBMDQ0 NzVBRTBBMjUwHhcNMjQwNTE4MTYyODI5WhcNMjQwNTI1MTYyODI5WjAYMRYwFAYD VQQDEw02NjQ4ZDcyZC1kYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoABkMRDSmsbv2j79B4RObB6/surHHg/aN/ZdT2CkRgU/sW3woo5c+/IP5EBj HYbenCHLrATkjUZeldFJSPEivwrnPk65xOiSezK0Ravx8cBIp8hg6I4XMksETmp/ fbw8rEpAUDGM3GK2Yd1yOu3UY9/1MCfq0ryDZervAViw7la3ivzPBhEnj2AeprtJ /cny92vIeyhfWNuITgOs+RappkHxZQ/gL0vmppXJiPaFJiIlGxuCLpaGMP2Y4Pgz OH7jO2rwOjf1s4KNpTXouGrY0BWmOA+UjBLJekJ8GjfI2AJm242zvjvmu724ck49 5OgRyP8a5IZSont85vhUvaPPUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdi6C6Y V0aO+XhesL1sGEkG1gbaMB8GA1UdIwQYMBaAFI/D+N5SOvKdskoVkP1AoER1rgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhwMnlTaFdRX1VDZ1JIV3VD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4UDQzbEk2OHAyeVNoV1FfVUNnUkhXdUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhw MnlTaFdRX1VDZ1JIV3VDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvZddqlQNkHNnOWv7ZaiHK5XMQT0stS2/vjs3xiNc6sTXLmNxksyJN SV/p5ig+avVGkISFla+tKvALAPw/MyTgAWmvVVcUykEYO7S6BW94yUfApOS3CABG z8Z+SvVVT7ejzfar7ei8v7xU43ptY5agZddf5FrK0I2QSXN3iDBHCk3dHDwMyPYe Dgc+d6mUR24b7Tjn0QzXC2LQMs36fAfdWcwEjkLjcAue0x+YoSMG0UhncxihaFTz x/qFRVTgrITxe1Q5HambCaI00JX67nHnkAUPIBxtRujiN4mdnz/V15m8lqlzwXSZ jAl+PXs36F3W+EI2F+wNeBAMNXG093vz -----END CERTIFICATE-----Generated at Sat May 18 17:20:02 2024 by rpki-client on console-ams.rpki-client.org