$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: +chy+bzR66AydS5vyBDQgfd2dXxDmErVU0TfKRI9zFE= Subject key identifier: CC:E4:03:B0:B0:D7:27:B0:74:05:53:A9:E2:8C:B6:4D:E0:42:18:CD Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 82 Signing time: Sun 19 May 2024 07:12:55 +0000 Manifest this update: Sun 19 May 2024 07:12:55 +0000 Manifest next update: Sun 26 May 2024 07:12:54 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: BKqtiH2DnIYtzvYgTi71vZl2zFA8JS2DYC0QQRS0MGw=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: Qz5iGzyNOrGCX937jX4aRAOwunW0lhpKpg9tUyKFo7U=) 3: BA536126685D11EE8F1C1849C4F9AE02.roa (hash: TeOT08pZdJKZYXgJoC3uQ37VY/ZhoZkFKgmuL0OEmdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: May 19 07:12:55 2024 GMT Not After : May 26 07:12:54 2024 GMT Subject: CN=6649a677-6cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:db:d3:ea:2e:8e:1a:22:3a:15:3a:d4:77:09: c8:1a:c9:b7:84:33:4d:46:f1:5f:13:ce:40:aa:43: fd:cb:04:eb:c5:64:33:b6:6a:1d:db:bd:ea:3d:b9: 8f:b5:a8:20:07:0d:67:8a:75:30:a6:30:46:f6:da: ed:3b:7d:37:96:23:2d:45:c2:3a:86:d5:32:a4:3e: 8c:dd:29:1d:5b:59:06:60:a1:21:88:e6:6e:b0:77: 69:41:05:71:6b:04:9a:66:6c:21:fd:89:a7:b4:ea: 5b:2c:93:3a:f8:76:16:10:82:f1:d9:58:ba:1b:3e: b4:39:43:d6:88:82:b4:87:68:3d:6b:b3:7c:eb:04: 42:a4:b3:ae:8e:38:1c:db:e8:df:ae:68:6a:05:ae: 76:0b:9b:48:b0:b9:9b:78:ad:04:c0:1f:5c:25:05: 81:77:fd:93:27:37:a1:7b:32:81:92:49:bc:5e:7d: 03:be:aa:c6:b9:61:71:8b:09:12:35:58:6d:5e:a0: b5:6e:61:76:5e:c4:36:74:99:b9:dc:25:b5:0d:c3: 8b:99:d9:dc:c8:c4:cb:45:c5:91:95:45:c8:40:6f: da:1b:89:76:8d:65:61:62:2e:46:3d:32:22:c0:23: d3:3d:d6:d6:8c:d4:ed:fd:db:8e:0d:4f:c8:db:18: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:03:B0:B0:D7:27:B0:74:05:53:A9:E2:8C:B6:4D:E0:42:18:CD X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:db:aa:7f:35:f9:94:21:a6:3e:18:31:72:8a:0e:2a:dc:c1: 3e:3f:64:4f:70:30:90:dc:f3:69:8f:78:f3:85:70:f2:80:f9: cf:33:fc:94:99:fe:e1:33:f3:db:c6:aa:99:76:e8:e5:e5:b5: bb:b2:59:dd:37:24:c0:90:3f:a8:4a:5d:80:b4:39:23:07:e8: e5:be:e0:ea:52:89:c3:2a:cc:b8:13:8e:b3:09:cb:5f:aa:4a: a4:37:3b:ab:16:66:e2:9b:a7:60:43:e1:c6:0b:40:cf:49:3c: d0:e2:b6:f9:d5:aa:5d:f5:4b:4c:6d:45:de:7c:e7:59:dc:c3: 46:2f:dc:c1:6e:8e:62:a4:fd:78:10:f6:1a:b5:e0:79:b9:26: 18:02:d5:0b:99:25:f4:08:ef:95:f6:c9:82:94:3b:04:bd:af: 56:06:3f:fc:3c:42:b3:7d:9f:2c:95:4d:66:51:00:2d:40:79: 71:44:76:b5:93:e4:8d:75:7e:10:57:0c:7a:72:95:52:8f:7e: 04:0c:a9:0c:cb:bc:01:bf:ef:fd:9d:61:aa:94:27:9c:db:4d: 88:60:dd:73:49:05:ad:98:db:ce:d5:88:ab:8e:37:fa:7a:90: 90:55:59:b4:50:41:b2:98:65:15:53:82:0a:89:5f:34:55:97: 5c:0e:15:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjQwNTE5MDcxMjU1WhcNMjQwNTI2MDcxMjU0WjAYMRYwFAYD VQQDEw02NjQ5YTY3Ny02Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tvT6i6OGiI6FTrUdwnIGsm3hDNNRvFfE85AqkP9ywTrxWQztmod273qPbmP taggBw1ninUwpjBG9trtO303liMtRcI6htUypD6M3SkdW1kGYKEhiOZusHdpQQVx awSaZmwh/YmntOpbLJM6+HYWEILx2Vi6Gz60OUPWiIK0h2g9a7N86wRCpLOujjgc 2+jfrmhqBa52C5tIsLmbeK0EwB9cJQWBd/2TJzehezKBkkm8Xn0DvqrGuWFxiwkS NVhtXqC1bmF2XsQ2dJm53CW1DcOLmdncyMTLRcWRlUXIQG/aG4l2jWVhYi5GPTIi wCPTPdbWjNTt/duODU/I2xhCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzkA7Cw 1yewdAVTqeKMtk3gQhjNMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ26p/NfmUIaY+GDFyig4q3ME+P2RPcDCQ3PNpj3jzhXDygPnPM/yU mf7hM/PbxqqZdujl5bW7slndNyTAkD+oSl2AtDkjB+jlvuDqUonDKsy4E46zCctf qkqkNzurFmbim6dgQ+HGC0DPSTzQ4rb51apd9UtMbUXefOdZ3MNGL9zBbo5ipP14 EPYateB5uSYYAtULmSX0CO+V9smClDsEva9WBj/8PEKzfZ8slU1mUQAtQHlxRHa1 k+SNdX4QVwx6cpVSj34EDKkMy7wBv+/9nWGqlCec202IYN1zSQWtmNvO1Yirjjf6 epCQVVm0UEGymGUVU4IKiV80VZdcDhWR -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org