$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json) Hash identifier: zYigg8tg7KoR/XXMw440EJtFvpbaXAm0K+zk2Plmipw= Subject key identifier: 2F:2D:35:00:6B:30:22:D4:D3:65:6C:12:EC:B9:69:FB:F3:54:71:98 Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft Manifest number: 08FA Signing time: Sat 18 May 2024 21:16:17 +0000 Manifest this update: Sat 18 May 2024 21:16:16 +0000 Manifest next update: Sat 25 May 2024 21:16:16 +0000 Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: vBv1zIGXbpRyZEyCtMFJgeboYWKV0kDKDjEQaoa7Sic=) 2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: dsLJ1vLlPmg+g+Z48a+MoiypqQ8LpOeE/jOkTUsWW1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Validity Not Before: May 18 21:16:16 2024 GMT Not After : May 25 21:16:16 2024 GMT Subject: CN=66491aa0-14ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:1e:34:52:6e:f4:cd:b7:8e:75:bc:16:1f: f3:5b:26:64:0d:68:42:b4:a5:df:ca:c6:45:d8:bd: 9b:05:71:71:3e:cd:87:fc:42:04:11:15:84:8b:5b: 07:b4:a8:34:54:76:c4:af:22:0e:f0:65:22:28:88: 68:e3:5c:0f:2c:87:7a:6a:9e:3d:bf:2a:3a:ed:40: 2c:d4:47:86:71:cb:99:5f:e2:da:51:48:d8:b6:01: 99:44:a4:96:0f:ed:5d:9a:69:c9:82:07:06:61:7e: cc:99:a6:a8:d5:0f:93:65:06:b3:61:de:d7:37:bc: a8:42:db:6f:82:bd:9e:21:c1:3f:18:eb:92:03:d2: 5d:14:b5:9d:b4:60:b7:f2:cd:f9:18:ee:4e:b0:09: 18:2e:4b:c5:84:47:e3:5f:b9:3b:65:3e:0b:8f:16: b9:7b:ed:c8:3b:33:52:f8:0b:33:6c:45:ab:1c:fc: 8e:b4:92:81:46:4a:0b:25:40:98:8d:f9:80:a3:20: 32:0b:3f:37:85:d6:8e:ff:f7:ae:bd:40:82:ee:46: 6a:71:af:34:a1:31:79:ae:a6:2b:ec:c2:e2:01:bd: 59:e5:bf:a2:c2:39:9f:ca:e9:de:00:bd:9f:d0:32: d7:77:41:0c:d3:d1:24:3a:b0:aa:a2:c2:44:89:6c: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2D:35:00:6B:30:22:D4:D3:65:6C:12:EC:B9:69:FB:F3:54:71:98 X509v3 Authority Key Identifier: keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:20:c4:6d:39:75:63:35:2d:41:30:58:ff:32:56:ce:21:dc: 6b:2d:66:88:a2:aa:4b:c5:11:c3:2f:1d:2c:19:2e:5d:cc:19: ba:fa:29:1f:d8:84:be:4c:5e:b3:3e:a6:63:dc:18:f2:d7:9c: 71:5d:ed:8a:a8:16:7d:4f:9d:00:05:ea:ba:72:e0:67:ef:91: 92:a6:73:43:d0:9a:11:80:bb:38:37:68:bd:2f:4e:03:4a:eb: 9c:1b:8b:35:11:63:07:ae:a4:be:4d:00:a0:57:85:ef:36:fa: 15:6b:0e:9d:c7:a9:82:37:e2:d6:e1:47:e1:ca:36:f7:27:6c: 93:79:b6:39:5f:47:e1:c5:fd:8d:a4:a5:91:09:c1:71:f7:81: 81:b0:04:16:17:a2:80:35:fa:38:dc:1e:b9:31:98:a9:cb:94: 95:81:ee:4d:f1:2f:b7:03:cc:b4:ea:de:a8:5d:f1:3a:68:c4: 54:7b:df:43:92:4a:79:6e:c9:75:83:85:e5:99:5f:8a:48:9b: fd:eb:c8:f5:50:3e:da:76:90:fe:37:9e:9a:c9:02:54:98:6a: b2:41:a3:30:4c:bd:f6:b2:b5:db:77:29:a8:bb:a2:d5:08:4e: fe:f6:de:f8:88:f6:f3:75:48:c0:77:9f:60:43:74:50:fa:97: e7:4f:45:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD RjE4QUExRTIwHhcNMjQwNTE4MjExNjE2WhcNMjQwNTI1MjExNjE2WjAYMRYwFAYD VQQDEw02NjQ5MWFhMC0xNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dseNFJu9M23jnW8Fh/zWyZkDWhCtKXfysZF2L2bBXFxPs2H/EIEERWEi1sH tKg0VHbEryIO8GUiKIho41wPLId6ap49vyo67UAs1EeGccuZX+LaUUjYtgGZRKSW D+1dmmnJggcGYX7Mmaao1Q+TZQazYd7XN7yoQttvgr2eIcE/GOuSA9JdFLWdtGC3 8s35GO5OsAkYLkvFhEfjX7k7ZT4Ljxa5e+3IOzNS+AszbEWrHPyOtJKBRkoLJUCY jfmAoyAyCz83hdaO//euvUCC7kZqca80oTF5rqYr7MLiAb1Z5b+iwjmfyuneAL2f 0DLXd0EM09EkOrCqosJEiWyCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8tNQBr MCLU02VsEuy5afvzVHGYMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz aUZKeElkaUJYb3ZQR0tvZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkIMRtOXVjNS1BMFj/MlbOIdxrLWaIoqpLxRHDLx0sGS5dzBm6+ikf 2IS+TF6zPqZj3Bjy15xxXe2KqBZ9T50ABeq6cuBn75GSpnND0JoRgLs4N2i9L04D SuucG4s1EWMHrqS+TQCgV4XvNvoVaw6dx6mCN+LW4Ufhyjb3J2yTebY5X0fhxf2N pKWRCcFx94GBsAQWF6KANfo43B65MZipy5SVge5N8S+3A8y06t6oXfE6aMRUe99D kkp5bsl1g4XlmV+KSJv968j1UD7adpD+N56ayQJUmGqyQaMwTL32srXbdymou6LV CE7+9t74iPbzdUjAd59gQ3RQ+pfnT0V4 -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org