$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: iRcrS43k1oFLAI4U0lzJrpgYwyFUP0tCsAXaoUSIJD8= Subject key identifier: 6D:B6:F1:17:3E:40:31:71:D2:CC:5F:8A:78:39:23:76:BD:A1:F5:EC Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 0179 Signing time: Sun 19 May 2024 04:47:09 +0000 Manifest this update: Sun 19 May 2024 04:47:08 +0000 Manifest next update: Sun 26 May 2024 04:47:08 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: qp3ifpz8A9V+X/GFJhHWH23WoAiWTCKooH+/A2jw3W0=) 2: D88D9D0C599811EDB1F4F56CC4F9AE02.roa (hash: JadrbHhqcoiM9wI5jUBL5vIEUHV3sNY5rLgJx9DRRKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: May 19 04:47:08 2024 GMT Not After : May 26 04:47:08 2024 GMT Subject: CN=6649844d-ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:6a:c6:48:27:6b:df:23:89:42:a8:2d:fc: 83:fe:a7:62:d5:ca:7f:47:ac:9f:f8:30:a1:a0:d8: 9c:26:76:10:37:fb:68:b4:4c:ff:ab:81:b1:ab:4e: 74:0b:89:b5:95:16:df:23:3c:a2:68:86:de:0d:ae: d2:7e:07:03:af:ef:66:02:c0:fa:b6:54:1c:40:41: 8b:2e:f4:6b:7c:73:41:a0:47:40:9a:d5:61:40:26: 9a:7d:e7:b0:ba:84:a3:c5:9a:03:09:1b:29:03:05: fc:ae:b6:0c:32:af:98:90:1d:f3:7a:93:43:19:20: b7:e6:be:aa:50:97:a5:0e:2c:68:cc:75:6c:8f:7c: d7:e7:ff:ae:48:6e:8f:a9:90:11:6b:ba:f9:49:c8: e3:cc:02:64:34:d1:90:9f:b4:cb:bf:f9:f1:da:a5: 4f:9b:af:b1:8a:5c:7f:84:d6:16:de:65:4f:1e:72: 08:62:c0:44:c2:1e:fb:b0:ab:1b:fe:51:fd:b8:3c: 17:d9:d0:8c:92:f3:68:0f:5d:ed:be:c2:a0:31:dd: 9d:b3:4a:a3:f3:7c:a1:28:33:de:b9:bb:b3:90:2e: 23:a6:2e:e0:58:03:8e:6b:e1:68:de:f8:00:cd:94: d3:28:58:3c:26:a9:c4:4a:99:c0:8f:0f:88:14:be: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:F1:17:3E:40:31:71:D2:CC:5F:8A:78:39:23:76:BD:A1:F5:EC X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:32:33:39:87:0a:4b:69:7e:fa:60:2d:77:3a:ca:f7:88:f0: 02:ee:65:1a:b0:9e:6f:1c:20:8e:00:00:4c:a7:2b:b8:c0:ea: 90:18:65:ef:43:4a:31:c5:c6:f6:b9:6a:e8:4c:6a:5d:f9:2d: 78:56:5c:0b:ce:0f:73:20:07:94:79:3a:43:e8:e7:ae:5a:03: e6:6d:08:77:56:a2:f9:59:b6:77:dc:20:b2:ca:93:c1:35:11: 81:86:85:29:30:59:fc:04:aa:df:28:ab:77:f5:2d:20:32:6d: 65:85:28:ff:be:a5:46:1f:99:42:87:2f:ba:bf:9f:38:8c:22: 09:96:26:4c:3d:2c:c6:11:e9:eb:af:68:2e:db:43:9e:0b:3a: ec:8f:ae:44:bd:9c:05:0a:95:70:07:60:c7:56:5f:75:7d:f3: c1:c6:10:08:dd:23:11:c7:25:5a:7b:10:f5:36:74:e2:26:c4: ad:e7:f2:c2:be:7e:d5:b7:ba:4c:40:a4:a6:4e:0b:67:26:f3: 35:50:48:90:de:2b:86:32:62:ba:f2:b8:4a:aa:ad:27:ac:bd: 35:f5:b2:ae:48:3a:12:c2:f6:07:97:fb:de:7b:64:ef:45:8d: 8f:f6:18:0a:c3:92:24:95:71:e4:45:5c:5a:32:cc:4d:ce:32: 47:18:52:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjQwNTE5MDQ0NzA4WhcNMjQwNTI2MDQ0NzA4WjAYMRYwFAYD VQQDEw02NjQ5ODQ0ZC1jYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3Nqxkgna98jiUKoLfyD/qdi1cp/R6yf+DChoNicJnYQN/totEz/q4Gxq050 C4m1lRbfIzyiaIbeDa7SfgcDr+9mAsD6tlQcQEGLLvRrfHNBoEdAmtVhQCaafeew uoSjxZoDCRspAwX8rrYMMq+YkB3zepNDGSC35r6qUJelDixozHVsj3zX5/+uSG6P qZARa7r5ScjjzAJkNNGQn7TLv/nx2qVPm6+xilx/hNYW3mVPHnIIYsBEwh77sKsb /lH9uDwX2dCMkvNoD13tvsKgMd2ds0qj83yhKDPeubuzkC4jpi7gWAOOa+Fo3vgA zZTTKFg8JqnESpnAjw+IFL7oPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG228Rc+ QDFx0sxfing5I3a9ofXsMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3MjM5hwpLaX76YC13Osr3iPAC7mUasJ5vHCCOAABMpyu4wOqQGGXv Q0oxxcb2uWroTGpd+S14VlwLzg9zIAeUeTpD6OeuWgPmbQh3VqL5WbZ33CCyypPB NRGBhoUpMFn8BKrfKKt39S0gMm1lhSj/vqVGH5lChy+6v584jCIJliZMPSzGEenr r2gu20OeCzrsj65EvZwFCpVwB2DHVl91ffPBxhAI3SMRxyVaexD1NnTiJsSt5/LC vn7Vt7pMQKSmTgtnJvM1UEiQ3iuGMmK68rhKqq0nrL019bKuSDoSwvYHl/vee2Tv RY2P9hgKw5IklXHkRVxaMsxNzjJHGFJg -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org