$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: DcbobRhau7pGvMyXa0NtLA/yhCDa4tM3fdW25TSiqjU= Subject key identifier: 14:CC:2C:FF:23:BA:64:F2:6F:E8:4E:FE:3A:6C:F3:8E:D9:C7:91:7A Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 027B Signing time: Sun 19 May 2024 03:43:15 +0000 Manifest this update: Sun 19 May 2024 03:43:15 +0000 Manifest next update: Sun 26 May 2024 03:43:15 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: NK5TDPGQopaNKscGoqraHBu+YGH1ODHcHQgCWKcJl3s=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: dX8Ezcwt9ZcNN3YaDPGXZwP7UaA2rS4V4pcpwDc6yu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: May 19 03:43:15 2024 GMT Not After : May 26 03:43:15 2024 GMT Subject: CN=66497553-3d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:ca:82:77:b7:4a:94:79:43:fa:1e:9e:a4: 37:36:2d:44:cb:93:ad:00:f4:94:b0:01:01:b7:a8: 04:a3:ff:74:30:63:5e:69:61:59:f6:2a:c3:06:21: ad:96:65:53:44:35:aa:9e:c8:8a:cb:b0:fe:22:8b: 8c:d1:37:6b:00:e9:aa:e7:7d:77:c0:38:4a:a8:2e: b0:de:45:2b:38:e9:42:03:72:6d:28:62:6c:05:98: 50:29:f1:46:03:6e:48:1c:90:f4:8b:0c:ce:7c:8c: 61:cd:77:86:73:aa:48:63:a5:56:45:1c:fb:28:3a: 47:c9:d4:52:ea:6a:26:49:bc:cf:a5:89:55:15:f7: 1b:97:5d:52:00:b2:45:96:2e:91:10:36:54:84:2f: ff:d0:4e:c2:16:26:16:26:a6:b1:89:61:9a:39:3c: c3:f8:41:26:d7:7b:f9:06:39:a8:0f:b1:e2:73:8d: 7c:98:62:ca:64:84:11:ff:3a:6f:72:c5:54:3a:ec: 06:9b:d7:a2:bc:e4:7b:92:b1:6f:fa:17:5a:93:f7: e9:cf:24:60:51:a8:fd:f6:f8:7c:5f:17:a6:9c:7e: 56:57:d0:77:08:18:16:2c:54:f2:82:bc:fc:6a:69: 7c:0c:7e:2c:00:2b:92:d6:e5:86:55:43:2d:98:22: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CC:2C:FF:23:BA:64:F2:6F:E8:4E:FE:3A:6C:F3:8E:D9:C7:91:7A X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2e:68:ff:15:5d:82:bb:d0:53:4c:b3:ed:95:c0:4c:44:f8: 2f:b9:6e:5e:79:05:23:79:5e:00:fe:92:f8:2b:c9:5f:47:a2: 01:46:08:d4:91:c5:a9:12:42:1a:9a:7a:70:ae:41:e0:12:32: 3c:d3:ec:b4:5e:71:aa:51:fe:83:e8:0a:29:a5:36:86:2e:79: 53:53:5a:c7:02:6e:cf:65:ec:4b:36:93:82:3b:e1:3e:54:64: ce:3a:c6:4b:f5:00:b8:99:6e:15:d3:31:d6:4a:8b:3d:70:28: 21:d1:4b:30:4e:42:0b:81:37:fc:fa:26:b4:32:c2:6a:df:ad: 28:7d:c5:df:f0:42:26:b3:f2:cb:0a:2e:d0:c8:54:6e:d2:30: 4d:05:72:b1:ad:d2:38:ce:10:5a:58:b9:ec:23:2c:e6:94:aa: a9:b3:d9:89:aa:17:a6:e1:ab:d5:49:cf:5d:19:d4:65:68:7e: 81:58:56:12:2a:2f:94:df:14:f2:9f:55:c8:73:fd:fd:9f:64: e8:a0:48:38:cf:12:9b:95:e1:6a:2d:76:0b:80:ed:2a:17:cd: b6:58:37:98:49:b0:e7:59:62:eb:41:c5:32:ed:d3:e3:d5:63: ec:b4:73:5c:88:fd:07:d4:b9:bd:64:3c:6e:5b:49:26:c0:94: 40:e5:d3:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjQwNTE5MDM0MzE1WhcNMjQwNTI2MDM0MzE1WjAYMRYwFAYD VQQDEw02NjQ5NzU1My0zZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+fKgne3SpR5Q/oenqQ3Ni1Ey5OtAPSUsAEBt6gEo/90MGNeaWFZ9irDBiGt lmVTRDWqnsiKy7D+IouM0TdrAOmq5313wDhKqC6w3kUrOOlCA3JtKGJsBZhQKfFG A25IHJD0iwzOfIxhzXeGc6pIY6VWRRz7KDpHydRS6momSbzPpYlVFfcbl11SALJF li6REDZUhC//0E7CFiYWJqaxiWGaOTzD+EEm13v5BjmoD7Hic418mGLKZIQR/zpv csVUOuwGm9eivOR7krFv+hdak/fpzyRgUaj99vh8XxemnH5WV9B3CBgWLFTygrz8 aml8DH4sACuS1uWGVUMtmCJKGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTMLP8j umTyb+hO/jps847Zx5F6MB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVLmj/FV2Cu9BTTLPtlcBMRPgvuW5eeQUjeV4A/pL4K8lfR6IBRgjU kcWpEkIamnpwrkHgEjI80+y0XnGqUf6D6AoppTaGLnlTU1rHAm7PZexLNpOCO+E+ VGTOOsZL9QC4mW4V0zHWSos9cCgh0UswTkILgTf8+ia0MsJq360ofcXf8EIms/LL Ci7QyFRu0jBNBXKxrdI4zhBaWLnsIyzmlKqps9mJqhem4avVSc9dGdRlaH6BWFYS Ki+U3xTyn1XIc/39n2TooEg4zxKbleFqLXYLgO0qF822WDeYSbDnWWLrQcUy7dPj 1WPstHNciP0H1Lm9ZDxuW0kmwJRA5dMG -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org