$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: FnSwShX+HOCII77HxBZSBuX2VMCKAW7JwBKn+E17IeE= Subject key identifier: 8F:A7:30:F5:25:77:6C:4E:FF:D1:FE:9B:0E:23:86:E8:73:41:42:20 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 253A Signing time: Fri 31 May 2024 16:11:26 +0000 Manifest this update: Fri 31 May 2024 16:11:25 +0000 Manifest next update: Fri 07 Jun 2024 16:11:25 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: Plq7RdIw1RDXDOnimQ32uACpk5daz1lWq5QqosOTLH0=) 2: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: B3hRYF0bO26k9gxz4EV9GoirQCVy5mfb+aHOF6vK71Q=) 3: 5AC80410239811ED9B68AC57C4F9AE02.roa (hash: RXwe0BQki/AVlstsZqOsFp+Gsdfp+aVHzSNAAW4JxLw=) 4: AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa (hash: xZnRQuGmH+tPK553xhJr/YwZYByUzuaoNBPGfXz/s1A=) 5: 79BBF6CEBFBE11EEBAF6BD16C4F9AE02.roa (hash: UywmbUkTdncFkpRemFveireVQn6JCFcZG3+KTDoL+z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9619 (0x2593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: May 31 16:11:25 2024 GMT Not After : Jun 7 16:11:25 2024 GMT Subject: CN=6659f6ad-1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8b:db:15:33:91:f5:83:20:a3:5c:cc:72:00: e1:87:94:ab:9b:05:b9:fd:b6:29:fc:a7:c9:4b:95: 48:8f:a0:81:13:ac:34:af:51:8b:21:24:07:18:65: db:35:e1:8e:38:10:28:5e:a3:93:bb:ce:fd:af:6c: e7:c9:4c:cb:d9:dc:af:b8:d9:1f:05:16:10:f4:7a: b5:e8:b4:10:f9:40:87:62:d3:1a:2b:69:30:2f:55: c8:f5:ee:e4:8a:1d:a5:0f:b9:75:c6:95:cc:38:0b: ea:ca:57:7b:32:a9:ce:a3:02:41:31:a7:4e:10:b9: ab:d9:f7:4f:02:3f:d7:b6:e4:3b:19:c2:cf:b6:53: b4:f7:b5:41:e3:4d:c0:94:fe:64:30:69:db:84:f9: 6d:ee:41:9d:2a:8a:76:ea:59:c3:7e:27:da:e1:a6: 79:ea:e0:32:5b:bb:d1:22:fc:83:ea:90:ad:19:8b: 75:13:e8:b0:83:ac:40:f4:22:09:a6:2f:5e:74:74: 19:d6:11:44:92:74:1f:21:bd:9c:7a:0a:95:92:f5: d2:cd:b7:96:9a:3a:f4:7f:23:aa:c9:cd:2a:51:dc: 20:65:dd:49:0a:11:24:d2:7d:59:00:e5:cb:14:a0: c4:32:9f:e3:2a:25:10:cb:0e:d9:f5:88:f6:82:89: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:30:F5:25:77:6C:4E:FF:D1:FE:9B:0E:23:86:E8:73:41:42:20 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d5:3a:32:3f:03:7d:1d:d7:de:07:14:7b:00:32:c2:a4:6b: 2f:f6:bc:02:ea:22:90:56:27:c7:29:a8:4b:0d:ba:a2:17:c1: 63:b8:08:b2:fc:02:7e:12:82:de:1a:77:ac:30:1f:28:dd:99: 00:f8:36:1c:5a:87:41:95:3a:b8:e9:9b:76:81:0e:cb:98:1c: c8:a4:85:c4:d9:a7:bc:b8:a0:54:48:50:8a:d0:b6:06:09:66: b7:98:21:58:ab:97:2e:16:ec:8c:c7:b2:f3:d3:c3:28:f9:10: b5:ad:37:e4:e0:ba:ab:bf:25:80:1e:29:87:0c:3d:dc:10:05: 5b:38:7b:4b:fd:42:05:98:f2:95:7e:cc:e6:42:dd:41:e0:f3: 15:cb:ff:66:4f:be:71:c6:03:ad:0a:11:c5:d9:f5:10:cd:81: 55:56:74:a9:66:58:25:e9:94:14:34:75:3f:56:4f:74:ce:9e: 11:fc:ec:43:22:3c:04:71:5b:0e:54:38:9d:3a:c3:7e:b7:68: a3:0b:bf:8e:22:1d:5b:84:d1:ce:40:04:c7:c7:dc:6c:e6:80: 3a:62:0e:1a:86:d6:1d:be:2b:cc:b5:2b:66:78:b2:52:03:b8: bd:22:67:00:49:9d:c4:bf:31:82:7e:5a:7b:82:43:5a:3c:1f: ef:97:1a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQwNTMxMTYxMTI1WhcNMjQwNjA3MTYxMTI1WjAYMRYwFAYD VQQDEw02NjU5ZjZhZC0xMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+4vbFTOR9YMgo1zMcgDhh5SrmwW5/bYp/KfJS5VIj6CBE6w0r1GLISQHGGXb NeGOOBAoXqOTu879r2znyUzL2dyvuNkfBRYQ9Hq16LQQ+UCHYtMaK2kwL1XI9e7k ih2lD7l1xpXMOAvqyld7MqnOowJBMadOELmr2fdPAj/XtuQ7GcLPtlO097VB403A lP5kMGnbhPlt7kGdKop26lnDfifa4aZ56uAyW7vRIvyD6pCtGYt1E+iwg6xA9CIJ pi9edHQZ1hFEknQfIb2cegqVkvXSzbeWmjr0fyOqyc0qUdwgZd1JChEk0n1ZAOXL FKDEMp/jKiUQyw7Z9Yj2gokk7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+nMPUl d2xO/9H+mw4jhuhzQUIgMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC21ToyPwN9HdfeBxR7ADLCpGsv9rwC6iKQVifHKahLDbqiF8FjuAiy /AJ+EoLeGnesMB8o3ZkA+DYcWodBlTq46Zt2gQ7LmBzIpIXE2ae8uKBUSFCK0LYG CWa3mCFYq5cuFuyMx7Lz08Mo+RC1rTfk4LqrvyWAHimHDD3cEAVbOHtL/UIFmPKV fszmQt1B4PMVy/9mT75xxgOtChHF2fUQzYFVVnSpZlgl6ZQUNHU/Vk90zp4R/OxD IjwEcVsOVDidOsN+t2ijC7+OIh1bhNHOQATHx9xs5oA6Yg4ahtYdvivMtStmeLJS A7i9ImcASZ3EvzGCflp7gkNaPB/vlxr4 -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org