$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: 6ktRxA9fsilJ5eg9EaCsLyug3Qqd7LSHCJ0tdvs+7mM= Subject key identifier: 96:25:C6:03:C6:46:47:BB:BA:45:87:80:D9:D8:EC:6F:41:CE:88:F9 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0B82 Signing time: Sat 18 May 2024 19:19:46 +0000 Manifest this update: Sat 18 May 2024 19:19:45 +0000 Manifest next update: Sat 25 May 2024 19:19:45 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: kCVxvdjTYMNhkJysp3DZ/laUk916hqiRXu97kv76Zm4=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: VYEc6WkGWCnaHCD7rPOCi+MycvwwSAp/cnDEsK4EErk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: May 18 19:19:45 2024 GMT Not After : May 25 19:19:45 2024 GMT Subject: CN=6648ff52-8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:02:a9:e3:d9:83:ea:1d:c7:9d:13:b2:d6: 42:21:19:c4:ab:a1:8f:e7:ea:0b:26:96:54:ef:2a: b8:9f:54:ae:3a:0d:fa:87:9c:a9:5d:d9:7a:d6:12: 67:de:94:2a:d2:5c:5a:d5:1d:6c:03:02:3f:69:8a: dc:d7:e1:82:40:2d:86:1c:42:e2:79:10:4a:98:fd: 76:db:da:cc:e6:02:01:69:87:83:6c:15:15:49:e1: 71:b8:2b:9a:b7:34:7f:85:61:22:a3:02:22:6e:f2: 2c:b5:50:38:9c:84:87:de:a1:84:74:64:cc:6d:a8: 4f:85:9d:4c:83:ab:12:b4:b0:09:0e:e0:0e:a7:b7: 17:5c:b7:21:44:1c:7a:05:bd:ec:ef:09:d8:5c:26: aa:55:ea:fa:42:92:4c:f6:c2:f6:de:98:51:2b:30: 83:b6:1a:14:08:47:9c:f8:a7:30:6d:66:69:fb:17: d2:8d:aa:f4:24:8e:e1:8e:7e:4c:34:22:bf:b3:fd: 13:14:05:df:d5:04:34:e1:88:7c:0c:02:40:00:5a: 3d:72:31:b9:30:9f:3a:70:81:f2:cd:c3:45:ca:a9: 4b:d8:7a:3f:16:ac:9f:e0:d5:9c:a6:85:9d:11:67: 9a:43:12:c5:41:8f:76:6b:04:e0:54:36:ea:39:95: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:C6:03:C6:46:47:BB:BA:45:87:80:D9:D8:EC:6F:41:CE:88:F9 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:82:e4:a4:d2:4e:81:d6:23:c4:4d:7d:04:24:a5:9d:20:2f: ef:a8:8c:2a:ca:45:d4:80:d2:2d:f6:58:7c:da:39:91:2f:1d: eb:5c:4f:b2:06:39:91:ac:ed:eb:e4:c8:43:7d:8e:cd:86:a4: cd:a0:7c:cd:0b:cc:b2:eb:60:6d:cf:33:93:14:83:fe:fb:86: 39:58:59:2e:d4:87:6a:5b:57:12:76:bc:87:69:68:68:a2:66: 72:a5:44:4c:a9:74:67:4e:3c:7c:29:25:ac:21:21:ac:d9:a2: cd:b2:be:f5:56:77:1c:2a:e4:ef:c6:52:03:e6:85:33:19:fb: 11:b7:2d:86:ed:62:9e:be:6b:a4:99:ad:d5:e1:06:1b:fe:38: 4b:97:75:35:f1:01:ae:72:0b:82:d6:fd:95:06:4a:d7:ea:39: fb:2b:6f:11:78:c5:0b:68:8d:5f:98:78:5b:70:be:3d:43:c6: f0:81:60:3f:37:d8:4f:c5:32:b0:4e:70:bf:c8:62:a8:a8:87: 83:c2:81:a8:68:f2:60:04:23:e7:e0:47:2d:7e:a0:6c:ea:2a: 8d:79:29:b3:9e:92:c1:e1:35:b7:96:78:b8:0e:ce:cd:0c:df: f1:79:ae:d6:e6:42:7e:36:58:5f:57:6b:da:96:08:df:a8:5a: f0:3f:03:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjQwNTE4MTkxOTQ1WhcNMjQwNTI1MTkxOTQ1WjAYMRYwFAYD VQQDEw02NjQ4ZmY1Mi04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtocCqePZg+odx50TstZCIRnEq6GP5+oLJpZU7yq4n1SuOg36h5ypXdl61hJn 3pQq0lxa1R1sAwI/aYrc1+GCQC2GHELieRBKmP1229rM5gIBaYeDbBUVSeFxuCua tzR/hWEiowIibvIstVA4nISH3qGEdGTMbahPhZ1Mg6sStLAJDuAOp7cXXLchRBx6 Bb3s7wnYXCaqVer6QpJM9sL23phRKzCDthoUCEec+KcwbWZp+xfSjar0JI7hjn5M NCK/s/0TFAXf1QQ04Yh8DAJAAFo9cjG5MJ86cIHyzcNFyqlL2Ho/Fqyf4NWcpoWd EWeaQxLFQY92awTgVDbqOZX2AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYlxgPG Rke7ukWHgNnY7G9Bzoj5MB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACguSk0k6B1iPETX0EJKWdIC/vqIwqykXUgNIt9lh82jmRLx3rXE+y BjmRrO3r5MhDfY7NhqTNoHzNC8yy62BtzzOTFIP++4Y5WFku1IdqW1cSdryHaWho omZypURMqXRnTjx8KSWsISGs2aLNsr71VnccKuTvxlID5oUzGfsRty2G7WKevmuk ma3V4QYb/jhLl3U18QGucguC1v2VBkrX6jn7K28ReMULaI1fmHhbcL49Q8bwgWA/ N9hPxTKwTnC/yGKoqIeDwoGoaPJgBCPn4EctfqBs6iqNeSmznpLB4TW3lni4Ds7N DN/xea7W5kJ+NlhfV2valgjfqFrwPwOh -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org