$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: VxoRKee13wapz5sGQQJkwAVMZJYW927Y9F5IAPyb2KM= Subject key identifier: 7C:07:65:66:62:B1:27:48:C1:7F:9B:79:11:83:C2:FA:2A:62:C7:3E Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 038C Signing time: Fri 31 May 2024 03:13:51 +0000 Manifest this update: Fri 31 May 2024 03:13:51 +0000 Manifest next update: Fri 07 Jun 2024 03:13:51 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: SvDjJ9Z/Hl9Z1KtEUsChk4bPcGne4GCvp5CHVoQgSX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: May 31 03:13:51 2024 GMT Not After : Jun 7 03:13:51 2024 GMT Subject: CN=6659406f-e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:4b:6b:9b:c8:55:e2:d7:e4:a8:40:42:7e: cd:68:84:61:f7:dd:b4:82:8b:00:34:90:a7:dd:f0: 45:77:ca:a0:c3:09:3c:94:8d:78:96:df:5d:9f:af: fa:0e:34:00:7b:36:35:dd:1c:6b:ec:d2:ee:26:60: d9:8d:12:05:9b:32:a3:7c:6b:14:b6:05:3b:58:a1: 13:02:cf:3c:c2:64:af:be:14:00:d0:42:c5:ff:72: 01:80:5a:9f:12:61:c8:ce:b9:1e:4b:aa:33:f0:91: ba:71:c8:1d:ff:ef:22:bc:b3:0b:8a:67:bd:82:54: 87:20:bf:01:1c:12:d0:e0:cf:24:8f:46:a2:aa:eb: ca:a6:19:8f:bf:f4:e6:c6:1d:49:b5:83:90:9c:68: f4:b7:95:04:b4:3b:6a:c3:92:f9:2a:3c:5b:68:c6: a2:36:c7:b9:2f:fb:2a:02:d2:6b:12:36:26:38:21: e8:3b:41:66:3a:40:c5:d7:01:f3:5a:ef:7c:4b:46: 42:28:1f:1a:50:52:77:ae:8f:1b:dc:a5:d0:8c:54: be:5f:66:cd:6a:d2:99:5e:1c:48:10:87:06:0e:a9: 4f:bb:cc:07:fe:b6:94:4c:3d:49:9d:c2:6d:5c:a4: 2e:ea:34:b9:b8:7e:b3:d3:d7:0b:28:d5:c7:32:63: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:07:65:66:62:B1:27:48:C1:7F:9B:79:11:83:C2:FA:2A:62:C7:3E X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9c:45:a9:41:c2:f2:25:2e:91:66:3d:ae:4b:21:c8:bc:95: 79:1c:45:87:af:54:79:a4:60:1e:1c:00:dc:87:d0:7f:3b:4a: 7c:0f:13:0f:64:44:47:8f:8b:f3:f4:85:bf:04:b7:a5:3a:75: fa:cc:17:bd:32:9c:a8:f2:d1:5b:6b:83:01:66:64:de:ad:2d: 34:66:b2:cd:78:28:4a:d5:43:8d:03:fc:5e:c2:e0:8d:5c:4e: c1:2e:35:71:fd:79:7d:36:7e:22:02:d8:87:34:ac:fc:f1:44: 67:95:ff:6f:84:ab:ec:ee:f5:92:d3:83:d8:c7:71:9d:8b:3a: b6:f1:18:e2:f9:22:07:ba:f7:7e:31:59:0b:46:8b:cb:8b:85: d7:4e:66:f6:fc:59:19:45:0a:77:21:48:4a:7a:4d:36:ee:a8: 7e:53:12:3c:19:4d:04:85:1d:46:ce:3a:7e:45:85:e5:62:bd: f9:11:6d:4c:d1:1e:e5:b4:0e:44:83:0a:3e:7e:29:98:fe:72: 35:ae:bd:e1:a4:58:bd:d2:a0:c7:9d:e7:17:60:a7:3f:8c:6c: 65:1c:b3:09:47:15:c5:d1:ab:9f:40:e5:8a:c5:a1:40:8c:92: c2:64:9c:da:30:f4:7c:55:66:c8:52:0b:ae:c0:e3:aa:6d:07: 93:57:6f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjQwNTMxMDMxMzUxWhcNMjQwNjA3MDMxMzUxWjAYMRYwFAYD VQQDEw02NjU5NDA2Zi1lN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPhLa5vIVeLX5KhAQn7NaIRh9920gosANJCn3fBFd8qgwwk8lI14lt9dn6/6 DjQAezY13Rxr7NLuJmDZjRIFmzKjfGsUtgU7WKETAs88wmSvvhQA0ELF/3IBgFqf EmHIzrkeS6oz8JG6ccgd/+8ivLMLime9glSHIL8BHBLQ4M8kj0aiquvKphmPv/Tm xh1JtYOQnGj0t5UEtDtqw5L5KjxbaMaiNse5L/sqAtJrEjYmOCHoO0FmOkDF1wHz Wu98S0ZCKB8aUFJ3ro8b3KXQjFS+X2bNatKZXhxIEIcGDqlPu8wH/raUTD1JncJt XKQu6jS5uH6z09cLKNXHMmPD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwHZWZi sSdIwX+beRGDwvoqYsc+MB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrnEWpQcLyJS6RZj2uSyHIvJV5HEWHr1R5pGAeHADch9B/O0p8DxMP ZERHj4vz9IW/BLelOnX6zBe9Mpyo8tFba4MBZmTerS00ZrLNeChK1UONA/xewuCN XE7BLjVx/Xl9Nn4iAtiHNKz88URnlf9vhKvs7vWS04PYx3Gdizq28Rji+SIHuvd+ MVkLRovLi4XXTmb2/FkZRQp3IUhKek027qh+UxI8GU0EhR1Gzjp+RYXlYr35EW1M 0R7ltA5Egwo+fimY/nI1rr3hpFi90qDHnecXYKc/jGxlHLMJRxXF0aufQOWKxaFA jJLCZJzaMPR8VWbIUguuwOOqbQeTV2+D -----END CERTIFICATE-----Generated at Fri May 31 06:49:11 2024 by rpki-client on console-ams.rpki-client.org