$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json) Hash identifier: POSqFccO+9vEttMD0ffNADW5UaHGgO1J9bOaULh3JjI= Subject key identifier: 54:4E:FE:69:C3:08:8E:A8:FD:34:D9:EA:44:CD:3C:A2:C1:96:EF:91 Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft Manifest number: 0105 Signing time: Sun 19 May 2024 05:32:34 +0000 Manifest this update: Sun 19 May 2024 05:32:33 +0000 Manifest next update: Sun 26 May 2024 05:32:33 +0000 Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: C0K8oTLMZS7e3pw41Vh9W2nTiofqXNEmKfnODWoaKe4=) 2: 880E256C866711EDA07D971FC4F9AE02.roa (hash: gbOQvuLGEWP4FgHIMhBmj7lvVX1mNbqTWnYOmIYCae0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Validity Not Before: May 19 05:32:33 2024 GMT Not After : May 26 05:32:33 2024 GMT Subject: CN=66498ef2-0f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:69:81:03:5a:0c:22:bd:29:19:b8:58:9d: 46:a2:6c:61:11:0b:6e:bf:eb:17:0a:07:e9:fd:22: 3e:41:3e:eb:cd:82:60:a3:d6:51:e9:9f:99:15:16: 1d:77:63:f5:69:7d:8c:50:e0:0e:9b:cb:64:80:8a: a3:67:d8:75:a3:8c:d7:68:18:35:6a:44:30:c5:6c: 91:06:3e:77:03:e2:d9:ab:5d:a5:a3:59:8b:6e:d2: 20:67:9e:8a:8e:74:13:aa:d0:23:16:d2:f2:2d:8b: 15:07:c3:6b:a0:92:9e:5f:a5:0e:fc:0f:87:50:a4: b1:a2:4e:5d:9c:21:50:71:de:78:16:06:68:1a:7f: 80:e9:80:21:53:18:dd:9b:1f:54:63:0f:7f:18:ec: 9f:12:77:6c:dc:32:ad:97:20:7a:da:f6:df:43:0e: c5:79:14:6d:e7:04:a6:63:a1:6e:bf:dc:3d:55:2f: 84:c6:1e:f8:4b:17:e8:67:5d:2e:05:c8:fd:65:84: 46:db:6e:f5:c6:42:68:6c:ef:80:ba:04:cb:77:ec: d0:e5:8a:ea:33:b0:c6:4c:00:fc:e5:f7:2a:15:2b: d2:f2:ca:26:4d:33:d7:76:ee:44:37:09:ee:eb:2a: e6:73:74:7b:2c:dd:e0:1d:e5:57:2a:4a:45:72:44: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4E:FE:69:C3:08:8E:A8:FD:34:D9:EA:44:CD:3C:A2:C1:96:EF:91 X509v3 Authority Key Identifier: keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:74:48:a8:0d:0b:03:43:bf:92:6e:03:d7:97:70:fa:68:f9: e7:31:ef:5e:da:20:31:37:66:f4:3c:b0:a9:4b:21:36:37:f4: 0a:01:ad:7b:a7:c4:51:4b:47:36:48:4a:6c:5b:76:37:98:05: d8:c1:73:c7:59:2b:b6:8c:b4:92:06:77:20:d2:b8:7a:47:8e: cf:22:7b:d1:f7:44:2e:f3:cb:60:74:22:0b:bc:c1:3e:41:63: 13:74:60:5a:0c:fb:6c:f9:7f:d4:f6:3b:bf:e6:8c:ff:56:3b: b1:01:1f:07:45:64:c1:97:c0:8a:f0:3a:c5:a6:b2:31:fc:9d: f8:48:97:f8:d7:86:fb:8b:96:21:08:89:96:76:89:e7:92:14: 2b:f2:55:89:37:80:e0:3e:99:b0:6d:a9:a8:ad:ab:8c:00:5a: 99:af:cd:d9:dd:55:c4:17:c2:8a:f2:54:cc:51:78:57:cc:6a: 47:88:8a:ed:7a:f5:8b:b5:4f:21:7c:6c:4d:25:3c:ff:af:f0: 1e:fd:48:fd:c5:a5:4f:c2:aa:a2:d6:1a:ed:bc:91:6a:bb:9e: 22:58:07:9e:93:e2:8f:d8:75:16:61:62:26:e5:0e:56:68:4b: 20:b2:8f:82:7e:4c:d3:b9:a0:3b:65:09:74:0d:67:a3:16:1d: 66:cf:b7:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MkExMTAvBgNVBAUTKEYxMjVBMEU2QjhFQkRDMTM2QUI1MzA3RDQ5MTQ3MTBF OTAwNjNCQzMwHhcNMjQwNTE5MDUzMjMzWhcNMjQwNTI2MDUzMjMzWjAYMRYwFAYD VQQDEw02NjQ5OGVmMi0wZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I5pgQNaDCK9KRm4WJ1GomxhEQtuv+sXCgfp/SI+QT7rzYJgo9ZR6Z+ZFRYd d2P1aX2MUOAOm8tkgIqjZ9h1o4zXaBg1akQwxWyRBj53A+LZq12lo1mLbtIgZ56K jnQTqtAjFtLyLYsVB8NroJKeX6UO/A+HUKSxok5dnCFQcd54FgZoGn+A6YAhUxjd mx9UYw9/GOyfEnds3DKtlyB62vbfQw7FeRRt5wSmY6Fuv9w9VS+Exh74SxfoZ10u Bcj9ZYRG2271xkJobO+AugTLd+zQ5YrqM7DGTAD85fcqFSvS8somTTPXdu5ENwnu 6yrmc3R7LN3gHeVXKkpFckRWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRO/mnD CI6o/TTZ6kTNPKLBlu+RMB8GA1UdIwQYMBaAFPEloOa469wTarUwfUkUcQ6QBjvD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkyQS84MUEzMDA3MDg2 NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNCTnF0VEI5U1JSeERwQUdP OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTV2c1cmpyM0JOcXRUQjlTUlJ4RHBBR084TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkyQS84MUEzMDA3MDg2NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNC TnF0VEI5U1JSeERwQUdPOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrdEioDQsDQ7+SbgPXl3D6aPnnMe9e2iAxN2b0PLCpSyE2N/QKAa17 p8RRS0c2SEpsW3Y3mAXYwXPHWSu2jLSSBncg0rh6R47PInvR90Qu88tgdCILvME+ QWMTdGBaDPts+X/U9ju/5oz/VjuxAR8HRWTBl8CK8DrFprIx/J34SJf414b7i5Yh CImWdonnkhQr8lWJN4DgPpmwbamorauMAFqZr83Z3VXEF8KK8lTMUXhXzGpHiIrt evWLtU8hfGxNJTz/r/Ae/Uj9xaVPwqqi1hrtvJFqu54iWAeek+KP2HUWYWIm5Q5W aEsgso+CfkzTuaA7ZQl0DWejFh1mz7eJ -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org