$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: znVEETIxAl+BK8IU/ypI7sam76u6e9/ZwuRnJ+oS2sA= Subject key identifier: 00:75:CD:8B:6B:B0:AC:31:CD:6F:07:5A:68:79:D5:58:6C:33:8F:78 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 08BD Signing time: Sat 18 May 2024 21:25:56 +0000 Manifest this update: Sat 18 May 2024 21:25:56 +0000 Manifest next update: Sat 25 May 2024 21:25:56 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: ASVGM580PUGITd1v7c7pv2hcc38UsH+QZsGciFqW0cM=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: ZgPlDCggqIEOo5kz9JXBnaD0lhSk8TP2PYN81JudCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: May 18 21:25:56 2024 GMT Not After : May 25 21:25:56 2024 GMT Subject: CN=66491ce4-b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:c9:18:c7:cf:67:f6:9c:44:9d:6f:20:cf: a0:4c:11:af:55:5e:e3:4a:6b:a4:e0:67:9c:e8:af: d6:87:cf:35:76:3e:14:f7:90:e8:3a:0b:ea:82:54: 08:41:81:9b:d4:e9:2c:31:92:f4:c2:24:1d:29:89: 25:39:78:a4:1f:4a:83:5a:e4:1f:cc:26:aa:14:db: 3d:04:d0:2e:51:b8:5b:24:4c:9e:5b:0d:05:73:3f: db:4b:82:96:07:c9:6f:ac:4c:01:30:bc:94:24:f8: 1c:f4:e9:e5:19:ec:94:18:14:be:fc:e1:2b:75:3a: d5:11:07:77:c8:89:af:29:fd:0e:65:4a:be:50:8f: e3:01:69:b8:94:0d:c7:36:60:25:fb:5c:f0:28:b5: 2e:dc:97:9a:f0:cd:88:2b:4c:df:b1:cc:cd:e9:cc: c3:9e:b0:00:3b:cc:c3:d2:38:c0:fc:83:ef:44:a9: 14:98:6f:85:47:39:6f:3d:22:b9:fe:f4:04:8e:a7: 47:40:77:d0:2f:e7:20:c9:5b:5d:5e:79:0d:64:3a: aa:2e:4e:db:92:31:84:d9:fd:16:1c:84:89:ff:6c: b5:e5:59:d1:64:5e:57:9f:a2:33:b9:33:42:37:72: 9d:4e:fd:18:1a:8b:40:43:de:a2:bc:f3:90:e4:82: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:75:CD:8B:6B:B0:AC:31:CD:6F:07:5A:68:79:D5:58:6C:33:8F:78 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3b:a2:bf:d5:e0:e7:43:0a:ce:f8:12:77:c9:76:82:b9:ec: 0a:ab:f8:ee:0f:d2:a0:69:f8:af:20:a6:b9:dc:51:e8:48:94: ab:c3:3d:16:74:d7:64:a7:f3:a7:d3:67:f3:94:3a:f9:58:15: 3e:4d:37:99:9b:44:d2:72:67:05:b8:1a:f1:df:9c:68:af:fe: 07:c7:de:58:3b:f2:6f:f3:b1:a9:06:a2:4a:5a:c9:c7:7c:70: 34:72:98:53:ce:14:96:fe:de:13:3a:47:c8:43:66:c5:26:4a: 25:75:2c:f6:b8:b9:ec:c1:37:32:a9:71:8d:a9:9a:d3:3a:17: 5f:43:5f:aa:ed:9a:ff:f1:8b:05:4d:12:50:67:d2:52:c9:b9: 7a:e2:c1:ad:d4:61:7a:86:92:d4:36:69:81:a2:2f:d2:67:a6: f1:03:7c:6b:7f:10:b2:f1:f2:b6:03:84:ac:b7:f9:b0:f8:f9: 34:4c:e0:7a:dd:e9:c1:51:a2:cb:55:29:99:9e:1d:85:5b:8e: 3a:9c:d2:f8:b8:60:df:39:63:60:bb:10:33:e1:a4:7f:f2:02: 0a:f1:cd:72:a5:a4:fc:bf:12:72:8e:cc:1d:09:09:e6:23:34: 6d:6e:80:82:52:97:c1:b7:0b:a5:b7:f3:fc:bf:23:18:30:4d: 95:ec:d6:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjQwNTE4MjEyNTU2WhcNMjQwNTI1MjEyNTU2WjAYMRYwFAYD VQQDEw02NjQ5MWNlNC1iNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRPJGMfPZ/acRJ1vIM+gTBGvVV7jSmuk4Gec6K/Wh881dj4U95DoOgvqglQI QYGb1OksMZL0wiQdKYklOXikH0qDWuQfzCaqFNs9BNAuUbhbJEyeWw0Fcz/bS4KW B8lvrEwBMLyUJPgc9OnlGeyUGBS+/OErdTrVEQd3yImvKf0OZUq+UI/jAWm4lA3H NmAl+1zwKLUu3Jea8M2IK0zfsczN6czDnrAAO8zD0jjA/IPvRKkUmG+FRzlvPSK5 /vQEjqdHQHfQL+cgyVtdXnkNZDqqLk7bkjGE2f0WHISJ/2y15VnRZF5Xn6IzuTNC N3KdTv0YGotAQ96ivPOQ5IL1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB1zYtr sKwxzW8HWmh51VhsM494MB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnO6K/1eDnQwrO+BJ3yXaCuewKq/juD9KgafivIKa53FHoSJSrwz0W dNdkp/On02fzlDr5WBU+TTeZm0TScmcFuBrx35xor/4Hx95YO/Jv87GpBqJKWsnH fHA0cphTzhSW/t4TOkfIQ2bFJkoldSz2uLnswTcyqXGNqZrTOhdfQ1+q7Zr/8YsF TRJQZ9JSybl64sGt1GF6hpLUNmmBoi/SZ6bxA3xrfxCy8fK2A4Sst/mw+Pk0TOB6 3enBUaLLVSmZnh2FW446nNL4uGDfOWNguxAz4aR/8gIK8c1ypaT8vxJyjswdCQnm IzRtboCCUpfBtwult/P8vyMYME2V7NZ5 -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org