$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: KY3IA+Juoz1/SRWyDvW0psHnObNf55VOB3bKzMWfZMk= Subject key identifier: E3:E8:71:A1:C9:A7:21:34:CA:6D:52:3C:B1:71:C3:39:CD:33:A0:F4 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0517 Signing time: Sun 19 May 2024 01:02:10 +0000 Manifest this update: Sun 19 May 2024 01:02:10 +0000 Manifest next update: Sun 26 May 2024 01:02:10 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: ox74mu2JKtAL3MeOTUVqdcplxwCvf/hyHL0UTYtXtDM=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: 71x1Jrez9C8Bb6X9l4tTlVF8M/CxlMqODnBhqCjWY40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: May 19 01:02:10 2024 GMT Not After : May 26 01:02:10 2024 GMT Subject: CN=66494f92-9099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:a9:11:25:2c:07:97:15:17:4c:49:51:91: d8:f4:5a:07:1c:1c:b5:51:6a:de:e4:8a:8a:7d:e8: dd:16:71:36:a1:99:61:68:73:74:44:e5:63:f4:15: c5:fe:44:bf:95:8e:e1:7a:00:59:c6:5a:43:81:d1: 15:e5:e6:40:21:39:8a:c6:06:eb:7d:91:27:a3:30: 37:48:90:3a:ee:df:c1:ba:85:ce:9e:59:52:55:7c: 78:41:8b:5e:47:63:3b:05:eb:be:f4:b4:79:88:b7: a6:1e:4b:8a:05:90:6b:e3:7c:35:37:e3:40:c7:86: 7e:50:1c:3f:f5:e0:af:60:02:e0:11:02:22:3b:e3: 5d:9f:45:77:0d:b0:4f:f9:d2:8e:37:27:0a:16:75: 5f:18:6e:6c:3e:52:ec:7a:43:94:b7:34:4c:25:ee: 99:cf:a0:df:09:f0:df:53:73:5f:f0:95:c3:62:f6: 8a:76:ca:75:48:7a:66:54:2d:84:df:71:a4:9a:eb: 02:c3:83:c2:ea:2e:1d:2f:bf:d8:43:86:fd:28:ab: d2:26:13:42:39:80:3a:a8:b1:3c:3b:dc:d3:67:89: fb:12:1f:4a:60:45:c9:de:97:84:17:97:d5:f0:6e: 9a:15:d4:45:bb:58:e3:e6:0c:4b:9a:46:b0:aa:58: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E8:71:A1:C9:A7:21:34:CA:6D:52:3C:B1:71:C3:39:CD:33:A0:F4 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c8:e5:6c:b9:bc:62:17:8c:4c:94:86:f7:07:ca:94:24:85: 95:2e:1a:e8:c3:0b:8d:83:ad:db:65:f6:56:97:37:9f:1c:b6: ed:24:0d:43:e2:f9:4f:d3:1c:2c:39:a0:76:26:4b:1d:b1:de: 10:d4:72:5d:90:82:48:55:b7:84:39:b6:5f:1b:32:e7:23:44: c0:3a:35:da:3d:eb:48:3d:01:62:3b:31:cb:f8:ef:1d:37:b0: 48:56:ba:51:0b:21:03:22:67:e7:41:52:28:bd:7b:ce:66:91: 49:45:d0:4a:58:35:75:df:74:57:bb:f1:66:49:55:13:84:c2: d5:32:79:af:9d:f8:21:c1:69:f9:ce:24:3d:20:d4:67:9e:2d: 86:56:9a:50:d9:de:2c:5c:ed:71:56:79:ff:de:d2:ae:f6:f8: 99:4a:b6:4a:46:18:94:c4:9e:4e:90:60:0f:5a:f3:4f:33:28: 8a:86:1f:40:41:ba:bd:be:52:7a:a9:84:1e:03:7e:87:cb:19: ef:5a:88:12:dc:c6:e6:1c:a0:59:c6:d7:63:9d:a2:35:fe:f4: 91:a3:93:1d:3a:03:9d:de:ab:83:cf:0b:25:83:ed:64:ca:16: 6d:9b:d2:d1:49:47:3f:b3:87:8d:8c:15:12:8e:e9:51:11:3e: 93:13:04:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjQwNTE5MDEwMjEwWhcNMjQwNTI2MDEwMjEwWjAYMRYwFAYD VQQDEw02NjQ5NGY5Mi05MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN2pESUsB5cVF0xJUZHY9FoHHBy1UWre5IqKfejdFnE2oZlhaHN0ROVj9BXF /kS/lY7hegBZxlpDgdEV5eZAITmKxgbrfZEnozA3SJA67t/BuoXOnllSVXx4QYte R2M7Beu+9LR5iLemHkuKBZBr43w1N+NAx4Z+UBw/9eCvYALgEQIiO+Ndn0V3DbBP +dKONycKFnVfGG5sPlLsekOUtzRMJe6Zz6DfCfDfU3Nf8JXDYvaKdsp1SHpmVC2E 33GkmusCw4PC6i4dL7/YQ4b9KKvSJhNCOYA6qLE8O9zTZ4n7Eh9KYEXJ3peEF5fV 8G6aFdRFu1jj5gxLmkawqliNnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPocaHJ pyE0ym1SPLFxwznNM6D0MB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZyOVsubxiF4xMlIb3B8qUJIWVLhrowwuNg63bZfZWlzefHLbtJA1D 4vlP0xwsOaB2Jksdsd4Q1HJdkIJIVbeEObZfGzLnI0TAOjXaPetIPQFiOzHL+O8d N7BIVrpRCyEDImfnQVIovXvOZpFJRdBKWDV133RXu/FmSVUThMLVMnmvnfghwWn5 ziQ9INRnni2GVppQ2d4sXO1xVnn/3tKu9viZSrZKRhiUxJ5OkGAPWvNPMyiKhh9A Qbq9vlJ6qYQeA36HyxnvWogS3MbmHKBZxtdjnaI1/vSRo5MdOgOd3quDzwslg+1k yhZtm9LRSUc/s4eNjBUSjulRET6TEwQr -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org