$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft File: fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json) Hash identifier: EO77HVhxnSLhCj0Oj/TzGKWljVOfqKCXFq3ZSovXL4Y= Subject key identifier: 05:E7:36:E8:A3:9A:F1:41:F1:E5:E0:D3:D6:B1:3F:63:EA:6E:3F:78 Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F Certificate issuer: /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft Manifest number: 0331 Signing time: Sun 19 May 2024 02:59:49 +0000 Manifest this update: Sun 19 May 2024 02:59:49 +0000 Manifest next update: Sun 26 May 2024 02:59:49 +0000 Files and hashes: 1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: Eo+gS27paru6bjvuzzUxOIG+kRjNK0hiOMD+2UEDSiY=) 2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: 4Ah2YLr8RXYA6vEVu9hSIYi03ltU5CJBI4cr7fOlJuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Validity Not Before: May 19 02:59:49 2024 GMT Not After : May 26 02:59:49 2024 GMT Subject: CN=66496b25-56f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:32:42:b4:8b:17:fa:36:77:2d:98:d1:05: 98:80:06:9d:52:4f:c1:cf:37:e6:f9:62:ed:f2:f1: ee:18:e6:39:a9:f5:04:a8:53:8f:ad:10:ef:96:85: 38:14:ba:d7:16:f8:99:91:f6:a1:07:f4:5a:3c:5d: 36:df:3e:00:85:70:e0:12:e8:8e:dd:05:1e:23:d8: 53:81:d5:d8:7d:22:3c:79:c2:d6:9d:50:2c:47:48: a3:b5:06:6c:67:9e:cf:d6:19:3c:3a:82:53:42:14: 13:7c:bb:e8:5f:f6:13:ab:1c:28:3e:eb:e0:d3:73: 48:63:8d:54:af:4e:dc:f3:fb:30:f3:4d:0a:26:04: d0:6b:63:91:79:72:38:ae:a3:1d:ae:1b:48:e1:08: f5:98:99:25:86:13:51:b3:2a:45:21:47:69:51:cf: 77:80:2d:9e:94:56:de:64:da:81:c3:9d:cb:1d:6f: e2:1d:1a:94:e6:c2:32:ab:73:5d:8c:05:54:42:b1: e4:b2:f1:08:ef:fd:bd:41:c4:75:fa:34:a0:58:0d: 6a:a9:a7:0a:dc:73:a2:0e:c0:62:7a:54:7a:80:3f: 0b:1a:f8:98:04:bc:96:f6:e9:d3:f2:02:76:ba:bb: 04:d9:aa:fe:d4:f5:a8:09:58:58:ef:62:32:3d:51: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E7:36:E8:A3:9A:F1:41:F1:E5:E0:D3:D6:B1:3F:63:EA:6E:3F:78 X509v3 Authority Key Identifier: keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ac:00:51:2a:f8:be:8e:81:f2:80:b0:d5:ca:76:63:e5:d1: c7:92:18:df:c3:83:e6:e4:d1:12:90:08:23:60:59:0c:2f:85: a8:a1:8b:df:5b:3e:d4:f2:8a:29:2c:a9:b6:25:39:1d:02:7a: bf:0c:5a:12:fe:b6:72:ef:45:07:7c:2a:e4:37:e8:0b:cd:1b: 67:dd:29:51:a9:4a:c0:34:70:ed:a3:a1:0b:88:84:29:c6:3c: 86:06:5d:de:ef:e1:15:7e:f8:06:26:8c:5c:ac:e4:af:89:7d: d5:24:0c:46:f5:6e:ce:3c:47:1e:90:96:49:4a:dc:3b:7f:b8: af:cb:3b:4a:0f:a0:f7:f1:e6:54:a2:79:c7:08:6a:a8:f2:a1: 34:77:c7:0f:73:76:73:85:87:c9:39:89:74:12:3c:b7:73:4b: 32:d3:a9:ec:2e:d3:3f:31:a6:1c:3e:dd:c0:74:86:fb:be:0f: a7:e5:86:f7:1e:84:84:b8:15:ab:15:7c:4e:75:5d:3d:00:d2: 34:dc:b1:d3:bb:2f:2c:c5:f5:94:dd:9a:e8:6f:27:ef:5b:0a: 32:74:1f:af:7b:74:d3:1b:2c:23:84:64:a2:d5:0a:cb:33:26: 39:3a:71:17:5c:7f:48:be:fa:d3:e0:00:8f:45:4b:af:db:f5: e3:48:41:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3MDAxMTAvBgNVBAUTKDdEN0YyRjgwMDQ3MENFQjE5M0M3RUI3ODk4Mzk1OTVC NzYyNzQ3NEYwHhcNMjQwNTE5MDI1OTQ5WhcNMjQwNTI2MDI1OTQ5WjAYMRYwFAYD VQQDEw02NjQ5NmIyNS01NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhoyQrSLF/o2dy2Y0QWYgAadUk/Bzzfm+WLt8vHuGOY5qfUEqFOPrRDvloU4 FLrXFviZkfahB/RaPF023z4AhXDgEuiO3QUeI9hTgdXYfSI8ecLWnVAsR0ijtQZs Z57P1hk8OoJTQhQTfLvoX/YTqxwoPuvg03NIY41Ur07c8/sw800KJgTQa2OReXI4 rqMdrhtI4Qj1mJklhhNRsypFIUdpUc93gC2elFbeZNqBw53LHW/iHRqU5sIyq3Nd jAVUQrHksvEI7/29QcR1+jSgWA1qqacK3HOiDsBielR6gD8LGviYBLyW9unT8gJ2 ursE2ar+1PWoCVhY72IyPVEIvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXnNuij mvFB8eXg09axP2Pqbj94MB8GA1UdIwQYMBaAFH1/L4AEcM6xk8freJg5WVt2J0dP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjcwMC9ENEM1REIxMjc5 N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3pyR1R4LXQ0bURsWlczWW5S MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYOHZnQVJ3enJHVHgtdDRtRGxaVzNZblIwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjcwMC9ENEM1REIxMjc5N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3py R1R4LXQ0bURsWlczWW5SMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtrABRKvi+joHygLDVynZj5dHHkhjfw4Pm5NESkAgjYFkML4WooYvf Wz7U8oopLKm2JTkdAnq/DFoS/rZy70UHfCrkN+gLzRtn3SlRqUrANHDto6ELiIQp xjyGBl3e7+EVfvgGJoxcrOSviX3VJAxG9W7OPEcekJZJStw7f7ivyztKD6D38eZU onnHCGqo8qE0d8cPc3ZzhYfJOYl0Ejy3c0sy06nsLtM/MaYcPt3AdIb7vg+n5Yb3 HoSEuBWrFXxOdV09ANI03LHTuy8sxfWU3ZrobyfvWwoydB+ve3TTGywjhGSi1QrL MyY5OnEXXH9IvvrT4ACPRUuv2/XjSEGg -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org