$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: xHFHPtjGvAIeTG4Ao+wOjcVyitCeBOOM2GbCchIkJWQ= Subject key identifier: 7C:06:EA:F7:82:6C:6E:F5:63:37:3B:04:13:4A:7D:7B:47:89:3D:23 Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: C1 Signing time: Sun 19 May 2024 06:20:54 +0000 Manifest this update: Sun 19 May 2024 06:20:54 +0000 Manifest next update: Sun 26 May 2024 06:20:54 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: nq9/WGskaNjJYqxi5KIE2UeGiCri+wr6HGtKagCkwyU=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: k26LdkklDHtPjNi+CtJWDmWk+WigMsV1BnXdW/63JR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: May 19 06:20:54 2024 GMT Not After : May 26 06:20:54 2024 GMT Subject: CN=66499a46-a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:ee:eb:81:9a:0f:6c:87:21:5d:4c:03:58: 33:d7:26:73:17:0a:81:51:f3:b5:9a:9e:eb:37:ff: 7c:6a:ae:04:0e:26:b0:70:7f:08:01:97:ce:04:57: 42:83:b3:a9:70:1f:47:4b:49:15:71:17:00:fc:06: 36:6d:89:c4:f4:44:9c:8b:d0:41:04:a9:32:0d:8f: ae:9c:37:a1:da:ec:ed:cf:82:ba:ea:82:5c:cb:f7: 0a:1e:72:7a:1c:d4:89:bb:7b:51:94:ab:e5:4e:b1: bb:fe:58:ea:9b:69:ac:3d:d3:88:99:e6:5d:ad:41: 16:e3:90:71:31:9b:51:72:57:04:07:40:4e:76:00: aa:ad:a5:3f:55:f0:c0:79:38:04:20:d0:a8:50:ce: 7a:cb:79:0f:e9:e1:59:99:91:64:65:86:17:7a:7b: 9b:8f:e5:dc:72:90:67:84:34:d4:46:86:9e:5f:81: 9d:3e:a0:b2:52:68:e7:de:76:43:e7:6e:21:2e:67: 33:2f:59:33:f3:93:4b:96:eb:fa:d3:63:98:c8:8b: 54:33:7b:35:26:bb:c6:1b:2a:e9:06:53:ea:dd:94: 18:df:90:bd:cd:13:26:f8:a2:92:0c:e3:92:11:13: d5:5d:17:90:a9:26:17:cb:20:82:41:50:e4:ed:d0: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:06:EA:F7:82:6C:6E:F5:63:37:3B:04:13:4A:7D:7B:47:89:3D:23 X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:0f:12:1b:1c:93:a1:76:e9:72:71:13:ab:7d:b6:06:0c:aa: d1:bc:c8:53:00:4d:74:3c:0a:53:5b:cd:5a:76:71:b0:fd:c5: 72:d5:2c:f5:1d:3f:8a:89:b3:fc:e4:b2:eb:8d:fb:56:ae:20: 10:53:b0:02:e2:bd:17:36:87:a4:8c:31:89:94:90:1c:aa:76: c5:25:89:bb:79:bb:02:ef:b9:91:7a:c0:5b:46:18:80:40:c1: d3:58:0b:dd:a3:96:3c:a7:df:09:45:f3:3c:fd:3a:73:8a:b9: 5a:e2:d0:bf:56:ba:be:80:17:e5:f6:b7:8e:ba:ff:5e:bf:6c: 84:93:0d:93:f4:54:7b:db:c1:c7:26:41:46:5b:8a:81:71:8f: fb:84:a9:39:85:78:ad:b4:38:24:b9:8d:18:4e:f6:05:f2:57: b8:44:d7:59:63:a3:e2:c2:c0:07:44:e8:14:ea:87:0c:56:07: 5d:37:e1:7b:f8:82:a3:8a:2c:a3:16:5a:2a:8a:e0:9f:18:07: 2d:86:10:f3:39:8a:3a:55:4b:10:a0:25:2d:e0:b8:57:36:de: e1:cd:e9:02:83:28:43:91:22:64:59:7c:4a:28:9b:9d:c9:63: db:ff:0a:09:f1:5b:7f:f8:2e:d6:f1:1c:12:25:e4:92:ef:cf: b5:89:74:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjQwNTE5MDYyMDU0WhcNMjQwNTI2MDYyMDU0WjAYMRYwFAYD VQQDEw02NjQ5OWE0Ni1hNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMTu64GaD2yHIV1MA1gz1yZzFwqBUfO1mp7rN/98aq4EDiawcH8IAZfOBFdC g7OpcB9HS0kVcRcA/AY2bYnE9ESci9BBBKkyDY+unDeh2uztz4K66oJcy/cKHnJ6 HNSJu3tRlKvlTrG7/ljqm2msPdOImeZdrUEW45BxMZtRclcEB0BOdgCqraU/VfDA eTgEINCoUM56y3kP6eFZmZFkZYYXenubj+XccpBnhDTURoaeX4GdPqCyUmjn3nZD 524hLmczL1kz85NLluv602OYyItUM3s1JrvGGyrpBlPq3ZQY35C9zRMm+KKSDOOS ERPVXReQqSYXyyCCQVDk7dDmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwG6veC bG71Yzc7BBNKfXtHiT0jMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrDxIbHJOhdulycROrfbYGDKrRvMhTAE10PApTW81adnGw/cVy1Sz1 HT+KibP85LLrjftWriAQU7AC4r0XNoekjDGJlJAcqnbFJYm7ebsC77mResBbRhiA QMHTWAvdo5Y8p98JRfM8/Tpzirla4tC/Vrq+gBfl9reOuv9ev2yEkw2T9FR728HH JkFGW4qBcY/7hKk5hXittDgkuY0YTvYF8le4RNdZY6PiwsAHROgU6ocMVgddN+F7 +IKjiiyjFloqiuCfGActhhDzOYo6VUsQoCUt4LhXNt7hzekCgyhDkSJkWXxKKJud yWPb/woJ8Vt/+C7W8RwSJeSS78+1iXS0 -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org