$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: oRwJjePKMfZMVis8BQr+NWhUoa5KFUzpveYzwtKekkM= Subject key identifier: 45:3D:B9:D5:05:AC:5E:6F:98:BC:D7:40:89:57:55:68:0A:47:90:17 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 01B7 Signing time: Sun 19 May 2024 04:29:38 +0000 Manifest this update: Sun 19 May 2024 04:29:37 +0000 Manifest next update: Sun 26 May 2024 04:29:37 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: Exx8aD98iPNzS6QsgUVgJcG+jgKQCUFk1q74r4ypyvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: May 19 04:29:37 2024 GMT Not After : May 26 04:29:37 2024 GMT Subject: CN=66498031-d12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:b3:2e:27:88:e2:87:83:24:93:82:aa:6f: 4d:51:a5:7a:98:ab:ed:cf:85:b5:c1:a6:03:85:57: c4:8a:0b:3e:e4:f4:7c:a8:cf:ce:e3:43:c8:8c:64: ce:9f:b4:3a:94:ea:77:4c:82:ff:b7:5d:bf:6b:56: f4:99:0d:c9:33:49:75:9b:c5:d0:04:64:c9:86:85: 51:28:e1:5f:b7:fd:51:a5:57:b0:37:a8:bb:0a:c4: 9b:5c:30:99:76:a5:de:4e:86:b3:58:39:e6:ec:b3: a0:0f:be:78:4e:29:9b:1c:cc:f1:db:95:48:91:a9: 0d:11:10:3e:40:db:2a:55:bb:f5:19:12:b2:7d:ff: 1f:63:0f:17:a6:cc:8d:e1:b6:d2:97:b6:36:97:8f: 9e:7f:b4:dd:fb:df:65:75:83:dd:a8:b4:be:a9:3e: 28:18:76:6e:1e:6b:23:13:ed:95:68:9f:85:78:9f: a2:7c:c4:1b:40:70:f3:b4:7f:f3:58:30:d8:5d:8a: 37:85:dd:9c:32:ae:6b:39:ec:55:44:6c:b1:1d:5b: b6:46:aa:8f:31:80:c9:36:c2:66:78:39:92:28:21: 45:1f:8b:b8:e9:72:4a:60:3e:1b:cf:34:7b:e7:5a: a5:15:54:98:00:0e:f1:ab:72:41:a2:9c:87:1c:d0: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:B9:D5:05:AC:5E:6F:98:BC:D7:40:89:57:55:68:0A:47:90:17 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:80:a1:9f:e0:ca:4c:18:d0:a4:f9:88:bf:b0:dd:39:10:c7: d8:88:fe:0c:e8:46:31:4c:00:68:3e:cc:d1:3e:54:7a:d3:ca: 62:81:16:4a:ea:0f:4e:98:3e:c5:80:4b:75:2f:55:21:70:55: 02:f2:75:c0:ee:a0:ba:f7:51:ff:6b:ce:d4:98:40:e4:07:c1: 73:14:be:f8:ea:b2:d4:74:8a:a0:14:3a:a9:5a:0e:97:5b:17: 2a:8d:5c:55:7f:a8:26:1d:ad:c2:e6:ef:66:1d:b7:ec:25:07: 0e:ce:05:86:59:36:bf:75:fa:1e:cf:f3:b8:4e:fd:ae:8b:ee: 51:43:6f:e8:60:62:c3:9c:5b:3d:65:3f:62:19:88:de:e5:c1: f5:9d:56:44:b5:d0:06:09:d5:d8:9b:3a:40:ee:f9:43:60:45: f7:17:46:74:c8:3a:a6:c7:19:f0:bd:5e:39:84:fd:d8:fc:65: 6b:0d:19:40:f1:81:39:83:61:aa:3a:69:8a:c2:3a:65:ec:5e: ca:39:6e:04:ca:4e:13:d6:f5:77:27:30:af:2e:05:04:fe:90: 42:27:cf:a9:f2:4d:d7:61:10:b1:80:3b:7e:fa:c0:a1:9c:27: c8:a2:e5:d7:25:67:98:ae:20:7b:a2:6c:59:dc:b3:5d:a3:e7: 30:0d:73:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjQwNTE5MDQyOTM3WhcNMjQwNTI2MDQyOTM3WjAYMRYwFAYD VQQDEw02NjQ5ODAzMS1kMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLezLieI4oeDJJOCqm9NUaV6mKvtz4W1waYDhVfEigs+5PR8qM/O40PIjGTO n7Q6lOp3TIL/t12/a1b0mQ3JM0l1m8XQBGTJhoVRKOFft/1RpVewN6i7CsSbXDCZ dqXeToazWDnm7LOgD754TimbHMzx25VIkakNERA+QNsqVbv1GRKyff8fYw8XpsyN 4bbSl7Y2l4+ef7Td+99ldYPdqLS+qT4oGHZuHmsjE+2VaJ+FeJ+ifMQbQHDztH/z WDDYXYo3hd2cMq5rOexVRGyxHVu2RqqPMYDJNsJmeDmSKCFFH4u46XJKYD4bzzR7 51qlFVSYAA7xq3JBopyHHNAE9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU9udUF rF5vmLzXQIlXVWgKR5AXMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOgKGf4MpMGNCk+Yi/sN05EMfYiP4M6EYxTABoPszRPlR608pigRZK 6g9OmD7FgEt1L1UhcFUC8nXA7qC691H/a87UmEDkB8FzFL746rLUdIqgFDqpWg6X WxcqjVxVf6gmHa3C5u9mHbfsJQcOzgWGWTa/dfoez/O4Tv2ui+5RQ2/oYGLDnFs9 ZT9iGYje5cH1nVZEtdAGCdXYmzpA7vlDYEX3F0Z0yDqmxxnwvV45hP3Y/GVrDRlA 8YE5g2GqOmmKwjpl7F7KOW4Eyk4T1vV3JzCvLgUE/pBCJ8+p8k3XYRCxgDt++sCh nCfIouXXJWeYriB7omxZ3LNdo+cwDXOo -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org