$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: SNPyaKdsGPoXn/132fk6kfD83uJfGiqym6wvhjqRPfY= Subject key identifier: CC:F4:C8:37:14:43:D4:D4:58:B2:8D:5C:8F:9F:3D:FA:25:2A:4B:FC Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: 15 Signing time: Sun 19 May 2024 08:45:46 +0000 Manifest this update: Sun 19 May 2024 08:45:45 +0000 Manifest next update: Sun 26 May 2024 08:45:45 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: P78Ib+zhvaOa+gy0US/C7RaSddSpPmZHNwmVpvYfrIU=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: a9RS5HIq3Dutxm5IOUvaCEzfSMQJVxzZjgdPZFPGcu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: May 19 08:45:45 2024 GMT Not After : May 26 08:45:45 2024 GMT Subject: CN=6649bc3a-16b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:cd:2c:44:be:40:39:b9:b1:90:9c:fe:e2: a7:1b:39:ac:97:c4:d5:ca:e5:07:0c:de:c5:9d:d0: d6:ad:a5:46:dd:d2:c0:3d:68:1e:f3:b3:3d:18:8e: 4d:fd:9b:d3:4e:68:84:b4:c9:06:2a:f7:c3:76:03: 65:3c:b3:7d:f5:bb:b3:bd:44:d4:ac:dc:37:dd:46: 38:3f:69:a7:9c:99:b9:0f:0b:36:05:07:56:55:70: 27:fd:60:fa:bf:a1:d7:e5:a0:1a:ae:91:01:a6:b1: 48:54:aa:bd:f5:2f:ae:1d:f4:a0:dc:d9:7a:3f:cc: c1:e8:95:44:40:5f:ae:10:2e:2a:40:8c:db:96:1c: 8e:af:9f:85:6f:43:6e:b3:31:49:dc:55:5b:a6:67: 78:38:0d:3c:ae:96:9e:b5:f7:dc:3e:11:77:ec:5a: 58:fa:db:15:5d:6a:a8:71:7f:4c:1e:bb:91:cc:b1: 22:ed:cb:1b:e1:ef:f8:91:08:c8:bc:18:90:ac:66: 1d:70:3d:1c:c4:29:b2:e9:fa:29:9b:88:20:9c:2d: d3:1d:33:fd:a9:b0:33:fa:19:8d:cf:48:a8:a6:dc: 49:7b:2b:4b:f5:64:c6:75:45:8f:e0:74:86:f4:06: 60:e4:d3:15:58:57:83:1e:aa:d9:80:e5:55:ad:4b: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F4:C8:37:14:43:D4:D4:58:B2:8D:5C:8F:9F:3D:FA:25:2A:4B:FC X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:2c:df:05:2a:a9:e5:53:5f:0e:5d:91:8e:63:31:11:a3: 8c:e6:44:59:a4:3d:7f:a2:4e:4f:18:b5:33:91:76:c2:f5:b0: 5d:71:93:f7:e9:02:1b:58:6e:6f:3e:cc:36:93:ce:6d:3d:df: 87:72:b7:10:c6:9c:de:03:f0:4a:8b:f3:ff:43:94:e9:0c:db: 82:9e:28:91:c5:38:76:dd:d6:b0:e6:6b:59:e9:fa:4d:14:8d: 38:fc:fb:25:39:d8:50:a8:33:0f:6a:bc:1d:70:66:6a:3c:32: b0:dc:73:d2:72:cc:65:83:1b:70:27:8a:c9:b5:aa:d9:e7:bf: 88:26:4f:6a:7d:eb:59:74:0b:b1:83:78:d8:05:56:66:30:1b: e0:86:0f:06:1d:a0:5e:8e:ba:2f:2b:5e:40:20:02:e0:52:56: 74:3b:dc:77:1a:d6:69:b6:c4:89:b5:d6:58:b3:d0:ce:e3:84: fd:51:f0:b3:f9:8e:36:ba:48:82:33:ae:13:6a:66:2c:b5:22: 8f:d0:07:fe:74:77:ad:91:e5:1b:49:c4:23:30:72:14:12:40: a5:56:15:b3:36:76:df:31:ad:65:06:fe:71:f7:84:6e:d0:85: 25:3e:aa:3d:25:0b:01:e0:f6:64:65:29:35:c1:05:52:a8:a9: 95:48:23:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjczQzExMC8GA1UEBRMoMTNDNzJERjFDNTFFMkNBMjExQ0E1NzY2NTE2OENGN0M3 Qzc0NzI5MjAeFw0yNDA1MTkwODQ1NDVaFw0yNDA1MjYwODQ1NDVaMBgxFjAUBgNV BAMTDTY2NDliYzNhLTE2YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQOM0sRL5AObmxkJz+4qcbOayXxNXK5QcM3sWd0NatpUbd0sA9aB7zsz0Yjk39 m9NOaIS0yQYq98N2A2U8s331u7O9RNSs3DfdRjg/aaecmbkPCzYFB1ZVcCf9YPq/ odfloBqukQGmsUhUqr31L64d9KDc2Xo/zMHolURAX64QLipAjNuWHI6vn4VvQ26z MUncVVumZ3g4DTyulp6199w+EXfsWlj62xVdaqhxf0weu5HMsSLtyxvh7/iRCMi8 GJCsZh1wPRzEKbLp+imbiCCcLdMdM/2psDP6GY3PSKim3El7K0v1ZMZ1RY/gdIb0 BmDk0xVYV4MeqtmA5VWtSy/5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzPTINxRD 1NRYso1cj589+iUqS/wwHwYDVR0jBBgwFoAUE8ct8cUeLKIRyldmUWjPfHx0cpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNzNDL0NCRDYyMTFDRjY0 ODExRUVBNEE2RkUwRUM0RjlBRTAyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRThjdDhjVWVMS0lSeWxkbVVXalBmSHgwY3BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NzNDL0NCRDYyMTFDRjY0ODExRUVBNEE2RkUwRUM0RjlBRTAyL0U4Y3Q4Y1VlTEtJ UnlsZG1VV2pQZkh4MGNwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpJLN8FKqnlU18OXZGOYzERo4zmRFmkPX+iTk8YtTORdsL1sF1xk/fp AhtYbm8+zDaTzm0934dytxDGnN4D8EqL8/9DlOkM24KeKJHFOHbd1rDma1np+k0U jTj8+yU52FCoMw9qvB1wZmo8MrDcc9JyzGWDG3Anism1qtnnv4gmT2p961l0C7GD eNgFVmYwG+CGDwYdoF6Oui8rXkAgAuBSVnQ73Hca1mm2xIm11liz0M7jhP1R8LP5 jja6SIIzrhNqZiy1Io/QB/50d62R5RtJxCMwchQSQKVWFbM2dt8xrWUG/nH3hG7Q hSU+qj0lCwHg9mRlKTXBBVKoqZVII7Y= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org