$ rpki-client -vvf rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft File: 8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft (raw, json) Hash identifier: i/L13yDp2rPpod4UZSh1eteDZwkPwFDuWKElTzuVJcY= Subject key identifier: AE:B3:52:86:15:6D:FF:00:53:D8:DC:81:2C:B7:9D:99:99:0A:2E:3E Authority key identifier: F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF Certificate issuer: /CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF Certificate serial: 0EFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft Manifest number: 0ED3 Signing time: Sat 18 May 2024 18:20:09 +0000 Manifest this update: Sat 18 May 2024 18:20:08 +0000 Manifest next update: Sat 25 May 2024 18:20:08 +0000 Files and hashes: 1: 8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl (hash: lxxmm4Xtt+S0V4umcPEHDGEBYjB+9pVoEWj9vqN9sAw=) 2: 983A05F84EA311EB934EF05CC4F9AE02.roa (hash: P2K/A9S9BbQJJ5jpe6Nsy6vhhPAP+7WyRVkP1cTLDko=) 3: 6840DA0E663911EB9492E836C4F9AE02.roa (hash: sGu3ODXooc9CB+ssEdGcHv/MosZ1/dqSVTNT38zCxdM=) 4: 312806545DA611ECB01B733BC4F9AE02.roa (hash: No0IlpoVlxfwVKfFuVyGS+nVpuw81ooHig1jHXtsJNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3836 (0xefc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF Validity Not Before: May 18 18:20:08 2024 GMT Not After : May 25 18:20:08 2024 GMT Subject: CN=6648f159-424f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:1a:7d:db:7c:3b:6e:2d:f6:9e:3d:31:6b: 74:45:2b:6c:d6:f8:0a:d7:70:8e:cf:22:b1:39:df: 75:c9:60:9f:c9:41:8d:f7:ef:c9:40:5c:c0:66:0e: d2:e1:46:a9:e3:f8:82:ca:c6:b1:17:04:e9:74:7c: b0:49:46:1d:eb:23:c7:1e:97:2c:e9:04:f7:9d:08: 53:d7:42:2c:16:59:8b:d5:0b:f2:15:ca:2a:b9:7f: 15:97:e4:5b:a8:97:62:82:ed:1c:82:0d:af:4d:11: c8:af:27:a5:89:72:4e:7c:d7:84:80:31:48:13:cb: 27:b8:f6:a3:96:89:21:c3:48:90:f5:e4:6d:4f:72: f3:2b:bf:bf:8c:cf:10:b3:7b:65:88:ef:f1:f2:64: 13:d9:35:53:58:40:5f:93:d7:d0:ba:59:09:41:92: 96:e8:fb:5c:aa:f3:74:cc:5d:30:3a:b8:4d:3f:1e: c0:e1:d0:f6:b1:74:ae:ce:94:37:58:86:36:5f:41: 57:89:1e:0c:09:0c:25:7f:a4:f8:d3:c7:a1:12:9d: 72:6c:f6:3e:c8:91:a3:e7:18:3b:5e:0d:e1:f5:36: 77:da:06:94:2d:8d:3a:12:c1:c0:b3:a0:79:06:12: 7a:e3:bb:e6:7c:6b:11:49:b3:86:8f:2e:a6:b1:ff: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B3:52:86:15:6D:FF:00:53:D8:DC:81:2C:B7:9D:99:99:0A:2E:3E X509v3 Authority Key Identifier: keyid:F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:08:46:3f:cd:a1:52:08:ef:8e:3b:67:db:7b:43:82:c1:78: 1a:ef:11:b7:cb:5a:30:c2:9d:1a:e6:5d:7b:60:db:93:da:e7: ba:0e:c6:8d:15:61:53:19:6f:17:31:7b:48:90:72:f1:f3:38: 7c:00:9c:eb:dd:3d:d0:b2:fb:18:f6:69:d4:4c:4c:6b:ae:46: 94:c6:d9:9e:b5:f2:c3:ed:4c:38:27:f5:64:c9:48:80:fb:bf: 19:db:27:09:98:a0:8d:86:e4:64:0e:4c:85:23:3d:03:aa:34: 40:30:3e:96:1a:75:db:e3:db:dd:a0:83:18:a5:dc:76:fa:75: a7:46:d1:35:8f:c0:a2:be:59:d6:24:f5:db:05:7b:2e:a1:2d: 8e:0e:1c:67:5a:bc:4c:87:41:db:d6:a5:47:fa:5e:06:d1:64: 53:d8:79:0a:0d:c0:af:df:95:e8:6c:31:b0:0b:80:40:a0:01: 6c:06:09:7b:a2:22:cb:07:6a:4c:ca:8c:30:e4:51:08:ae:0e: dc:8e:fa:bc:63:4f:e7:b5:32:84:7c:52:07:dc:1b:17:6f:de: a5:c5:fc:b2:bd:68:ca:30:6f:6b:1f:df:ed:03:76:75:40:6c: 98:72:35:a4:74:ee:ce:fd:84:81:c0:70:bc:03:eb:8e:8d:14: c4:fb:96:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4QjMxMTAvBgNVBAUTKEYyQzA1MkUwQzU3M0FCMDU4MEVCMDZGM0Y5MDAyNTY0 NkU2RjMyQ0YwHhcNMjQwNTE4MTgyMDA4WhcNMjQwNTI1MTgyMDA4WjAYMRYwFAYD VQQDEw02NjQ4ZjE1OS00MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWIafdt8O24t9p49MWt0RSts1vgK13COzyKxOd91yWCfyUGN9+/JQFzAZg7S 4Uap4/iCysaxFwTpdHywSUYd6yPHHpcs6QT3nQhT10IsFlmL1QvyFcoquX8Vl+Rb qJdigu0cgg2vTRHIryeliXJOfNeEgDFIE8snuPajlokhw0iQ9eRtT3LzK7+/jM8Q s3tliO/x8mQT2TVTWEBfk9fQulkJQZKW6PtcqvN0zF0wOrhNPx7A4dD2sXSuzpQ3 WIY2X0FXiR4MCQwlf6T408ehEp1ybPY+yJGj5xg7Xg3h9TZ32gaULY06EsHAs6B5 BhJ647vmfGsRSbOGjy6msf+RyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6zUoYV bf8AU9jcgSy3nZmZCi4+MB8GA1UdIwQYMBaAFPLAUuDFc6sFgOsG8/kAJWRubzLP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjhCMy9BMTEzMUQ2QzY2 NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3V0E2d2J6LVFBbFpHNXZN czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhzQlM0TVZ6cXdXQTZ3YnotUUFsWkc1dk1zOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjhCMy9BMTEzMUQ2QzY2NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3 V0E2d2J6LVFBbFpHNXZNczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaCEY/zaFSCO+OO2fbe0OCwXga7xG3y1owwp0a5l17YNuT2ue6DsaN FWFTGW8XMXtIkHLx8zh8AJzr3T3QsvsY9mnUTExrrkaUxtmetfLD7Uw4J/VkyUiA +78Z2ycJmKCNhuRkDkyFIz0DqjRAMD6WGnXb49vdoIMYpdx2+nWnRtE1j8CivlnW JPXbBXsuoS2ODhxnWrxMh0Hb1qVH+l4G0WRT2HkKDcCv35XobDGwC4BAoAFsBgl7 oiLLB2pMyoww5FEIrg7cjvq8Y0/ntTKEfFIH3BsXb96lxfyyvWjKMG9rH9/tA3Z1 QGyYcjWkdO7O/YSBwHC8A+uOjRTE+5a5 -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org