$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: z2KL4YSHyTN3yxWpXzQLlZQdmOvHKYH248IgqqT6NF0= Subject key identifier: 7C:EC:5A:28:29:5B:65:66:DC:B0:67:AB:9C:63:E8:A6:A6:E6:96:29 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0717 Signing time: Sat 18 May 2024 22:38:27 +0000 Manifest this update: Sat 18 May 2024 22:38:26 +0000 Manifest next update: Sat 25 May 2024 22:38:26 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: SQeEleypjHZ8LAgJXwj+rKuSUiR54vzEBUzELm1wqaA=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: g72dmpd69r9szZ945eUy2Uk31C+vU7krnEffTPjIXwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: May 18 22:38:26 2024 GMT Not After : May 25 22:38:26 2024 GMT Subject: CN=66492de2-c7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:0e:ae:82:41:3d:3d:13:e4:10:bd:5b:94: 27:e6:61:a4:94:34:5b:ad:7b:6e:98:29:85:ba:c6: 92:a8:d9:be:cc:51:c9:05:b9:e3:53:59:6a:de:53: 35:2c:9c:f1:dd:db:22:49:12:d6:21:2d:93:67:71: 33:9c:0b:dc:ed:39:a1:5f:c5:28:03:54:2a:d8:a8: 3f:e7:e9:2d:7b:44:5d:ef:e1:ff:5d:69:3d:74:98: 88:3d:18:89:95:43:b7:e6:92:77:f3:21:67:43:49: 35:b5:e8:d9:3b:16:60:90:56:60:62:0f:c9:0a:01: 46:16:df:2f:0e:96:ef:45:1d:ac:b7:88:49:67:92: c5:87:0a:11:cf:b4:4f:e9:1b:a2:b8:c4:ea:39:da: 01:2b:6c:6d:e8:6f:53:e2:a3:08:12:ed:4e:78:d1: 5a:b2:76:d2:ca:91:25:62:7d:dc:30:32:a6:d6:db: ec:26:34:46:9e:d8:56:28:c5:ee:66:44:7c:90:fd: f9:1d:78:62:69:83:fd:7b:13:d1:b4:3a:ff:67:5a: e5:2f:3c:ba:f7:29:5c:e7:2b:8c:15:cc:a0:e3:72: 1d:87:16:51:9c:d3:45:f8:85:04:0b:37:c2:47:6e: 12:ba:36:38:a6:e1:91:69:7b:5c:a5:13:75:55:5b: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:5A:28:29:5B:65:66:DC:B0:67:AB:9C:63:E8:A6:A6:E6:96:29 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ed:37:04:49:bd:40:56:eb:2e:54:e1:10:e6:2d:89:d5:1f: f6:1a:c3:7b:ef:e8:ca:94:c3:fa:6c:5b:0a:b4:eb:1d:26:0f: fd:69:d6:7d:3c:b7:19:59:6d:87:54:64:ed:51:bb:65:ff:3b: 05:44:0b:56:1f:a4:72:77:58:7a:11:a9:31:84:af:34:78:ec: 90:22:70:41:de:0e:c2:92:f6:4b:1e:38:a3:75:d3:9f:ff:91: 15:2d:64:f2:2f:6f:ca:78:8a:3f:f7:ae:d7:91:e2:fb:86:cb: cd:0b:37:63:93:a6:67:f0:e5:bf:5e:21:b8:6e:dd:25:31:66: 4e:77:ff:3a:b8:0a:0b:c1:a8:bc:d4:8a:f7:8f:c4:ae:e8:23: 0c:ff:b0:28:51:8f:b3:f2:5e:a4:82:12:a8:b5:5e:1a:84:09: 01:8b:26:8b:1a:13:d4:9e:bc:c8:5d:56:b5:13:d5:21:0c:ad: c1:f6:c3:63:c3:94:2a:2f:6b:03:ca:07:9c:e4:fc:17:72:01: c9:16:fc:e9:68:c8:d7:d8:c1:e8:df:f9:98:e0:95:46:40:e2: 8b:df:c1:e0:f9:ff:5f:f9:d8:96:2e:56:8e:44:21:c8:30:3a: 57:20:79:67:65:23:80:e7:a6:56:5f:ab:4e:23:54:fe:9e:b6: f7:72:0a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjQwNTE4MjIzODI2WhcNMjQwNTI1MjIzODI2WjAYMRYwFAYD VQQDEw02NjQ5MmRlMi1jN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbUOroJBPT0T5BC9W5Qn5mGklDRbrXtumCmFusaSqNm+zFHJBbnjU1lq3lM1 LJzx3dsiSRLWIS2TZ3EznAvc7TmhX8UoA1Qq2Kg/5+kte0Rd7+H/XWk9dJiIPRiJ lUO35pJ38yFnQ0k1tejZOxZgkFZgYg/JCgFGFt8vDpbvRR2st4hJZ5LFhwoRz7RP 6RuiuMTqOdoBK2xt6G9T4qMIEu1OeNFasnbSypElYn3cMDKm1tvsJjRGnthWKMXu ZkR8kP35HXhiaYP9exPRtDr/Z1rlLzy69ylc5yuMFcyg43IdhxZRnNNF+IUECzfC R24SujY4puGRaXtcpRN1VVtplQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzsWigp W2Vm3LBnq5xj6Kam5pYpMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe7TcESb1AVusuVOEQ5i2J1R/2GsN77+jKlMP6bFsKtOsdJg/9adZ9 PLcZWW2HVGTtUbtl/zsFRAtWH6Ryd1h6EakxhK80eOyQInBB3g7CkvZLHjijddOf /5EVLWTyL2/KeIo/967XkeL7hsvNCzdjk6Zn8OW/XiG4bt0lMWZOd/86uAoLwai8 1Ir3j8Su6CMM/7AoUY+z8l6kghKotV4ahAkBiyaLGhPUnrzIXVa1E9UhDK3B9sNj w5QqL2sDygec5PwXcgHJFvzpaMjX2MHo3/mY4JVGQOKL38Hg+f9f+diWLlaORCHI MDpXIHlnZSOA56ZWX6tOI1T+nrb3cgoS -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org