$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: Q0mSMifICB7g3AikpYQkm/AEt41NNSr/kYjBlBGfF3k= Subject key identifier: D2:34:25:ED:51:89:A7:C4:25:83:82:A8:0A:B6:59:94:76:2E:44:78 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 03B7 Signing time: Sun 19 May 2024 02:37:26 +0000 Manifest this update: Sun 19 May 2024 02:37:25 +0000 Manifest next update: Sun 26 May 2024 02:37:25 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: xGwv7NDUWeMN7ICI0QJaYtek+B8OH9usQzGjXdOZ/ec=) 2: 10C1C1C810AC11EFB9D89D46C4F9AE02.roa (hash: AWcQTMpSQ9gr+uNGmPr7YsVpo9Er1XfkgbQjTaDcihI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: May 19 02:37:25 2024 GMT Not After : May 26 02:37:25 2024 GMT Subject: CN=664965e6-02fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:83:5f:a1:52:fe:77:82:97:e6:93:35:79: ed:be:fa:41:d8:5b:09:0f:cd:19:36:d0:ca:65:1b: ad:74:d1:1f:1c:2b:de:de:71:92:5d:72:6f:d6:12: b6:79:8f:77:d9:f0:84:92:b3:6e:ce:3b:80:ed:18: 67:d6:44:5f:50:27:42:45:be:aa:8f:19:4d:ad:a6: fc:bc:aa:73:91:e1:b1:3a:7c:13:b0:ac:de:a8:ce: 66:ca:20:31:d6:04:c6:90:05:c2:fb:3e:00:52:69: a8:51:50:95:5a:80:46:06:4a:7b:4c:17:e5:87:d2: a7:da:9d:f0:c6:8e:e7:af:bf:9d:27:da:a5:37:83: d1:82:d2:7b:3f:86:2f:57:c9:c3:28:d3:5a:f5:89: 4a:02:8a:b0:47:88:ec:df:14:d8:0b:fd:09:04:14: af:94:ce:20:e3:90:3c:30:37:b0:02:e5:e3:30:db: c4:95:92:fd:c7:13:fa:03:e6:3c:21:1e:e6:8b:85: dc:a5:b1:4a:35:55:80:63:94:ce:7f:5d:b0:a0:45: 6c:00:7e:20:6c:ee:96:fa:60:34:d9:23:72:a7:46: 86:9a:11:2d:69:4b:ac:9d:f3:c6:70:92:03:37:07: ff:eb:ce:30:d1:7c:24:70:c2:6b:f7:be:64:0f:f0: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:34:25:ED:51:89:A7:C4:25:83:82:A8:0A:B6:59:94:76:2E:44:78 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:29:f4:09:af:fb:f2:61:8b:61:33:dc:ee:ae:9c:b4:4f:1c: 1d:9d:a1:df:40:44:a3:22:8f:8a:a3:05:5f:d7:a6:45:2b:d7: 3c:87:59:be:6e:b1:a4:04:f9:23:fb:13:de:04:82:e3:ae:e5: ca:32:e7:80:28:f4:b3:e2:a0:d2:3e:4c:81:52:48:a2:6d:6a: fe:b1:a2:93:30:db:61:c7:89:d7:ae:4e:d7:bc:c9:d1:05:1d: 7e:f0:9b:7e:11:3e:fd:45:ad:05:55:80:2d:f7:7e:81:36:97: cf:c0:9a:b5:0d:b0:86:92:cd:26:5e:8a:ac:09:bb:a0:4b:c0: 24:00:25:4c:d3:c5:75:5a:65:13:8c:1d:8e:a1:60:e7:6d:f3: 5b:a5:79:c4:aa:ba:11:2d:17:40:9a:8d:88:1c:b3:fc:da:e3: de:2e:25:cb:08:e4:08:b8:c1:eb:b6:4e:91:c7:2f:87:c1:e6: 1d:62:d6:e9:02:c3:a0:d6:52:59:51:9b:c3:78:49:30:a5:e9: b0:c1:00:19:dc:03:75:19:a0:16:b7:2a:bf:f5:cc:df:8c:a1: 5b:c7:d5:2d:e7:9f:5e:02:5f:c6:1e:52:e9:b7:b5:9a:72:8e: 2f:32:a6:02:c1:79:13:a5:f2:3e:bd:f4:ad:d1:77:fc:15:bb: 28:fd:05:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjQwNTE5MDIzNzI1WhcNMjQwNTI2MDIzNzI1WjAYMRYwFAYD VQQDEw02NjQ5NjVlNi0wMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurKDX6FS/neCl+aTNXntvvpB2FsJD80ZNtDKZRutdNEfHCve3nGSXXJv1hK2 eY932fCEkrNuzjuA7Rhn1kRfUCdCRb6qjxlNrab8vKpzkeGxOnwTsKzeqM5myiAx 1gTGkAXC+z4AUmmoUVCVWoBGBkp7TBflh9Kn2p3wxo7nr7+dJ9qlN4PRgtJ7P4Yv V8nDKNNa9YlKAoqwR4js3xTYC/0JBBSvlM4g45A8MDewAuXjMNvElZL9xxP6A+Y8 IR7mi4XcpbFKNVWAY5TOf12woEVsAH4gbO6W+mA02SNyp0aGmhEtaUusnfPGcJID Nwf/684w0XwkcMJr975kD/DMwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI0Je1R iafEJYOCqAq2WZR2LkR4MB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpKfQJr/vyYYthM9zurpy0TxwdnaHfQESjIo+KowVf16ZFK9c8h1m+ brGkBPkj+xPeBILjruXKMueAKPSz4qDSPkyBUkiibWr+saKTMNthx4nXrk7XvMnR BR1+8Jt+ET79Ra0FVYAt936BNpfPwJq1DbCGks0mXoqsCbugS8AkACVM08V1WmUT jB2OoWDnbfNbpXnEqroRLRdAmo2IHLP82uPeLiXLCOQIuMHrtk6Rxy+HweYdYtbp AsOg1lJZUZvDeEkwpemwwQAZ3AN1GaAWtyq/9czfjKFbx9Ut559eAl/GHlLpt7Wa co4vMqYCwXkTpfI+vfSt0Xf8Fbso/QXi -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org