$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: gFKE+9rHyCw/RfEPogKXc07HW2YpuTQyFeg6YyN2fAw= Subject key identifier: 97:20:67:C3:51:B6:AB:3D:FD:C8:93:09:86:00:FC:6B:DF:BE:C1:96 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 028F Signing time: Sun 19 May 2024 03:42:09 +0000 Manifest this update: Sun 19 May 2024 03:42:08 +0000 Manifest next update: Sun 26 May 2024 03:42:08 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: PxY1r154Lc/7cOKRTeNM9mcRYb7rXZ3QarctYpZlC4g=) 2: 5C6E8A88077011EFAC619280C4F9AE02.roa (hash: yce4MsSaFBi7mitzw8R0cVX5ZLmXB45vE1MBtpW5pbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: May 19 03:42:08 2024 GMT Not After : May 26 03:42:08 2024 GMT Subject: CN=66497510-60fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:c7:eb:0d:83:17:d7:26:a5:2e:13:58:61: c2:2a:34:2b:df:94:ab:0b:4c:f8:35:da:d2:d5:9f: a7:5a:a8:05:37:aa:9a:5f:fc:ad:0f:37:06:3f:bd: ea:64:5a:0b:a5:a6:64:e9:29:bb:0e:5c:0c:34:2f: e3:6e:cc:d3:9c:70:0b:d8:2d:db:3c:02:2e:4c:99: 74:31:96:f7:23:f4:24:11:06:56:08:90:03:2c:58: e1:bf:77:d7:40:dd:38:4c:f4:54:06:9c:ab:3f:68: 9b:81:e9:bf:05:90:2d:d6:09:35:16:81:96:32:94: 6b:c6:27:70:ed:0a:ec:2b:4b:de:f9:e0:9a:00:99: d0:15:ab:73:e6:6e:66:c1:c0:a1:6b:61:d1:1a:3d: c6:01:86:cf:12:1e:ff:77:b6:cd:cd:f2:71:f1:00: e5:25:e6:5d:ef:8f:1d:b8:79:d4:d2:f5:2a:8a:37: 41:b6:49:53:57:d1:4b:8b:d6:be:59:d3:26:69:d8: 24:52:69:a3:06:05:1a:f6:64:f8:7f:aa:5c:32:08: 1f:3a:d5:a2:ac:b6:5e:a8:3d:5a:c9:5d:6d:65:d8: b3:6c:bf:9d:42:10:fe:8f:aa:7d:09:79:0e:1f:2b: 99:90:be:17:51:f1:06:dd:a4:f2:c9:9d:a1:1f:10: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:20:67:C3:51:B6:AB:3D:FD:C8:93:09:86:00:FC:6B:DF:BE:C1:96 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fa:c9:a2:24:4b:fa:df:1f:96:65:97:79:66:00:74:60:18: 40:2a:54:f7:e2:14:b8:82:2e:3a:4a:bb:2d:9f:fe:be:51:a4: 7c:bc:c6:9e:c9:b4:a2:6d:4e:d1:2f:b3:20:f0:3a:82:96:77: 21:f4:2b:26:ba:e3:42:5f:31:51:d0:ea:f6:59:11:65:9b:c9: c0:ea:d8:10:20:49:fa:25:62:65:79:04:93:1d:c1:81:99:ce: ce:43:ab:85:1c:95:1c:2f:31:bf:ae:b6:d2:45:f3:0c:78:00: ad:c7:58:16:2a:24:4c:89:d0:5b:c0:f7:7b:f3:2c:ce:0f:a2: 3f:3b:06:8b:ce:8f:bf:9c:94:eb:06:18:d1:5c:be:96:ae:0a: 30:ab:bf:f4:22:99:f7:49:e5:e2:9d:e6:cb:79:b2:29:01:8b: 34:d3:5a:99:d0:a6:88:e9:36:00:f0:61:11:99:8a:0d:85:d9: 29:ba:cf:14:ca:84:49:37:64:57:50:d1:49:28:72:91:c7:21: bd:0d:b6:46:c9:9e:de:a8:aa:61:14:fc:a7:6c:d1:44:e1:b6: 7c:d8:ec:0e:8f:1e:32:97:59:72:95:61:64:31:01:97:48:b6: 56:61:5d:56:70:9d:4c:b4:cc:db:be:93:db:fc:08:4f:23:14: b0:14:c1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjQwNTE5MDM0MjA4WhcNMjQwNTI2MDM0MjA4WjAYMRYwFAYD VQQDEw02NjQ5NzUxMC02MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJ7H6w2DF9cmpS4TWGHCKjQr35SrC0z4NdrS1Z+nWqgFN6qaX/ytDzcGP73q ZFoLpaZk6Sm7DlwMNC/jbszTnHAL2C3bPAIuTJl0MZb3I/QkEQZWCJADLFjhv3fX QN04TPRUBpyrP2ibgem/BZAt1gk1FoGWMpRrxidw7QrsK0ve+eCaAJnQFatz5m5m wcCha2HRGj3GAYbPEh7/d7bNzfJx8QDlJeZd748duHnU0vUqijdBtklTV9FLi9a+ WdMmadgkUmmjBgUa9mT4f6pcMggfOtWirLZeqD1ayV1tZdizbL+dQhD+j6p9CXkO HyuZkL4XUfEG3aTyyZ2hHxAkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcgZ8NR tqs9/ciTCYYA/GvfvsGWMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+smiJEv63x+WZZd5ZgB0YBhAKlT34hS4gi46Srstn/6+UaR8vMae ybSibU7RL7Mg8DqClnch9CsmuuNCXzFR0Or2WRFlm8nA6tgQIEn6JWJleQSTHcGB mc7OQ6uFHJUcLzG/rrbSRfMMeACtx1gWKiRMidBbwPd78yzOD6I/OwaLzo+/nJTr BhjRXL6Wrgowq7/0Ipn3SeXinebLebIpAYs001qZ0KaI6TYA8GERmYoNhdkpus8U yoRJN2RXUNFJKHKRxyG9DbZGyZ7eqKphFPynbNFE4bZ82OwOjx4yl1lylWFkMQGX SLZWYV1WcJ1MtMzbvpPb/AhPIxSwFMG8 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org