$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: +LALZ8HaHUp10s9tXkpq8yE0lamBgG61RXW4494nXts= Subject key identifier: EA:7E:7A:CF:BE:B6:B6:6A:59:24:D9:9F:ED:AA:C9:AA:37:D9:1B:9A Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 22 Signing time: Fri 31 May 2024 09:32:57 +0000 Manifest this update: Fri 31 May 2024 09:32:56 +0000 Manifest next update: Fri 07 Jun 2024 09:32:56 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: ySmD4IFV854Qyo/wEywjGS0tFSbCoVBG7he+7e+hfRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: May 31 09:32:56 2024 GMT Not After : Jun 7 09:32:56 2024 GMT Subject: CN=66599949-adba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8d:9b:e4:2d:32:04:75:a4:00:49:5d:12:11: b7:3b:57:13:13:2b:5c:63:95:e7:7a:46:d1:eb:09: c0:e8:60:66:63:df:c4:d2:e9:d8:11:6b:90:e0:58: e1:33:b3:ad:e3:53:9f:84:a1:f8:e5:17:2d:da:b9: 7f:3f:81:f1:67:31:fd:ad:07:5e:b1:66:45:67:ab: fe:02:59:6b:51:73:07:88:2e:21:78:e1:ca:d8:27: 33:ad:15:27:c2:83:e3:d4:43:0f:37:0f:ba:e1:7e: a3:dc:57:f2:fe:81:bd:5a:4d:46:fb:a6:3a:8b:6f: 91:dc:36:18:a1:f7:50:99:93:b5:7a:7b:3c:ce:05: 48:b0:99:ee:c2:e6:94:2d:4c:1c:19:71:95:63:73: 1f:09:dc:c1:e3:b1:ab:75:a5:6c:86:e7:8c:79:40: ef:ba:b7:2e:0d:ab:7d:e2:80:69:fa:ec:c6:e6:e0: e7:a8:fb:4e:f4:38:07:d4:b3:df:f7:53:7e:7c:bd: e9:99:02:30:7a:62:8a:53:5b:a7:cb:4c:f4:d0:91: f5:56:1a:94:5e:16:d6:cb:65:dc:dc:3d:64:66:34: e1:0e:89:d8:f1:26:95:38:c1:d0:9b:52:5f:d5:53: 7d:7d:ab:7d:57:55:eb:14:7c:6f:75:6f:fc:2f:2f: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7E:7A:CF:BE:B6:B6:6A:59:24:D9:9F:ED:AA:C9:AA:37:D9:1B:9A X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:36:e7:82:8f:78:26:69:91:ee:b4:15:65:3f:df:8d:35:6b: e9:2b:a1:c3:95:7e:32:50:6f:52:f6:59:f0:f7:54:d1:c5:69: 9f:c6:36:67:e4:95:9e:99:44:0f:29:1b:90:4b:5a:2e:f6:01: 62:bd:5f:37:51:eb:1d:b9:a8:12:b2:35:b6:6a:7c:6e:fe:46: dc:5b:72:fd:9f:1a:90:fb:31:60:d9:52:2d:13:f1:02:6b:c3: c0:16:0d:bd:28:88:6f:7f:cc:8c:e4:3c:0e:50:9f:0d:90:34: df:d0:71:1d:ce:66:c8:43:e4:2f:c2:e4:87:cc:61:65:a9:2c: 6f:4d:e6:79:2f:2e:b0:82:6e:ec:ea:2a:bb:5b:91:b1:e9:59: 79:1e:c1:5d:a6:b9:dd:c6:5b:b1:77:8c:b0:04:5d:d0:97:0f: 10:28:15:03:34:7b:97:40:5e:85:d4:85:ef:79:43:03:c8:85: 9e:8d:92:1b:35:6d:49:ac:04:c2:af:3b:63:2e:36:ef:76:b0: ef:2f:8b:2b:d9:44:d4:b9:8a:ea:15:b7:6b:24:33:fc:d3:48: ea:d1:4c:8b:fe:64:38:2b:97:1d:9f:0b:85:86:43:ef:c5:68: f4:bb:0a:56:2f:35:e2:69:e8:50:85:ea:43:46:c0:31:37:7a: ca:77:ba:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0ZBRDExMC8GA1UEBRMoMDNGRjA2NTdDMEVDRjg3Mzk4MzAzM0Y3QzZDNjQ4OEIz Mzc4OUM0MzAeFw0yNDA1MzEwOTMyNTZaFw0yNDA2MDcwOTMyNTZaMBgxFjAUBgNV BAMTDTY2NTk5OTQ5LWFkYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWjZvkLTIEdaQASV0SEbc7VxMTK1xjled6RtHrCcDoYGZj38TS6dgRa5DgWOEz s63jU5+EofjlFy3auX8/gfFnMf2tB16xZkVnq/4CWWtRcweILiF44crYJzOtFSfC g+PUQw83D7rhfqPcV/L+gb1aTUb7pjqLb5HcNhih91CZk7V6ezzOBUiwme7C5pQt TBwZcZVjcx8J3MHjsat1pWyG54x5QO+6ty4Nq33igGn67Mbm4Oeo+070OAfUs9/3 U358vemZAjB6YopTW6fLTPTQkfVWGpReFtbLZdzcPWRmNOEOidjxJpU4wdCbUl/V U319q31XVesUfG91b/wvL2+DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6n56z762 tmpZJNmf7arJqjfZG5owHwYDVR0jBBgwFoAUA/8GV8Ds+HOYMDP3xsZIizN4nEMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDRkFELzU2MUQ2NjJFRUEw NDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5F TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV84R1Y4RHMtSE9ZTURQM3hzWklpek40bkVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD RkFELzU2MUQ2NjJFRUEwNDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhP WU1EUDN4c1pJaXpONG5FTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQ254KPeCZpke60FWU/3401a+krocOVfjJQb1L2WfD3VNHFaZ/GNmfk lZ6ZRA8pG5BLWi72AWK9XzdR6x25qBKyNbZqfG7+Rtxbcv2fGpD7MWDZUi0T8QJr w8AWDb0oiG9/zIzkPA5Qnw2QNN/QcR3OZshD5C/C5IfMYWWpLG9N5nkvLrCCbuzq KrtbkbHpWXkewV2mud3GW7F3jLAEXdCXDxAoFQM0e5dAXoXUhe95QwPIhZ6Nkhs1 bUmsBMKvO2MuNu92sO8viyvZRNS5iuoVt2skM/zTSOrRTIv+ZDgrlx2fC4WGQ+/F aPS7ClYvNeJp6FCF6kNGwDE3esp3ur0= -----END CERTIFICATE-----Generated at Fri May 31 13:04:16 2024 by rpki-client on console-ams.rpki-client.org