$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json) Hash identifier: ruH5T4oSkC5DDox4QzPFoj0vnG4qW+KNS930uDyza9k= Subject key identifier: 98:64:DC:DC:0D:EE:2B:BA:01:7D:61:1E:1F:E7:5E:E6:AD:54:E0:27 Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft Manifest number: A8 Signing time: Sun 19 May 2024 06:41:14 +0000 Manifest this update: Sun 19 May 2024 06:41:14 +0000 Manifest next update: Sun 26 May 2024 06:41:14 +0000 Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: Qjh9GvW3o+OD/GJIKvJdviZeLx2QF6qF2VYEtbSNvi0=) 2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: SF9Y/S/Ql9q4YuiPXmmr85flblCi8Ls3X2BfxxKztwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Validity Not Before: May 19 06:41:14 2024 GMT Not After : May 26 06:41:14 2024 GMT Subject: CN=66499f0a-8985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:49:34:97:8b:3c:35:00:88:91:c4:76:2a: 1d:46:23:db:2d:cb:8e:76:8d:c9:14:8a:9d:49:e9: 37:db:ae:60:6c:9d:3f:36:8a:27:44:ca:b4:e9:34: 8a:99:93:98:be:60:e6:bb:ed:03:89:23:42:b0:ad: 45:44:24:e6:35:36:6d:8b:15:72:e2:df:3b:fb:98: e2:fc:8c:c8:0f:55:65:6b:dc:e3:13:6c:f8:5c:d8: 86:4d:7d:94:e2:84:8a:94:90:55:63:7a:35:a5:d4: 08:07:3d:5e:6c:a0:d3:4e:0a:2b:c7:40:92:f0:60: 1a:b5:ce:82:a6:cc:23:31:a9:74:e9:5d:1f:4b:97: 29:49:b8:7b:3d:2e:83:9d:21:66:73:e2:e6:bd:da: 2f:70:98:75:03:37:8f:65:b1:af:bc:d8:e1:1f:38: 36:e1:df:6e:59:c6:fd:f2:84:0c:b3:f4:a0:9a:72: e4:c4:61:7c:37:a7:08:a5:eb:9b:da:bf:fe:5f:e7: 02:1d:e7:76:eb:30:89:89:be:d4:88:a0:a9:f0:77: 93:68:46:f0:ba:c5:2b:0d:05:bb:95:1e:ad:fe:36: b3:9c:2c:ce:09:69:25:ef:0a:6c:19:6f:af:d5:24: 02:c2:b0:35:47:03:36:02:ff:16:46:14:11:34:e0: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:64:DC:DC:0D:EE:2B:BA:01:7D:61:1E:1F:E7:5E:E6:AD:54:E0:27 X509v3 Authority Key Identifier: keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:d7:89:b7:88:4a:32:6c:5d:7b:e0:ce:db:fd:f8:65:a1: b6:57:8a:14:71:0e:d1:70:6a:00:68:a6:e0:32:29:e0:0b:1b: fc:36:3c:ac:b3:a8:53:bd:54:4e:9a:09:54:e5:39:c6:62:0a: 22:e2:da:57:d8:ca:c8:6b:de:a3:a2:e1:fc:35:57:53:22:fd: eb:38:a9:c0:49:25:36:dc:f6:eb:48:7d:d7:70:7d:ea:19:c5: bf:08:a9:23:e1:b9:af:bc:db:c5:6d:49:8d:c5:2b:82:28:9b: 2f:d8:e3:13:d9:6d:d2:76:2d:91:13:e0:2e:cb:22:2b:ed:9e: bc:e2:3e:b0:16:1b:44:6e:a8:a8:03:38:87:67:7b:f3:fe:38: 80:46:4e:e1:65:56:fb:da:98:74:64:74:77:43:07:8e:0d:e2: 93:20:51:6f:ff:8e:6a:f4:d9:bc:57:97:bd:44:39:71:b7:8a: 24:78:d5:4e:c4:86:e2:ab:2a:13:c1:b9:d2:fd:2f:9e:14:9e: d3:89:76:ab:fc:22:f5:21:9e:d9:73:b6:8f:7a:9d:8a:11:3b: 40:80:78:24:4d:0c:ed:ab:29:43:ca:18:6e:41:76:ae:b0:ce: 51:80:7d:be:bb:5e:83:a7:0a:ce:3b:80:57:87:f7:e0:35:6a: dd:a3:4b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3 MkZGRDE4NDkwHhcNMjQwNTE5MDY0MTE0WhcNMjQwNTI2MDY0MTE0WjAYMRYwFAYD VQQDEw02NjQ5OWYwYS04OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z9JNJeLPDUAiJHEdiodRiPbLcuOdo3JFIqdSek3265gbJ0/NoonRMq06TSK mZOYvmDmu+0DiSNCsK1FRCTmNTZtixVy4t87+5ji/IzID1Vla9zjE2z4XNiGTX2U 4oSKlJBVY3o1pdQIBz1ebKDTTgorx0CS8GAatc6CpswjMal06V0fS5cpSbh7PS6D nSFmc+LmvdovcJh1AzePZbGvvNjhHzg24d9uWcb98oQMs/SgmnLkxGF8N6cIpeub 2r/+X+cCHed26zCJib7UiKCp8HeTaEbwusUrDQW7lR6t/jaznCzOCWkl7wpsGW+v 1SQCwrA1RwM2Av8WRhQRNOCUyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhk3NwN 7iu6AX1hHh/nXuatVOAnMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3 REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+t9eJt4hKMmxde+DO2/34ZaG2V4oUcQ7RcGoAaKbgMingCxv8Njys s6hTvVROmglU5TnGYgoi4tpX2MrIa96jouH8NVdTIv3rOKnASSU23PbrSH3XcH3q GcW/CKkj4bmvvNvFbUmNxSuCKJsv2OMT2W3Sdi2RE+AuyyIr7Z684j6wFhtEbqio AziHZ3vz/jiARk7hZVb72ph0ZHR3QweODeKTIFFv/45q9Nm8V5e9RDlxt4okeNVO xIbiqyoTwbnS/S+eFJ7TiXar/CL1IZ7Zc7aPep2KETtAgHgkTQztqylDyhhuQXau sM5RgH2+u16DpwrOO4BXh/fgNWrdo0v/ -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org