$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: skHOlThAY7wsf3pN7w4iTdA0qHiPD2sqQB50WUhPwBo= Subject key identifier: DD:B4:AC:6C:1C:B0:A3:09:D4:CC:0B:FB:7A:F0:87:1E:F1:05:74:91 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 04E4 Signing time: Sun 19 May 2024 01:18:10 +0000 Manifest this update: Sun 19 May 2024 01:18:10 +0000 Manifest next update: Sun 26 May 2024 01:18:10 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: T3RKaPo4uBsdv4MDdgceWvYdD6mIUNnnaoh71cz93D8=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: 1gFlLDZEPlRADkZIIRCf6FHg4FghD3uFjKDBnakBIvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: May 19 01:18:10 2024 GMT Not After : May 26 01:18:10 2024 GMT Subject: CN=66495352-83ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:9e:b1:64:a6:dd:cc:d6:99:c0:59:b5:0a: 25:4b:47:f0:2d:3a:a3:d2:75:0d:05:4c:a1:6f:14: bb:c0:eb:17:5a:07:be:9f:33:2c:62:90:62:37:30: 94:33:a1:e0:50:b7:05:20:d1:b9:47:d1:a8:e4:d8: a7:b6:c3:b3:1e:77:28:9b:a3:8d:5c:c7:87:e4:0d: 54:60:aa:85:5b:db:68:5f:dd:f4:a7:93:f5:25:1f: 3f:69:c8:b3:f7:8e:12:7b:c3:31:82:ae:db:f9:80: f6:48:87:79:d7:8e:c7:da:9a:29:62:8a:9d:a7:d5: 6b:67:4b:4f:a4:8d:ec:9e:33:e7:ff:87:d8:bf:9d: b3:53:6a:2b:18:dc:e3:34:73:2f:e1:0b:21:72:82: 60:28:b2:02:3b:e9:2b:5b:3a:01:2e:7c:45:c4:8c: 59:f7:d6:b4:7d:67:fc:81:83:72:27:ec:4c:4b:7b: 2b:f3:5c:70:9e:f6:52:f2:ae:6b:9b:f0:49:7a:15: 4d:db:fe:bd:08:65:9a:a4:59:01:a8:13:8e:1f:1f: 43:0e:bc:34:ab:86:fa:c2:f2:ad:0a:47:14:36:c7: 04:40:8a:e4:b5:c2:8e:f5:78:09:32:ce:f6:c8:f9: 99:b0:c2:76:91:d2:d7:01:9f:2d:d1:d0:59:2b:b8: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B4:AC:6C:1C:B0:A3:09:D4:CC:0B:FB:7A:F0:87:1E:F1:05:74:91 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:42:32:3b:46:3b:a5:6d:b6:32:79:ae:f2:ee:c9:f7:d4:0f: 5d:b9:6f:73:bd:eb:89:c5:96:78:61:e5:cf:98:67:93:7c:aa: 8c:7e:f5:b5:06:9f:5f:67:53:4f:de:3b:d8:58:8f:2a:97:6c: 8b:e8:56:19:8f:35:4c:3f:5b:91:6a:b2:65:d2:d9:bc:49:4b: 5e:44:67:26:2e:28:d1:2d:16:fb:55:69:f1:33:80:4a:6c:50: 7d:17:f2:8c:6b:da:6b:23:34:27:4f:8e:1c:6a:29:44:02:8d: 9a:b5:31:d2:b6:bf:e6:b8:44:9c:4b:20:cf:7a:e7:46:81:f4: 5d:3d:bc:5d:53:32:25:12:25:be:2b:3c:1b:e1:9f:6d:85:e3: 5e:42:b6:9c:67:f5:31:82:c4:8a:bc:dd:84:fe:74:2d:cc:31: bf:c3:ac:3d:f4:75:58:37:0f:9b:e9:c4:b4:17:3f:98:b1:e4: 2d:92:85:b5:93:bc:98:55:08:94:de:21:30:72:30:26:96:09: e1:93:55:26:96:f9:a9:7d:a0:50:3e:bf:25:6e:73:4b:9c:0b: 67:ba:2c:18:40:f0:c4:a1:73:a4:5c:b9:c0:28:ec:22:33:b7: 91:2e:37:74:08:ed:e4:4b:f2:1a:a5:4d:32:ee:a1:48:15:29: e5:11:d7:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjQwNTE5MDExODEwWhcNMjQwNTI2MDExODEwWjAYMRYwFAYD VQQDEw02NjQ5NTM1Mi04M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7aesWSm3czWmcBZtQolS0fwLTqj0nUNBUyhbxS7wOsXWge+nzMsYpBiNzCU M6HgULcFING5R9Go5NintsOzHncom6ONXMeH5A1UYKqFW9toX930p5P1JR8/aciz 944Se8Mxgq7b+YD2SId5147H2popYoqdp9VrZ0tPpI3snjPn/4fYv52zU2orGNzj NHMv4QshcoJgKLICO+krWzoBLnxFxIxZ99a0fWf8gYNyJ+xMS3sr81xwnvZS8q5r m/BJehVN2/69CGWapFkBqBOOHx9DDrw0q4b6wvKtCkcUNscEQIrktcKO9XgJMs72 yPmZsMJ2kdLXAZ8t0dBZK7jJZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN20rGwc sKMJ1MwL+3rwhx7xBXSRMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSQjI7RjulbbYyea7y7sn31A9duW9zveuJxZZ4YeXPmGeTfKqMfvW1 Bp9fZ1NP3jvYWI8ql2yL6FYZjzVMP1uRarJl0tm8SUteRGcmLijRLRb7VWnxM4BK bFB9F/KMa9prIzQnT44cailEAo2atTHStr/muEScSyDPeudGgfRdPbxdUzIlEiW+ Kzwb4Z9theNeQracZ/UxgsSKvN2E/nQtzDG/w6w99HVYNw+b6cS0Fz+YseQtkoW1 k7yYVQiU3iEwcjAmlgnhk1UmlvmpfaBQPr8lbnNLnAtnuiwYQPDEoXOkXLnAKOwi M7eRLjd0CO3kS/IapU0y7qFIFSnlEdfG -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org