$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: dgCPMWGkTaPz7Afr3MwrMAzvsBuqw5aQtcaFIj/mq0w= Subject key identifier: 53:77:18:16:A3:9D:92:D4:F1:B0:CC:E5:75:67:70:14:1F:3C:57:EB Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0C35 Signing time: Sat 18 May 2024 18:58:41 +0000 Manifest this update: Sat 18 May 2024 18:58:40 +0000 Manifest next update: Sat 25 May 2024 18:58:40 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: d4SRVLwmJe4F7kGeBCL//PZPwTVirMB2I43405kOPas=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: /DiL7fsaC6fY9lff2JZZK7Yh+rRZRWI9dVgzlNELU4U=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: DjLvleFkqk2UcBaYlPkFuqLKT/dYJjEENGItR2OkX0A=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: bSOKtCqELVOl/SRyiuzpOoESsu/f4pkne0nYfp2NKDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: May 18 18:58:40 2024 GMT Not After : May 25 18:58:40 2024 GMT Subject: CN=6648fa61-9fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:af:12:ec:d9:1d:31:57:f6:9c:28:aa:f1: 33:69:f7:73:8a:5d:cc:08:c0:ea:ed:af:fc:36:c3: 58:e7:f1:3b:9f:a0:5f:31:5b:06:ce:db:b0:c8:e4: ab:aa:4a:12:2d:25:c3:12:d7:61:3a:8f:0d:7d:70: a2:05:ec:15:dc:60:a6:ea:08:77:37:4c:06:7b:19: 16:aa:2c:5b:2a:0e:70:eb:e6:bf:61:1a:df:60:00: 4e:15:7d:d9:cc:59:99:8c:0a:28:82:5a:16:f0:f9: 12:58:27:65:8d:89:8d:df:59:69:5a:f7:f7:3a:c1: b4:ea:a2:54:54:76:99:df:02:1d:8c:5c:ab:37:e2: a0:5d:d7:c6:8e:5d:42:7e:f1:93:5b:42:ac:d4:7d: 1f:01:96:2e:af:e1:9c:2e:3b:af:b8:21:70:40:69: cb:9b:58:b6:ae:e1:ee:69:cc:43:88:b9:bb:8c:8c: 98:2b:7e:62:98:ae:14:64:20:26:8e:db:b9:d4:54: 01:d3:6d:ed:7f:1d:b9:2a:4c:9c:33:60:48:c1:40: 2e:c8:c7:0d:a3:75:5c:f7:3d:31:e7:92:e0:8f:b5: fa:5a:3c:f0:af:f2:1f:83:bd:06:e3:c2:0b:81:05: a2:4d:4d:86:70:8a:48:a6:63:22:97:10:b7:00:c3: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:77:18:16:A3:9D:92:D4:F1:B0:CC:E5:75:67:70:14:1F:3C:57:EB X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:2b:97:34:09:13:bc:8d:ca:4c:de:a9:98:b1:86:c8:7e: bd:9a:23:b6:9a:0f:c2:33:bc:66:e4:24:37:9b:3a:a1:9a:63: b3:c7:7b:ff:c1:2f:ff:f4:49:51:18:0c:27:f6:61:3f:09:c9: f0:3e:74:1f:58:c5:dd:07:b2:7b:e8:ca:27:fc:37:bb:52:f1: 72:b3:c4:4d:8c:36:77:e3:3e:42:f8:5d:7e:90:6c:57:1f:e2: 65:69:4e:1d:68:25:5e:a8:51:0b:7b:a8:cc:2b:e2:c0:61:43: 9a:53:56:f9:f1:85:d1:4f:28:26:0d:06:6b:f2:1d:b4:05:45: d1:97:65:7a:f1:6c:16:c2:03:60:fc:dc:db:37:57:e5:a4:87: e0:df:c9:f5:5d:a5:19:e4:9e:50:43:23:d4:20:bf:2e:d9:97: d8:00:b7:71:d1:ac:fa:7e:41:41:e8:96:17:03:82:cc:ce:52: 3c:4f:83:1b:71:9f:ca:3c:be:96:c7:2f:ff:9c:06:5d:af:7b: 1b:e0:e0:48:d3:9a:db:2f:dc:3a:03:20:ef:1f:4d:7f:c7:06: f7:c5:55:b4:24:dc:38:ab:90:ef:b4:ac:61:57:cf:c2:21:68: ac:e2:29:96:5f:98:f5:65:83:80:90:01:e3:c2:93:34:c1:93: ae:2e:e0:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjQwNTE4MTg1ODQwWhcNMjQwNTI1MTg1ODQwWjAYMRYwFAYD VQQDEw02NjQ4ZmE2MS05ZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYmvEuzZHTFX9pwoqvEzafdzil3MCMDq7a/8NsNY5/E7n6BfMVsGztuwyOSr qkoSLSXDEtdhOo8NfXCiBewV3GCm6gh3N0wGexkWqixbKg5w6+a/YRrfYABOFX3Z zFmZjAoogloW8PkSWCdljYmN31lpWvf3OsG06qJUVHaZ3wIdjFyrN+KgXdfGjl1C fvGTW0Ks1H0fAZYur+GcLjuvuCFwQGnLm1i2ruHuacxDiLm7jIyYK35imK4UZCAm jtu51FQB023tfx25KkycM2BIwUAuyMcNo3Vc9z0x55Lgj7X6Wjzwr/Ifg70G48IL gQWiTU2GcIpIpmMilxC3AMMFYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN3GBaj nZLU8bDM5XVncBQfPFfrMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNXSuXNAkTvI3KTN6pmLGGyH69miO2mg/CM7xm5CQ3mzqhmmOzx3v/ wS//9ElRGAwn9mE/CcnwPnQfWMXdB7J76Mon/De7UvFys8RNjDZ34z5C+F1+kGxX H+JlaU4daCVeqFELe6jMK+LAYUOaU1b58YXRTygmDQZr8h20BUXRl2V68WwWwgNg /NzbN1flpIfg38n1XaUZ5J5QQyPUIL8u2ZfYALdx0az6fkFB6JYXA4LMzlI8T4Mb cZ/KPL6Wxy//nAZdr3sb4OBI05rbL9w6AyDvH01/xwb3xVW0JNw4q5DvtKxhV8/C IWis4imWX5j1ZYOAkAHjwpM0wZOuLuBp -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org