$ rpki-client -vvf rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft File: uS8-WIshlDrLuAW_3wsZRL98rDs.mft (raw, json) Hash identifier: x2iRIRq7pT55FtvL5GRXjr6ewh8TsrTfEp2Y3JRQKxY= Subject key identifier: FD:FE:E1:2D:29:78:38:1F:F9:9B:27:34:61:75:5A:89:72:B2:6A:C8 Authority key identifier: B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B Certificate issuer: /CN=A919B0F9/serialNumber=B92F3E588B21943ACBB805BFDF0B1944BF7CAC3B Certificate serial: 1190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft Manifest number: 1186 Signing time: Sat 18 May 2024 17:46:43 +0000 Manifest this update: Sat 18 May 2024 17:46:42 +0000 Manifest next update: Sat 25 May 2024 17:46:42 +0000 Files and hashes: 1: uS8-WIshlDrLuAW_3wsZRL98rDs.crl (hash: F8pfTPOmdfj5wYoTJ2YY5ryPDkqObo/b726lsF8EdfI=) 2: 455880A6ED6D11ED8A822917C4F9AE02.roa (hash: aC4IYAyMGo6nLf4CT/cxfXqFFROm0vKPE8dyF8L1Czw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.crl rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4496 (0x1190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0F9/serialNumber=B92F3E588B21943ACBB805BFDF0B1944BF7CAC3B Validity Not Before: May 18 17:46:42 2024 GMT Not After : May 25 17:46:42 2024 GMT Subject: CN=6648e982-edb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:d9:11:8c:75:cf:fb:2f:7c:1c:b8:70:b4: eb:58:13:f2:5e:14:2f:82:28:a5:cf:bd:b5:b9:fb: 67:ff:1a:6d:26:4b:c4:21:b8:8f:47:a6:d0:f6:e1: b8:84:e3:cd:94:d0:ae:f0:e0:db:62:84:2d:53:60: f2:f5:47:09:c3:e5:33:8e:46:7b:54:15:93:b6:b3: 25:43:0d:6c:83:be:a7:d6:3a:da:0f:b8:1d:b3:82: a8:fd:9c:c4:c7:c3:99:d8:24:b1:1d:33:0a:0e:21: a9:3f:0c:39:ea:8b:02:8d:f9:cc:98:a4:20:ab:b9: bb:f7:67:33:df:e8:d7:38:6b:e3:ca:c0:94:9f:5f: f0:35:1b:15:78:28:4c:58:72:0b:c4:24:e9:d2:fd: f7:d9:c3:15:86:87:5c:9c:91:28:16:17:0f:98:49: 6c:67:93:d3:30:12:67:99:f3:08:56:17:b9:88:66: f4:49:db:d4:c1:33:2b:2f:86:1a:12:4e:16:f1:b1: 10:a4:65:8f:16:c7:83:1a:aa:76:7c:87:ef:f1:b7: 9b:a5:62:62:26:94:93:ea:60:c1:67:12:f9:50:cd: 4b:05:a9:7d:36:58:a0:23:72:da:a2:09:d0:80:87: fd:10:d8:2e:3e:32:d9:cf:c9:76:56:77:5a:0e:6f: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FE:E1:2D:29:78:38:1F:F9:9B:27:34:61:75:5A:89:72:B2:6A:C8 X509v3 Authority Key Identifier: keyid:B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5f:31:6e:f0:f5:b7:df:e4:f8:b0:bc:f8:f2:1f:95:a8:41: d8:68:a3:b0:1e:4f:60:b5:7e:b4:cc:e3:f4:c3:81:b8:f6:5b: d2:b3:87:36:cc:55:80:e8:2b:ea:67:c7:af:e1:8b:c2:04:c5: ac:64:44:cb:58:c6:1e:fa:dc:a4:1c:74:38:f5:ad:b6:c1:62: e1:f7:58:d6:29:d6:65:b9:12:00:92:6e:b8:97:1a:7b:ad:c2: 0c:17:2f:91:56:71:85:c0:ef:96:95:9b:6d:d6:bc:74:75:d7: 6c:4c:1d:eb:b0:29:5d:71:71:5c:c7:c1:ff:44:84:c5:81:14: 67:50:e7:5c:78:31:f4:24:f6:eb:a8:9d:a0:97:ca:37:3b:d0: e2:49:38:f5:ad:3b:fb:26:17:55:13:31:15:a6:88:2a:0e:0a: f8:c4:4b:29:9b:39:6d:7a:f6:b5:fc:32:54:7a:a8:59:af:81: 3c:4b:3c:bc:9d:b0:80:f6:81:72:d8:f4:c6:a9:0c:38:7e:59: b7:45:48:c9:50:5a:60:aa:b7:b4:7b:d2:c9:ed:f5:35:ec:21: b0:c5:48:9a:06:80:07:d0:a5:cd:a0:7e:12:77:39:ff:58:cf: ff:92:0c:78:ed:ec:ab:82:47:7a:1b:79:62:77:7c:b8:57:ae: fd:9c:93:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwRjkxMTAvBgNVBAUTKEI5MkYzRTU4OEIyMTk0M0FDQkI4MDVCRkRGMEIxOTQ0 QkY3Q0FDM0IwHhcNMjQwNTE4MTc0NjQyWhcNMjQwNTI1MTc0NjQyWjAYMRYwFAYD VQQDEw02NjQ4ZTk4Mi1lZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXvZEYx1z/svfBy4cLTrWBPyXhQvgiilz721uftn/xptJkvEIbiPR6bQ9uG4 hOPNlNCu8ODbYoQtU2Dy9UcJw+UzjkZ7VBWTtrMlQw1sg76n1jraD7gds4Ko/ZzE x8OZ2CSxHTMKDiGpPww56osCjfnMmKQgq7m792cz3+jXOGvjysCUn1/wNRsVeChM WHILxCTp0v332cMVhodcnJEoFhcPmElsZ5PTMBJnmfMIVhe5iGb0SdvUwTMrL4Ya Ek4W8bEQpGWPFseDGqp2fIfv8bebpWJiJpST6mDBZxL5UM1LBal9NligI3LaognQ gIf9ENguPjLZz8l2VndaDm/AEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3+4S0p eDgf+ZsnNGF1WolysmrIMB8GA1UdIwQYMBaAFLkvPliLIZQ6y7gFv98LGUS/fKw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjBGOS8xRDJCNUIyQUQ2 QkMxMUU4OTQ1NTBENDJDNEY5QUUwMi91UzgtV0lzaGxEckx1QVdfM3dzWlJMOThy RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTOC1XSXNobERyTHVBV18zd3NaUkw5OHJEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjBGOS8xRDJCNUIyQUQ2QkMxMUU4OTQ1NTBENDJDNEY5QUUwMi91UzgtV0lzaGxE ckx1QVdfM3dzWlJMOThyRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXzFu8PW33+T4sLz48h+VqEHYaKOwHk9gtX60zOP0w4G49lvSs4c2 zFWA6CvqZ8ev4YvCBMWsZETLWMYe+tykHHQ49a22wWLh91jWKdZluRIAkm64lxp7 rcIMFy+RVnGFwO+WlZtt1rx0dddsTB3rsCldcXFcx8H/RITFgRRnUOdceDH0JPbr qJ2gl8o3O9DiSTj1rTv7JhdVEzEVpogqDgr4xEspmzlteva1/DJUeqhZr4E8Szy8 nbCA9oFy2PTGqQw4flm3RUjJUFpgqre0e9LJ7fU17CGwxUiaBoAH0KXNoH4Sdzn/ WM//kgx47eyrgkd6G3lid3y4V679nJMU -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org