$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: CrBeAbn2b/MfkV0bRj+qKKkzfNxjx4L5LLpubztOVxY= Subject key identifier: A1:2F:7C:71:ED:42:93:0D:7B:D6:AE:6B:94:6D:F8:AC:22:A4:97:C2 Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: DF Signing time: Wed 01 May 2024 06:13:38 +0000 Manifest this update: Wed 01 May 2024 06:13:38 +0000 Manifest next update: Wed 08 May 2024 06:13:38 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: CWOzXv/2SidRjQE6aZtQQXrnm58rpkVDDYDRgzQMOgU=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: +JRM8PLLs2K8spHmf62FFoCB9GtAesyOP9jhMm33TUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: May 1 06:13:38 2024 GMT Not After : May 8 06:13:38 2024 GMT Subject: CN=6631dd92-13fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:49:92:9a:2d:91:05:37:c5:0e:11:3e:7f: d8:cd:60:3b:b7:0b:ad:4e:a7:f4:e7:a7:1c:85:dc: e8:28:da:c3:b3:8d:44:58:87:db:78:e8:45:24:af: 97:c2:bb:29:db:5c:cc:4a:d3:0d:46:cb:56:49:5f: 97:b0:db:55:3f:bd:09:05:1b:6e:9b:04:24:01:a8: 45:08:87:64:ed:02:c2:9b:c6:fe:e5:06:38:7b:e3: c6:c8:d9:68:7d:f6:26:88:98:40:cf:44:c2:8f:2d: 65:70:e0:09:b4:27:30:6c:d1:33:4a:7e:c9:d8:80: ad:6c:6e:08:eb:d5:13:bb:36:0d:45:6d:80:de:ea: 83:da:f7:f7:e4:4e:29:7b:16:90:67:ec:98:f2:3d: 2e:0d:dd:6a:aa:13:ab:ed:d1:61:28:f4:73:6a:42: f8:fa:a1:0a:a6:33:0c:bd:52:e3:73:72:58:04:1d: ff:76:7a:8c:6a:9c:e4:05:11:be:18:71:2b:28:7e: 57:91:d6:2c:65:03:d4:44:70:89:db:02:0e:20:a1: 3d:b6:e3:c8:ae:07:e0:6c:43:01:8e:3b:2c:eb:80: 5d:85:d9:0c:bf:21:1e:ce:d1:00:45:b4:a7:86:97: e1:2b:bd:f7:94:1a:85:33:d9:5b:89:9e:69:41:f9: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2F:7C:71:ED:42:93:0D:7B:D6:AE:6B:94:6D:F8:AC:22:A4:97:C2 X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6f:c0:f0:b0:e2:3d:76:20:ae:0a:2a:c0:0a:a4:dd:f8:d3: 84:97:45:ac:e7:a4:d7:f4:e5:d6:21:59:23:87:ac:70:30:40: 7e:55:8f:20:5e:0d:98:ad:39:44:1a:08:a8:ce:b1:34:ce:d3: 8b:4e:e7:05:4b:ec:24:45:32:b1:7b:63:ec:a8:49:57:dd:fd: 02:6f:5f:5a:61:72:c6:2f:a9:d8:03:9b:24:f5:e3:6a:77:fc: 69:33:26:88:4b:a2:9a:9d:d6:97:b3:95:d6:32:18:97:43:e8: ab:72:d1:ab:69:5a:55:1d:ba:6c:8f:ff:8a:50:3c:e5:ce:b8: 34:16:dd:ba:95:6b:be:7a:a3:73:71:54:19:66:02:72:71:0c: cf:2e:26:38:4e:07:8a:2b:42:83:c7:51:63:43:f2:7d:3d:ff: 09:56:9b:99:62:d5:85:ab:43:f4:9e:a8:2c:6f:84:0e:6d:90: a2:2f:38:41:86:d5:16:2e:04:e1:85:b7:0c:36:cc:c8:32:8f: 91:94:0a:7e:fe:fa:33:1c:21:ec:e2:aa:8d:03:58:b5:4d:58: 6f:b2:69:72:5a:6b:dd:20:6e:2e:b5:ce:f8:ad:6a:61:f6:1c: ac:1c:fa:18:c0:bd:16:af:29:ce:a9:41:1f:6a:71:37:ec:dc: 21:6a:3a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjQwNTAxMDYxMzM4WhcNMjQwNTA4MDYxMzM4WjAYMRYwFAYD VQQDEw02NjMxZGQ5Mi0xM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrVJkpotkQU3xQ4RPn/YzWA7twutTqf056cchdzoKNrDs41EWIfbeOhFJK+X wrsp21zMStMNRstWSV+XsNtVP70JBRtumwQkAahFCIdk7QLCm8b+5QY4e+PGyNlo ffYmiJhAz0TCjy1lcOAJtCcwbNEzSn7J2ICtbG4I69UTuzYNRW2A3uqD2vf35E4p exaQZ+yY8j0uDd1qqhOr7dFhKPRzakL4+qEKpjMMvVLjc3JYBB3/dnqMapzkBRG+ GHErKH5XkdYsZQPURHCJ2wIOIKE9tuPIrgfgbEMBjjss64BdhdkMvyEeztEARbSn hpfhK733lBqFM9lbiZ5pQfkC7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEvfHHt QpMNe9aua5Rt+KwipJfCMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvb8DwsOI9diCuCirACqTd+NOEl0Ws56TX9OXWIVkjh6xwMEB+VY8g Xg2YrTlEGgiozrE0ztOLTucFS+wkRTKxe2PsqElX3f0Cb19aYXLGL6nYA5sk9eNq d/xpMyaIS6KandaXs5XWMhiXQ+irctGraVpVHbpsj/+KUDzlzrg0Ft26lWu+eqNz cVQZZgJycQzPLiY4TgeKK0KDx1FjQ/J9Pf8JVpuZYtWFq0P0nqgsb4QObZCiLzhB htUWLgThhbcMNszIMo+RlAp+/vozHCHs4qqNA1i1TVhvsmlyWmvdIG4utc74rWph 9hysHPoYwL0WrynOqUEfanE37Nwhajrj -----END CERTIFICATE-----Generated at Wed May 1 07:23:54 2024 by rpki-client on console-ams.rpki-client.org