$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: 2xpU49dJDL5/EC8ktZBjAFBcEdDi5NBqgQmho0l7Yao= Subject key identifier: 08:28:E9:D7:CD:02:A1:C5:A9:15:34:F4:FF:9E:E8:E7:0F:80:34:7C Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 0271 Signing time: Sun 05 May 2024 03:52:58 +0000 Manifest this update: Sun 05 May 2024 03:52:57 +0000 Manifest next update: Sun 12 May 2024 03:52:57 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: zFurXXRVrTpAmANT4AaWLBYnc+Jtm5rXGM5ZPvjkcmY=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: gipNYRzhnJVMA8RXxGedDi645XLAV/oXItIEnYNnW7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: May 5 03:52:57 2024 GMT Not After : May 12 03:52:57 2024 GMT Subject: CN=66370299-acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:26:36:e8:e5:86:bb:77:42:1b:95:a7:7a: f5:05:38:ab:5a:c8:cf:e1:e4:b3:ff:27:1b:9c:42: 6c:f8:99:ab:c3:1c:2f:ad:e1:d5:24:15:f5:d6:45: a2:15:5f:93:26:7c:be:a9:7c:f9:c2:7d:79:5e:87: b6:cb:41:a1:c8:eb:b9:44:6b:e9:08:71:2b:6e:c3: 46:98:5e:0e:d4:4d:ad:ad:39:70:a4:d6:64:9d:15: 0f:8f:7d:87:48:ac:2c:fd:72:d1:71:22:ea:fb:2d: 0c:97:b7:ee:7d:b0:14:cd:e3:87:85:82:ef:dd:46: a9:6e:a0:71:1a:1c:3d:12:18:0a:e8:c1:f0:1c:6b: 53:3f:a3:41:0b:af:26:36:70:f9:44:f4:4b:16:45: 43:67:bd:5c:41:3c:90:f6:54:8c:57:e2:a3:07:a2: 8f:61:66:8f:6e:01:0f:61:d7:a1:cb:8a:33:2c:50: 39:da:f7:22:4d:3e:ee:ee:a2:15:7b:7e:cd:af:bc: 4c:ce:fd:82:cc:c4:06:12:15:6f:a3:ea:1b:b8:a5: 08:a9:dc:c2:05:5e:8d:30:da:91:25:60:8e:d6:f8: a7:7c:a4:01:7b:2c:2c:c4:3e:72:50:ca:73:21:7b: 8a:06:67:61:54:38:82:1d:c3:8e:a2:ba:46:f5:77: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:28:E9:D7:CD:02:A1:C5:A9:15:34:F4:FF:9E:E8:E7:0F:80:34:7C X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:30:d6:cd:37:15:4e:ea:5b:ac:8a:b3:3c:f2:62:9a:94:ec: a6:60:10:b8:69:c0:3b:74:7e:f3:2a:67:49:67:8c:da:10:a8: 27:60:4a:cd:7f:da:e6:81:67:98:56:cb:7d:9a:7c:1b:9c:34: 11:a0:ed:cd:df:7a:2b:5d:ac:00:56:64:a6:dc:9c:76:3e:f3: ef:53:1a:47:47:0c:28:fe:22:30:3d:02:37:df:9d:90:db:ef: 6d:50:83:a7:dd:1d:c0:03:52:81:5b:88:3c:af:4c:3d:1d:3b: 6f:20:de:86:6e:57:1b:f9:f4:20:13:c8:6f:dd:51:7e:d0:91: 36:d8:e2:15:d3:3a:93:df:52:ef:e9:45:60:da:4d:86:b7:16: c5:1b:83:93:90:0c:ae:fb:a5:3d:f6:51:56:1e:68:7f:c2:dc: ac:9e:c9:34:83:90:ec:c1:9a:37:86:fd:a8:ec:6b:53:68:8a: 6b:04:67:20:d8:0f:3b:b8:f3:67:e0:a5:e0:1b:66:31:1a:99: dc:b3:ab:51:45:27:80:5e:6f:00:9f:6d:c9:32:5d:d0:b8:08: f9:9a:00:e3:c4:92:a1:28:8e:ed:d6:49:06:ce:18:98:25:e6: b8:94:89:59:dd:01:8b:9a:12:62:9e:79:26:ff:a1:09:76:71: 5d:99:d2:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjQwNTA1MDM1MjU3WhcNMjQwNTEyMDM1MjU3WjAYMRYwFAYD VQQDEw02NjM3MDI5OS1hY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55ImNujlhrt3QhuVp3r1BTirWsjP4eSz/ycbnEJs+JmrwxwvreHVJBX11kWi FV+TJny+qXz5wn15Xoe2y0GhyOu5RGvpCHErbsNGmF4O1E2trTlwpNZknRUPj32H SKws/XLRcSLq+y0Ml7fufbAUzeOHhYLv3UapbqBxGhw9EhgK6MHwHGtTP6NBC68m NnD5RPRLFkVDZ71cQTyQ9lSMV+KjB6KPYWaPbgEPYdehy4ozLFA52vciTT7u7qIV e37Nr7xMzv2CzMQGEhVvo+obuKUIqdzCBV6NMNqRJWCO1vinfKQBeywsxD5yUMpz IXuKBmdhVDiCHcOOorpG9XfwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgo6dfN AqHFqRU09P+e6OcPgDR8MB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiMNbNNxVO6lusirM88mKalOymYBC4acA7dH7zKmdJZ4zaEKgnYErN f9rmgWeYVst9mnwbnDQRoO3N33orXawAVmSm3Jx2PvPvUxpHRwwo/iIwPQI3352Q 2+9tUIOn3R3AA1KBW4g8r0w9HTtvIN6Gblcb+fQgE8hv3VF+0JE22OIV0zqT31Lv 6UVg2k2GtxbFG4OTkAyu+6U99lFWHmh/wtysnsk0g5DswZo3hv2o7GtTaIprBGcg 2A87uPNn4KXgG2YxGpncs6tRRSeAXm8An23JMl3QuAj5mgDjxJKhKI7t1kkGzhiY Jea4lIlZ3QGLmhJinnkm/6EJdnFdmdJr -----END CERTIFICATE-----Generated at Sun May 5 04:39:57 2024 by rpki-client on console-ams.rpki-client.org