$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: ngyYn7sS7mh8iBdkWOaVvQnNoywbGY1KpAxkIY4nH04= Subject key identifier: 65:69:0D:1E:92:93:1E:6A:6F:01:56:09:0E:F3:A9:02:AB:89:BC:FD Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 016F Signing time: Wed 01 May 2024 05:08:30 +0000 Manifest this update: Wed 01 May 2024 05:08:30 +0000 Manifest next update: Wed 08 May 2024 05:08:30 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: PPk4sQVDZGoJIwUOROsHrrbCrO0APsS07bYKbRN2+PE=) 2: D88D9D0C599811EDB1F4F56CC4F9AE02.roa (hash: +l9BLpyglJ11kpVqM8EK7dXd1hgJwh+Oll1+GSEsA4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: May 1 05:08:30 2024 GMT Not After : May 8 05:08:30 2024 GMT Subject: CN=6631ce4e-8c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a7:82:49:10:32:f3:c5:88:a4:58:5c:5d:cd: 1e:39:c7:d0:d3:35:df:0c:03:b7:c5:88:13:c2:6c: 3e:f2:63:e1:a7:c6:7e:13:90:69:d4:12:84:1b:d8: 7a:f4:ae:9a:e6:a0:d8:4a:b1:87:7a:76:56:b0:a6: a7:1e:6d:eb:33:05:3d:88:13:7b:4d:d4:a5:bd:d6: 07:38:76:5f:3e:02:cd:aa:f0:1f:35:ae:26:94:23: 95:5b:32:08:c3:a7:1d:11:8d:4d:f6:99:c5:70:39: 35:06:13:27:f3:df:92:6f:2f:b2:f4:13:41:52:74: 31:f5:71:be:9a:13:4f:fa:1d:82:89:cb:af:74:98: de:e9:a3:86:64:59:6b:00:57:5b:18:50:6e:b6:57: f8:37:b1:e8:d3:b6:0a:ef:9c:ec:73:fe:97:9e:68: 1e:6a:94:8b:ad:ea:66:47:1b:4d:f7:ca:ab:89:72: 53:65:4b:e0:26:41:a1:8e:31:22:c5:8a:a5:a1:0f: f5:ae:9c:d0:d8:00:77:75:07:34:87:56:1f:56:86: 0d:37:b1:f0:8b:59:bb:f4:9e:21:5d:a2:c2:79:27: 05:77:89:a9:30:e8:10:0f:79:21:ce:56:44:0a:f4: 1d:ce:ec:5f:98:fe:57:d9:64:02:37:39:82:05:2e: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:69:0D:1E:92:93:1E:6A:6F:01:56:09:0E:F3:A9:02:AB:89:BC:FD X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ac:2b:e9:8d:55:f0:5b:3a:52:d1:89:1d:50:2c:ba:ce:cd: a1:d5:2d:84:3f:37:14:dc:e3:d2:1c:ed:e3:c9:69:ec:0f:61: 38:c2:ed:e4:48:55:45:69:8e:62:3a:32:d8:61:0b:50:bb:c2: fb:cf:f0:f9:90:3d:f3:20:1b:89:fc:95:1c:42:10:d9:a2:f3: 00:78:87:75:3d:54:ec:5b:8f:53:7a:d5:60:56:f1:69:6d:17: db:53:2d:36:94:c5:c5:9e:34:f7:8c:6b:43:cb:b8:51:5a:9f: 77:ba:40:35:ba:aa:a1:86:20:1c:57:7e:37:ac:64:50:de:37: cf:f2:71:db:ba:d8:06:57:e3:b5:6d:6b:69:30:48:d8:07:bc: c0:78:bb:93:74:4a:34:7b:48:2c:48:5a:1a:50:93:af:af:9f: fa:87:18:f1:20:43:8d:7b:b5:97:71:9a:a0:e8:01:d1:36:82: 3b:59:72:ed:48:f9:6e:69:c5:09:3e:08:a7:d6:dc:62:05:df: e6:0c:da:dc:25:c2:18:f2:a4:cb:f6:83:bf:2d:a8:97:d6:a8: 93:fb:15:03:f9:fc:98:d5:e1:2c:3c:59:c8:60:82:30:c4:f7: a9:03:a7:5c:72:b1:78:bc:18:65:9e:1b:7e:e7:2e:ba:be:e0: 47:56:5a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjQwNTAxMDUwODMwWhcNMjQwNTA4MDUwODMwWjAYMRYwFAYD VQQDEw02NjMxY2U0ZS04YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qeCSRAy88WIpFhcXc0eOcfQ0zXfDAO3xYgTwmw+8mPhp8Z+E5Bp1BKEG9h6 9K6a5qDYSrGHenZWsKanHm3rMwU9iBN7TdSlvdYHOHZfPgLNqvAfNa4mlCOVWzII w6cdEY1N9pnFcDk1BhMn89+Sby+y9BNBUnQx9XG+mhNP+h2CicuvdJje6aOGZFlr AFdbGFButlf4N7Ho07YK75zsc/6XnmgeapSLrepmRxtN98qriXJTZUvgJkGhjjEi xYqloQ/1rpzQ2AB3dQc0h1YfVoYNN7Hwi1m79J4hXaLCeScFd4mpMOgQD3khzlZE CvQdzuxfmP5X2WQCNzmCBS7ezwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVpDR6S kx5qbwFWCQ7zqQKribz9MB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBErCvpjVXwWzpS0YkdUCy6zs2h1S2EPzcU3OPSHO3jyWnsD2E4wu3k SFVFaY5iOjLYYQtQu8L7z/D5kD3zIBuJ/JUcQhDZovMAeId1PVTsW49TetVgVvFp bRfbUy02lMXFnjT3jGtDy7hRWp93ukA1uqqhhiAcV343rGRQ3jfP8nHbutgGV+O1 bWtpMEjYB7zAeLuTdEo0e0gsSFoaUJOvr5/6hxjxIEONe7WXcZqg6AHRNoI7WXLt SPluacUJPgin1txiBd/mDNrcJcIY8qTL9oO/LaiX1qiT+xUD+fyY1eEsPFnIYIIw xPepA6dccrF4vBhlnht+5y66vuBHVlps -----END CERTIFICATE-----Generated at Wed May 1 05:58:59 2024 by rpki-client on console-fra.rpki-client.org