$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: 6CSfSCzMiiuTd3HvogxJUrVtYOnoizY+TmnnYssdeoM= Subject key identifier: 51:CF:46:12:24:31:A8:1A:A0:E0:F9:80:84:82:72:0D:87:0F:8A:3D Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0367 Signing time: Sat 27 Apr 2024 02:46:26 +0000 Manifest this update: Sat 27 Apr 2024 02:46:26 +0000 Manifest next update: Sat 04 May 2024 02:46:26 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: +yS9kDJ70BwubL2nGh6Rq2rEqdnm1KciH5+RL8vnEkI=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Sv4qHdh5wjpXghb1voZXtKckkq/Y0Mtvw/hp9XCJNM8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: TskSZwQleaOq816sDuWIMjy12yRF2UwrVvxWcHiF2iQ=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: nGaNY9CDuFyJVQqjRjHgwzva8T7JdCmqgCwg48ccEuU=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: U3H6foOXDeR6LbqUbbufyKa0ghb2wZc+6CQBJVYSoZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Apr 27 02:46:26 2024 GMT Not After : May 4 02:46:26 2024 GMT Subject: CN=662c6702-c667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fd:20:4c:5a:b0:43:25:73:83:2c:28:52:6a: b3:f4:02:83:16:29:77:21:5c:1a:19:3e:07:44:0c: 90:8a:19:7e:2b:12:0c:f2:26:5e:a3:b3:85:52:c4: a6:22:38:dd:28:f2:e2:06:47:92:6a:a9:36:53:93: 00:17:d3:42:44:0d:1f:92:71:be:de:e4:c9:96:7a: 87:ff:4a:8a:73:7a:23:82:1e:6a:74:b6:b0:0b:85: ac:e5:dc:ff:92:c5:1e:15:7a:39:4c:8e:74:2a:fa: 40:49:d1:d1:84:68:6c:12:db:f3:7c:27:62:7d:c2: a9:f3:5a:40:28:20:a5:6b:a4:c7:51:d7:40:d5:5d: 49:00:33:2b:4f:c2:c0:e8:b2:ba:e5:38:b9:f3:d4: a7:91:9c:81:98:4c:cf:5f:b4:ae:73:5a:ea:c0:6c: 79:a3:7e:4b:3e:48:e7:cf:cb:d6:56:8c:48:02:ea: e1:a0:ef:d5:1a:a6:73:f9:5f:1b:87:92:84:27:5d: f5:18:59:c5:05:a3:7f:57:05:f5:f5:44:c9:b2:98: d8:e6:a7:1d:2c:22:cd:5f:7d:db:81:b0:94:b9:6c: 7c:8e:c3:7c:25:b9:5d:d3:b5:d2:eb:47:4b:1d:24: af:4e:9e:4f:5a:24:a9:29:69:f0:b1:8a:bc:fb:4d: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CF:46:12:24:31:A8:1A:A0:E0:F9:80:84:82:72:0D:87:0F:8A:3D X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:cd:88:c0:62:03:7d:fe:b4:07:4f:81:91:5d:cf:33:e1:b2: 78:2d:8d:c0:81:cc:4a:ff:b3:ed:2a:c5:a7:8f:70:70:72:41: f7:c7:ad:c2:30:4a:ee:fd:99:cc:cb:b0:c0:9c:50:23:8a:d2: 1d:a5:1f:da:56:f3:80:7a:05:30:0f:75:0e:c8:91:75:f6:58: fc:68:a7:f2:88:03:9e:cf:00:11:00:94:3c:e5:31:70:d5:31: e8:be:0c:86:fb:e3:47:ec:9b:3f:9c:34:5b:8b:99:9b:d8:6c: 6b:30:90:ae:02:65:b0:9f:be:80:d4:ef:ab:8a:1b:9f:81:b3: dc:f2:e3:9f:d3:10:b4:f0:95:88:ea:a7:53:b0:4d:e8:21:1c: 68:af:f4:51:97:9e:99:d3:95:c4:7f:50:63:5c:68:94:7f:ac: fa:c4:e3:12:53:bb:60:a1:50:92:82:6c:28:e1:88:99:1f:10: ca:41:0e:dd:c8:76:c5:1f:6c:31:2b:25:1c:ec:ea:78:3e:b7: 60:6d:8a:08:0d:af:94:f7:16:76:59:18:b3:a1:e1:3a:a5:37: a4:d5:1b:cd:f0:c8:43:76:f4:c4:2f:cd:38:6e:77:b2:32:ed: 44:a8:f4:91:5a:b3:44:7c:a9:5d:5d:54:3b:6b:d2:bb:14:43: 3f:14:bf:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjQwNDI3MDI0NjI2WhcNMjQwNTA0MDI0NjI2WjAYMRYwFAYD VQQDEw02NjJjNjcwMi1jNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6v0gTFqwQyVzgywoUmqz9AKDFil3IVwaGT4HRAyQihl+KxIM8iZeo7OFUsSm IjjdKPLiBkeSaqk2U5MAF9NCRA0fknG+3uTJlnqH/0qKc3ojgh5qdLawC4Ws5dz/ ksUeFXo5TI50KvpASdHRhGhsEtvzfCdifcKp81pAKCCla6THUddA1V1JADMrT8LA 6LK65Ti589SnkZyBmEzPX7Suc1rqwGx5o35LPkjnz8vWVoxIAurhoO/VGqZz+V8b h5KEJ131GFnFBaN/VwX19UTJspjY5qcdLCLNX33bgbCUuWx8jsN8Jbld07XS60dL HSSvTp5PWiSpKWnwsYq8+00dVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHPRhIk MagaoOD5gISCcg2HD4o9MB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkzYjAYgN9/rQHT4GRXc8z4bJ4LY3AgcxK/7PtKsWnj3BwckH3x63C MEru/ZnMy7DAnFAjitIdpR/aVvOAegUwD3UOyJF19lj8aKfyiAOezwARAJQ85TFw 1THovgyG++NH7Js/nDRbi5mb2GxrMJCuAmWwn76A1O+rihufgbPc8uOf0xC08JWI 6qdTsE3oIRxor/RRl56Z05XEf1BjXGiUf6z6xOMSU7tgoVCSgmwo4YiZHxDKQQ7d yHbFH2wxKyUc7Op4PrdgbYoIDa+U9xZ2WRizoeE6pTek1RvN8MhDdvTEL804bney Mu1EqPSRWrNEfKldXVQ7a9K7FEM/FL8B -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org