$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: nDdly+oAYCDdgdXlrIpMr9FHEfiuyMQW2pVxloCMaR8= Subject key identifier: 08:37:68:77:79:CD:2E:FE:B5:94:9B:A8:8A:DF:FD:DE:99:71:02:09 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 074B Signing time: Thu 02 May 2024 22:41:46 +0000 Manifest this update: Thu 02 May 2024 22:41:46 +0000 Manifest next update: Thu 09 May 2024 22:41:46 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: G98S9fCWYlTSe+4YKFoYBRefG+FV9PtToLS2zPTPzz4=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: May 2 22:41:46 2024 GMT Not After : May 9 22:41:46 2024 GMT Subject: CN=663416aa-3009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:bb:8e:ad:5e:38:65:70:7e:02:2b:7b:fc: 6a:a7:b9:5f:0d:0f:fd:6e:2c:71:0a:4f:b4:41:e3: f1:b4:30:08:e2:f1:49:92:30:fa:44:11:59:d0:92: 5a:04:a1:93:cf:3e:0d:b3:e5:d3:52:05:97:79:3a: 5b:06:ad:d6:51:37:a3:87:35:0e:90:fe:93:b8:2c: e0:c7:59:8f:70:3a:30:21:ba:ce:eb:3b:46:68:8e: c1:26:4f:06:2a:ef:2e:98:34:ba:47:bf:de:bc:24: 9e:5b:78:4f:bb:ba:fd:4c:08:29:26:ec:ac:13:b9: 24:f9:b3:06:ee:08:f0:d3:a3:6c:e5:74:22:aa:20: 75:0e:58:9d:1e:05:3a:db:8a:52:20:71:00:7e:80: b6:6f:47:e7:d7:dd:27:43:2c:ba:4c:a3:22:59:6f: 5e:14:98:59:96:e7:ff:e5:a3:77:4a:8b:31:3c:4a: 40:7d:ed:67:13:10:a3:e3:73:ca:fe:31:fc:fa:cd: fc:53:89:f2:b8:3a:ba:53:6e:ab:24:0b:fe:95:07: e8:84:e6:92:cb:34:ea:f8:b6:09:ee:e5:3c:28:e7: 8c:77:c5:95:b4:72:fd:4e:63:b8:3f:f6:4e:35:df: d8:18:1b:b5:ea:4c:bf:82:6a:e1:6f:42:1e:aa:5e: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:68:77:79:CD:2E:FE:B5:94:9B:A8:8A:DF:FD:DE:99:71:02:09 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8c:13:77:25:6d:3d:12:cb:37:33:13:24:4b:41:50:aa:15: fc:41:31:aa:f3:ef:13:d4:49:76:e9:af:d1:07:d9:95:f8:0a: 45:e2:75:22:6e:4b:31:3a:60:4e:b9:cf:be:b9:6f:bc:46:91: b3:92:39:5c:b5:12:4e:78:34:3b:c4:fa:8a:85:69:79:b3:cc: ba:da:2c:bd:9a:47:a2:c8:d9:77:30:89:a0:68:98:77:b0:a9: 83:94:45:d4:97:70:80:10:83:f8:68:f5:dc:9a:aa:e5:b5:2e: 57:9f:bd:3a:b6:ae:0c:23:aa:38:83:14:22:c5:79:a3:27:f5: 9c:c4:60:2e:49:fa:32:c2:8c:2c:78:51:fc:6b:c6:62:74:33: 4c:e2:6e:18:f9:31:d7:e3:e9:cc:43:d2:dd:d4:30:a8:bb:56: 3b:cd:42:27:b4:91:a2:8f:5b:b8:48:2a:a8:52:e0:18:9c:9f: 45:54:3f:d0:bb:47:1d:d1:02:ba:b5:35:da:6c:de:a2:7d:6c: 69:6d:d3:00:a4:e5:16:03:3f:90:4e:50:fc:99:63:c1:31:5d: f3:ab:72:03:62:5d:e1:08:d2:80:77:50:b7:fa:8e:a6:35:18: af:f0:f0:0c:c5:0e:58:70:53:3a:7f:91:8b:1d:08:5a:93:2e: f5:6e:41:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjQwNTAyMjI0MTQ2WhcNMjQwNTA5MjI0MTQ2WjAYMRYwFAYD VQQDEw02NjM0MTZhYS0zMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fq7jq1eOGVwfgIre/xqp7lfDQ/9bixxCk+0QePxtDAI4vFJkjD6RBFZ0JJa BKGTzz4Ns+XTUgWXeTpbBq3WUTejhzUOkP6TuCzgx1mPcDowIbrO6ztGaI7BJk8G Ku8umDS6R7/evCSeW3hPu7r9TAgpJuysE7kk+bMG7gjw06Ns5XQiqiB1DlidHgU6 24pSIHEAfoC2b0fn190nQyy6TKMiWW9eFJhZluf/5aN3SosxPEpAfe1nExCj43PK /jH8+s38U4nyuDq6U26rJAv+lQfohOaSyzTq+LYJ7uU8KOeMd8WVtHL9TmO4P/ZO Nd/YGBu16ky/gmrhb0Ieql4GwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg3aHd5 zS7+tZSbqIrf/d6ZcQIJMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4jBN3JW09Ess3MxMkS0FQqhX8QTGq8+8T1El26a/RB9mV+ApF4nUi bksxOmBOuc++uW+8RpGzkjlctRJOeDQ7xPqKhWl5s8y62iy9mkeiyNl3MImgaJh3 sKmDlEXUl3CAEIP4aPXcmqrltS5Xn706tq4MI6o4gxQixXmjJ/WcxGAuSfoywows eFH8a8ZidDNM4m4Y+THX4+nMQ9Ld1DCou1Y7zUIntJGij1u4SCqoUuAYnJ9FVD/Q u0cd0QK6tTXabN6ifWxpbdMApOUWAz+QTlD8mWPBMV3zq3IDYl3hCNKAd1C3+o6m NRiv8PAMxQ5YcFM6f5GLHQhaky71bkGi -----END CERTIFICATE-----Generated at Thu May 2 23:19:00 2024 by rpki-client on console-ams.rpki-client.org