$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: vEXb0tM8hjuZ3aPDKxf8FUmf84Sekm6RGGwcNF1Oz/I= Subject key identifier: 80:93:61:6C:77:E5:86:D7:A9:B4:BE:FE:56:E1:77:A6:0E:F5:22:3D Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 79 Signing time: Fri 17 May 2024 07:25:45 +0000 Manifest this update: Fri 17 May 2024 07:25:45 +0000 Manifest next update: Fri 24 May 2024 07:25:45 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: d2onsuM7zHDxdV9cypRsZrG2Y6ZUAATdlbTm6BrT0Do=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: zms8u9wzpkFSLmRvDkTyoRIiatdqYJeCfoGbWIDPnr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: May 17 07:25:45 2024 GMT Not After : May 24 07:25:45 2024 GMT Subject: CN=66470679-7d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:d8:b7:43:95:72:16:7e:7a:70:b9:6d:fd: 53:f7:02:11:ab:91:e1:c7:e3:a7:5a:cb:a6:d3:b2: 03:b8:c7:25:a8:4b:e6:a8:b6:33:66:51:3a:9e:63: 4c:79:94:06:69:aa:f3:48:fb:ee:a2:d0:4d:d0:23: 07:be:ef:1f:13:d1:f8:e6:12:6e:a0:d8:e9:4e:fd: 2e:b6:64:20:96:4c:ae:22:ba:6c:98:fe:ef:a3:09: 60:73:9b:86:bf:44:a9:92:01:c1:4f:97:39:da:f8: ec:09:88:b9:6a:37:65:2d:dd:97:43:e8:e7:36:36: f0:cd:d3:59:0a:a8:82:88:86:95:c9:5a:58:08:66: f5:ff:4a:82:8b:22:74:f9:c2:8f:02:4c:ba:4e:bc: 90:14:65:87:14:4a:3e:4f:22:49:22:6c:ad:fa:66: 4d:71:4d:a2:7f:52:e1:d8:02:f6:f2:b6:18:38:82: 4d:cc:5e:5b:ca:23:02:4c:04:0d:19:52:b5:7b:28: 67:ae:50:66:dd:57:ec:6e:03:3c:b4:2b:f7:77:64: 50:0c:17:b2:cc:f0:88:97:32:ec:4e:d7:5e:06:99: 80:e3:0a:6c:c5:73:cc:c0:11:cf:d3:12:e1:65:93: 09:4b:c6:b1:28:8d:30:c0:48:33:6e:1d:f5:80:28: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:93:61:6C:77:E5:86:D7:A9:B4:BE:FE:56:E1:77:A6:0E:F5:22:3D X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ae:28:55:05:0e:7d:ba:96:ee:73:42:60:cf:52:de:6f:b7: f0:f1:34:a5:99:df:6f:62:1b:24:e0:9b:1c:d3:c5:a8:c1:b7: 66:41:d7:c7:df:9d:65:85:f0:8c:49:a9:a3:89:7b:3e:1c:e8: db:91:a8:40:c1:ec:64:e0:4c:b5:cb:e0:25:b6:22:63:81:f8: d6:3d:de:31:53:42:16:9f:10:4e:b2:0e:85:81:74:e4:ed:25: fe:9d:74:aa:20:eb:99:d7:86:67:67:f0:89:76:1e:1a:75:25: f6:b8:03:5e:5a:de:71:b5:12:77:c0:54:e7:2d:10:c9:c3:ae: 94:0c:97:04:9e:05:49:b8:9f:69:6d:b7:e2:37:05:65:33:1a: 33:64:03:56:d1:2e:33:19:49:21:a6:69:22:b6:b8:ee:03:9c: 1f:50:7b:e7:bd:f0:d5:4c:0c:aa:7a:e9:22:5d:9b:7f:91:2e: a4:e1:3f:bd:30:94:7c:d8:c5:9c:cb:c2:d3:7b:84:48:8e:15: 2d:63:ef:ab:fd:c2:7b:cf:17:7c:44:7b:1d:3d:99:6a:fd:39: 34:11:83:e9:f0:ac:85:d6:8d:66:02:a6:d1:05:61:a2:a1:bf: 04:5c:20:ac:70:d0:6a:fc:fa:cf:8e:12:14:c2:e7:9f:45:21: 25:be:fb:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRCNDExMC8GA1UEBRMoQjdDOTc5NUZGRjdGNjlDRjMzQjc2NTFDNkI5OTI2QTcz MEQ5NzU5QzAeFw0yNDA1MTcwNzI1NDVaFw0yNDA1MjQwNzI1NDVaMBgxFjAUBgNV BAMTDTY2NDcwNjc5LTdkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGYNi3Q5VyFn56cLlt/VP3AhGrkeHH46day6bTsgO4xyWoS+aotjNmUTqeY0x5 lAZpqvNI++6i0E3QIwe+7x8T0fjmEm6g2OlO/S62ZCCWTK4iumyY/u+jCWBzm4a/ RKmSAcFPlzna+OwJiLlqN2Ut3ZdD6Oc2NvDN01kKqIKIhpXJWlgIZvX/SoKLInT5 wo8CTLpOvJAUZYcUSj5PIkkibK36Zk1xTaJ/UuHYAvbythg4gk3MXlvKIwJMBA0Z UrV7KGeuUGbdV+xuAzy0K/d3ZFAMF7LM8IiXMuxO114GmYDjCmzFc8zAEc/TEuFl kwlLxrEojTDASDNuHfWAKEW9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgJNhbHfl hteptL7+VuF3pg71Ij0wHwYDVR0jBBgwFoAUt8l5X/9/ac8zt2Uca5kmpzDZdZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREI0LzNDMDlCM0ZBNUNF MjExRUVBRjQyREU2MkM0RjlBRTAyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRa dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDhsNVhfOV9hYzh6dDJVY2E1a21wekRaZFp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REI0LzNDMDlCM0ZBNUNFMjExRUVBRjQyREU2MkM0RjlBRTAyL3Q4bDVYXzlfYWM4 enQyVWNhNWttcHpEWmRady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyuKFUFDn26lu5zQmDPUt5vt/DxNKWZ329iGyTgmxzTxajBt2ZB18ff nWWF8IxJqaOJez4c6NuRqEDB7GTgTLXL4CW2ImOB+NY93jFTQhafEE6yDoWBdOTt Jf6ddKog65nXhmdn8Il2Hhp1Jfa4A15a3nG1EnfAVOctEMnDrpQMlwSeBUm4n2lt t+I3BWUzGjNkA1bRLjMZSSGmaSK2uO4DnB9Qe+e98NVMDKp66SJdm3+RLqThP70w lHzYxZzLwtN7hEiOFS1j76v9wnvPF3xEex09mWr9OTQRg+nwrIXWjWYCptEFYaKh vwRcIKxw0Gr8+s+OEhTC559FISW++3k= -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org