$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: gPm/RjumAgaeFmXIN4aK4T45mN0y7dhFceobzFyfVss= Subject key identifier: B6:39:7C:E7:B2:A4:B8:04:F1:99:C8:18:D7:EC:22:0E:94:8D:C1:4A Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 252C Signing time: Sat 04 May 2024 16:05:21 +0000 Manifest this update: Sat 04 May 2024 16:05:20 +0000 Manifest next update: Sat 11 May 2024 16:05:20 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: 1mRIjOVd0z9xb/9FBLFoQezMArriIM/oi6uOZZLBvBk=) 2: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: B3hRYF0bO26k9gxz4EV9GoirQCVy5mfb+aHOF6vK71Q=) 3: 5AC80410239811ED9B68AC57C4F9AE02.roa (hash: RXwe0BQki/AVlstsZqOsFp+Gsdfp+aVHzSNAAW4JxLw=) 4: 79BBF6CEBFBE11EEBAF6BD16C4F9AE02.roa (hash: UywmbUkTdncFkpRemFveireVQn6JCFcZG3+KTDoL+z0=) 5: AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa (hash: xZnRQuGmH+tPK553xhJr/YwZYByUzuaoNBPGfXz/s1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9605 (0x2585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: May 4 16:05:20 2024 GMT Not After : May 11 16:05:20 2024 GMT Subject: CN=66365cc1-e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:85:7e:2b:45:0b:1d:1a:24:71:3a:c3:d6: 1c:ed:4a:f9:23:8e:8f:ee:bb:5f:22:87:ee:c7:cc: 0e:56:8d:4d:70:7e:90:bb:e0:0f:d0:91:c0:1e:03: ad:cb:d6:ca:a1:4a:6b:66:b6:ab:c8:df:b0:4c:29: 1b:ad:a8:c5:73:5e:e7:16:54:75:c8:5a:35:f1:0e: a2:5b:69:43:1f:09:cb:66:5a:fa:bd:f3:a9:60:4f: 10:92:53:e0:be:76:30:c9:bb:22:c3:44:0b:65:ee: 90:46:bb:cb:93:ab:e1:b4:5a:aa:dd:1a:c1:5e:28: 48:e0:de:4b:27:41:ae:4d:94:3a:e0:39:09:b5:26: 75:9e:67:31:8a:f2:5c:e0:eb:72:8d:19:54:21:71: 88:c1:09:21:90:98:c5:6e:17:29:5f:4d:8c:be:f1: 6e:ee:41:90:da:97:b7:15:3f:ce:0e:d0:d1:b0:83: 0b:6f:b1:a9:1f:8d:45:97:db:4f:5d:96:69:5a:a3: c2:cb:10:5f:f4:60:a5:51:a1:70:5d:64:14:f3:50: 4a:a2:5c:48:37:2a:6c:fd:b3:bf:73:95:e3:d9:e7: 31:15:d1:18:b4:85:83:76:28:e2:c2:55:bf:81:34: 30:de:dc:1f:aa:22:c2:37:24:0f:c2:f4:d7:ca:bb: c3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:39:7C:E7:B2:A4:B8:04:F1:99:C8:18:D7:EC:22:0E:94:8D:C1:4A X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3d:12:7e:e7:7e:e0:84:3b:b7:7d:30:4b:dd:41:af:4a:64: da:74:66:ee:57:d9:ad:c2:23:9f:89:0b:e5:4d:8b:87:34:77: 3c:31:98:29:c7:20:d6:6f:92:34:28:7d:a7:6f:9d:74:9a:6f: 9b:f7:2c:e4:79:15:21:59:89:32:47:fa:29:22:e4:b6:5d:dc: 78:24:cf:68:a1:94:5b:25:0e:63:ae:94:61:3a:c4:89:47:aa: b8:d5:a2:44:cd:8b:f0:9b:21:b0:e6:5b:e2:e9:a6:6c:66:5a: 23:00:6c:f6:a8:b3:ef:ae:69:34:4b:c8:9f:99:7c:8a:99:4b: 1f:97:3a:29:19:a4:c2:e6:14:d3:af:f1:5f:a2:db:7e:4e:0d: 28:c9:29:84:98:c8:90:99:80:62:6c:30:25:62:ce:5c:a4:cd: 3d:02:ea:e4:fb:96:35:ee:b7:4a:7a:fd:01:35:45:f7:f6:b4: f3:a8:d5:58:5d:36:06:94:37:dd:1e:62:62:c7:01:a9:b4:ba: 1f:30:9a:a4:3a:df:6c:99:f9:03:e4:63:bc:a3:c2:bc:d2:63: e5:d4:7f:de:6f:bf:ae:00:c0:fe:1c:49:c4:06:3c:dc:bf:39: ff:0a:1b:8b:fb:72:72:c3:09:bf:2d:e6:fa:42:70:42:d2:6e: 84:61:0f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQwNTA0MTYwNTIwWhcNMjQwNTExMTYwNTIwWjAYMRYwFAYD VQQDEw02NjM2NWNjMS1lMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQqFfitFCx0aJHE6w9Yc7Ur5I46P7rtfIofux8wOVo1NcH6Qu+AP0JHAHgOt y9bKoUprZraryN+wTCkbrajFc17nFlR1yFo18Q6iW2lDHwnLZlr6vfOpYE8QklPg vnYwybsiw0QLZe6QRrvLk6vhtFqq3RrBXihI4N5LJ0GuTZQ64DkJtSZ1nmcxivJc 4OtyjRlUIXGIwQkhkJjFbhcpX02MvvFu7kGQ2pe3FT/ODtDRsIMLb7GpH41Fl9tP XZZpWqPCyxBf9GClUaFwXWQU81BKolxINyps/bO/c5Xj2ecxFdEYtIWDdijiwlW/ gTQw3twfqiLCNyQPwvTXyrvDbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY5fOey pLgE8ZnIGNfsIg6UjcFKMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIPRJ+537ghDu3fTBL3UGvSmTadGbuV9mtwiOfiQvlTYuHNHc8MZgp xyDWb5I0KH2nb510mm+b9yzkeRUhWYkyR/opIuS2Xdx4JM9ooZRbJQ5jrpRhOsSJ R6q41aJEzYvwmyGw5lvi6aZsZlojAGz2qLPvrmk0S8ifmXyKmUsflzopGaTC5hTT r/Ffott+Tg0oySmEmMiQmYBibDAlYs5cpM09Aurk+5Y17rdKev0BNUX39rTzqNVY XTYGlDfdHmJixwGptLofMJqkOt9smfkD5GO8o8K80mPl1H/eb7+uAMD+HEnEBjzc vzn/ChuL+3Jywwm/Leb6QnBC0m6EYQ/w -----END CERTIFICATE-----Generated at Sat May 4 17:19:48 2024 by rpki-client on console-fra.rpki-client.org