$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: bxcMze/l2xDWPmDMNZtaD6vTu/NWPqSRs0p58xuB7K8= Subject key identifier: B0:BC:92:24:51:1F:9D:E6:97:01:3E:F9:19:97:B3:7B:C4:19:88:FB Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0B77 Signing time: Fri 26 Apr 2024 19:20:10 +0000 Manifest this update: Fri 26 Apr 2024 19:20:09 +0000 Manifest next update: Fri 03 May 2024 19:20:09 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: /rQLCwRjtOPCADFPdxzX3vordt3w3e4g2HB4qXKIHwg=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: VYEc6WkGWCnaHCD7rPOCi+MycvwwSAp/cnDEsK4EErk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Apr 26 19:20:09 2024 GMT Not After : May 3 19:20:09 2024 GMT Subject: CN=662bfe69-372e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:3b:a6:e6:b8:01:37:fc:ec:55:8c:e2:f2: c5:bd:2c:bc:21:2b:66:8e:37:95:ca:98:76:db:41: 3d:ac:17:86:06:9f:90:17:61:5d:61:7f:9e:19:fb: 8a:e8:ae:8f:b0:70:28:a2:df:ed:f1:09:bf:c7:c5: b6:d3:f9:8b:0e:c8:11:5d:6a:2c:c4:e9:d3:ec:55: 52:07:db:d6:53:76:c4:59:1f:4b:2e:84:a5:72:6e: 51:a7:8f:86:a2:53:38:83:33:83:b8:ff:e2:e4:b4: 4d:f4:a0:4c:a1:37:45:6a:9d:e2:cc:d2:d8:37:64: 5e:04:f8:a2:3b:33:28:74:68:fc:05:7e:e9:5c:59: ab:c3:25:5b:8a:5a:16:9b:99:1d:d5:07:b3:cd:80: 7c:2e:62:93:2a:39:b8:05:d7:4e:ae:69:82:51:b4: dc:94:83:f1:2d:ad:90:7e:37:17:ac:1e:35:17:79: 17:99:ac:ca:76:63:f0:bf:d0:22:fb:9e:20:ee:71: f6:98:ad:36:21:72:8c:cc:cd:9b:dc:b9:0d:a6:ff: eb:b2:a9:81:7c:36:2e:b7:a4:93:41:50:eb:e4:46: de:fe:38:3a:ee:60:6c:83:ec:40:51:c0:37:4a:7a: 11:19:4e:a4:07:01:02:47:0c:69:f2:fe:f7:1f:05: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:92:24:51:1F:9D:E6:97:01:3E:F9:19:97:B3:7B:C4:19:88:FB X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0a:06:56:f0:3b:bc:1a:63:2d:2b:6a:80:58:dd:24:ac:d5: 60:75:0b:e8:97:5c:43:2a:09:77:63:a7:73:7c:46:68:ae:65: 68:1a:37:06:e4:3f:19:93:20:02:86:f1:58:d5:cd:4f:4b:24: f7:e2:bb:cf:b8:b2:be:e3:cc:14:47:42:7b:d3:7e:53:ee:eb: 5b:e6:0c:29:75:37:8b:80:90:b1:61:ae:36:30:71:fd:09:c2: 04:46:28:07:61:9e:21:87:c2:75:33:cc:9d:1a:ab:f4:33:88: da:5f:93:f7:11:6b:e5:f4:ba:db:79:de:95:03:85:26:a5:b1: 34:eb:f4:e5:90:4d:6b:8e:01:8c:69:a8:c7:d8:eb:9e:55:b3: fc:48:c5:a7:04:ec:e4:19:83:3d:6c:e0:22:f0:3e:c8:96:dc: e4:12:a0:f1:95:ae:0a:0c:ac:87:06:89:2e:ed:4f:cf:13:79: d0:63:20:b9:64:83:be:a9:3c:93:9c:ac:3c:0b:43:d7:b1:af: e5:b5:f9:f0:fd:76:c6:7b:99:f9:73:e9:04:7d:83:cc:b7:b9: a6:f2:cf:5c:40:ef:3f:a1:7f:ee:be:ea:18:1d:68:b1:0e:a5: d2:4b:39:94:12:76:e8:ec:6b:16:b1:07:0f:d7:ad:4f:97:cf: e2:a3:b0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjQwNDI2MTkyMDA5WhcNMjQwNTAzMTkyMDA5WjAYMRYwFAYD VQQDEw02NjJiZmU2OS0zNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRs7pua4ATf87FWM4vLFvSy8IStmjjeVyph220E9rBeGBp+QF2FdYX+eGfuK 6K6PsHAoot/t8Qm/x8W20/mLDsgRXWosxOnT7FVSB9vWU3bEWR9LLoSlcm5Rp4+G olM4gzODuP/i5LRN9KBMoTdFap3izNLYN2ReBPiiOzModGj8BX7pXFmrwyVbiloW m5kd1QezzYB8LmKTKjm4BddOrmmCUbTclIPxLa2QfjcXrB41F3kXmazKdmPwv9Ai +54g7nH2mK02IXKMzM2b3LkNpv/rsqmBfDYut6STQVDr5Ebe/jg67mBsg+xAUcA3 SnoRGU6kBwECRwxp8v73HwW1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8kiRR H53mlwE++RmXs3vEGYj7MB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHCgZW8Du8GmMtK2qAWN0krNVgdQvol1xDKgl3Y6dzfEZormVoGjcG 5D8ZkyAChvFY1c1PSyT34rvPuLK+48wUR0J7035T7utb5gwpdTeLgJCxYa42MHH9 CcIERigHYZ4hh8J1M8ydGqv0M4jaX5P3EWvl9Lrbed6VA4UmpbE06/TlkE1rjgGM aajH2OueVbP8SMWnBOzkGYM9bOAi8D7IltzkEqDxla4KDKyHBoku7U/PE3nQYyC5 ZIO+qTyTnKw8C0PXsa/ltfnw/XbGe5n5c+kEfYPMt7mm8s9cQO8/oX/uvuoYHWix DqXSSzmUEnbo7GsWsQcP161Pl8/io7BK -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:49 2024 by rpki-client on console-ams.rpki-client.org