$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: NgvE8BxFLrAt1ovpxznbpotnU4LXuBi5aV4tyQTM03I= Subject key identifier: 1F:72:91:B2:B5:02:97:01:1F:B9:38:27:16:3F:65:70:59:F1:D0:22 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: D1 Signing time: Fri 03 May 2024 06:15:35 +0000 Manifest this update: Fri 03 May 2024 06:15:35 +0000 Manifest next update: Fri 10 May 2024 06:15:35 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: m8DhYhQiOGNE/sJ4gRA4wQMo0UE6iMsElt1oeTl1qyc=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: cIVUE+RHP6rif8Wd67K4ZpYK/J6GHtr54/xW7v8taNg=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: qjCxdHYWEDQFlZr0i7PrJOgRU1neZetEYJ3q0f8InRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: May 3 06:15:35 2024 GMT Not After : May 10 06:15:35 2024 GMT Subject: CN=66348107-b6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:3d:bf:9d:cd:de:1c:3f:58:41:5a:ce:29: b9:5a:ef:ac:dc:b2:fc:eb:cf:56:c3:fc:a0:64:ae: a3:50:07:cf:f3:8a:5f:7f:0c:2b:4d:b7:27:cd:a5: b4:3b:b3:30:c4:d7:ae:ea:7e:e5:e5:7f:5e:2f:49: 13:83:66:7c:58:a7:f6:39:b9:24:bc:42:69:60:e4: 54:56:8d:65:a3:db:06:34:4a:55:e7:a2:50:8f:cb: 3b:0c:5f:c2:3f:7c:92:68:71:e7:aa:c6:9e:f1:9e: 70:50:4e:a1:1c:04:1d:59:1f:af:31:0a:da:d3:1b: ae:f7:43:cd:54:5e:c2:d3:3a:59:0e:db:3e:74:72: 3b:14:e8:66:63:ec:c7:1d:4f:38:3c:10:2c:7f:a6: 78:b6:80:0d:7c:7e:d1:af:37:f6:14:22:c0:6e:fb: da:13:9d:1f:dc:ca:38:f2:59:f1:c4:93:4f:7a:c7: 90:f6:72:9d:af:47:a7:00:5d:59:e3:e5:45:67:da: 46:8a:79:08:c5:0e:2d:7d:c3:bd:b9:70:ca:e0:7e: 0b:66:80:d0:b1:61:a1:c9:42:4c:73:df:2e:3d:d2: 0b:63:8b:62:d5:39:e7:ca:f6:18:1b:35:ae:e0:eb: 61:2b:ee:ce:35:ea:bc:a1:41:61:62:96:75:f2:3c: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:91:B2:B5:02:97:01:1F:B9:38:27:16:3F:65:70:59:F1:D0:22 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5f:a6:66:e0:1a:92:a8:1a:f3:18:8f:7f:85:dc:23:5f:f1: 82:97:0e:23:00:49:12:33:7a:cf:a1:f9:4d:a4:96:ad:0e:02: e5:86:48:83:51:12:2b:bf:95:e8:41:1d:3b:99:5e:25:d0:17: 47:22:9d:75:f1:48:2b:1e:9a:13:db:99:93:5f:0b:c9:8e:69: d4:96:9e:a3:9a:37:70:4c:3c:8b:ff:4a:c4:a3:08:84:cf:14: 92:82:0d:f8:43:3b:d6:bf:84:9b:89:55:90:73:c1:1b:d6:ba: f5:32:69:2f:22:5f:84:d5:7e:33:2b:9d:40:f6:3e:bd:a5:95: 16:2c:0f:26:b3:7e:2c:92:97:18:78:89:ec:04:d2:81:da:d2: 9d:9b:59:ca:c7:77:f9:6c:15:67:18:90:fa:c2:71:61:fd:9f: d4:78:1c:ce:6b:c0:07:b4:9f:a2:89:1d:74:e5:a4:08:71:11: 17:5b:b9:12:29:7f:16:d3:8d:72:44:1b:7b:5c:03:86:9f:ab: ce:4b:fc:4a:1c:d5:0a:6e:7e:a4:0c:02:38:c3:dd:09:33:ac: fb:2b:fa:24:21:6d:24:51:5c:7f:3e:e9:df:87:d3:55:4e:38: 22:36:c4:85:0f:ff:c0:02:b0:88:71:4d:7d:35:c0:5c:93:93: 4f:9d:4a:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjQwNTAzMDYxNTM1WhcNMjQwNTEwMDYxNTM1WjAYMRYwFAYD VQQDEw02NjM0ODEwNy1iNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLE9v53N3hw/WEFazim5Wu+s3LL8689Ww/ygZK6jUAfP84pffwwrTbcnzaW0 O7MwxNeu6n7l5X9eL0kTg2Z8WKf2ObkkvEJpYORUVo1lo9sGNEpV56JQj8s7DF/C P3ySaHHnqsae8Z5wUE6hHAQdWR+vMQra0xuu90PNVF7C0zpZDts+dHI7FOhmY+zH HU84PBAsf6Z4toANfH7Rrzf2FCLAbvvaE50f3Mo48lnxxJNPeseQ9nKdr0enAF1Z 4+VFZ9pGinkIxQ4tfcO9uXDK4H4LZoDQsWGhyUJMc98uPdILY4ti1TnnyvYYGzWu 4OthK+7ONeq8oUFhYpZ18jyMjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9ykbK1 ApcBH7k4JxY/ZXBZ8dAiMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRX6Zm4BqSqBrzGI9/hdwjX/GClw4jAEkSM3rPoflNpJatDgLlhkiD URIrv5XoQR07mV4l0BdHIp118UgrHpoT25mTXwvJjmnUlp6jmjdwTDyL/0rEowiE zxSSgg34QzvWv4SbiVWQc8Eb1rr1MmkvIl+E1X4zK51A9j69pZUWLA8ms34skpcY eInsBNKB2tKdm1nKx3f5bBVnGJD6wnFh/Z/UeBzOa8AHtJ+iiR105aQIcREXW7kS KX8W041yRBt7XAOGn6vOS/xKHNUKbn6kDAI4w90JM6z7K/okIW0kUVx/Punfh9NV TjgiNsSFD//AArCIcU19NcBck5NPnUqR -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org