$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: 2QJDkal5LS7Z04IaX31DjGBNVke/vCEVksXwEXLFqm0= Subject key identifier: C9:72:45:EB:41:10:C3:4C:C0:59:4E:48:FF:B8:FA:0F:8A:63:5E:5B Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 08B6 Signing time: Thu 02 May 2024 21:35:17 +0000 Manifest this update: Thu 02 May 2024 21:35:17 +0000 Manifest next update: Thu 09 May 2024 21:35:17 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: gAuU2E/E/Efyh47nAEvojlBKBsIsHtxdUodk3RMUBts=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: ZgPlDCggqIEOo5kz9JXBnaD0lhSk8TP2PYN81JudCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: May 2 21:35:17 2024 GMT Not After : May 9 21:35:17 2024 GMT Subject: CN=66340715-b859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:47:7e:f0:04:e4:e2:0b:72:d2:4b:dd:a0: 92:ad:18:a3:d4:24:1a:92:c7:df:a1:fa:a1:7a:c0: 6c:99:0f:50:69:1a:30:28:87:c6:08:2c:14:28:80: 05:dc:de:d3:b5:66:e2:36:42:b7:1c:8e:f2:84:b8: cd:22:9c:69:c0:6b:57:2e:82:2c:42:ad:6d:41:0b: 0c:ae:a5:05:27:f5:9d:1d:cc:38:fc:43:ea:8b:bd: 9e:40:bd:5f:61:1a:65:12:80:7e:6b:41:b8:81:77: 78:40:55:7f:0c:42:7a:5e:1f:af:f1:eb:27:dd:32: 30:1f:ea:41:94:48:b4:d6:54:a2:12:e4:be:84:06: f9:fa:85:c5:0f:a6:f5:72:64:21:82:05:eb:15:8d: 16:87:35:86:eb:55:4f:d3:5f:20:49:3e:da:96:93: 99:be:82:bb:9e:52:ee:af:c6:c7:ff:43:4a:33:14: 15:88:41:95:b9:13:37:66:95:3b:86:eb:eb:56:e6: d9:bb:38:2d:57:c8:96:46:14:d6:42:ca:88:de:59: 87:14:a0:ec:5f:08:91:b7:23:08:ca:6f:53:74:55: 3f:1c:0f:ca:5e:63:03:4f:09:d8:aa:6a:00:8c:62: ce:66:a0:c7:7a:96:8e:0c:ec:30:41:73:9f:71:0a: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:72:45:EB:41:10:C3:4C:C0:59:4E:48:FF:B8:FA:0F:8A:63:5E:5B X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1f:39:81:9e:9e:03:da:a0:1d:70:90:8c:91:88:1c:94:35: 1e:a3:e6:2b:93:b7:dd:19:4c:86:23:59:81:0b:29:78:8a:6a: 11:8c:67:58:b8:93:ca:cc:ad:f1:f0:f6:db:50:bb:13:d6:da: 2c:6e:68:8a:f1:3b:28:c2:6d:f2:c6:d9:94:67:ed:5f:e3:e7: 1a:f8:a1:b1:e4:95:e3:59:e2:ea:4e:f9:4d:ba:00:c1:48:33: d1:39:30:f8:4e:25:bc:4d:88:7d:49:69:f0:58:4e:aa:5b:b4: 15:76:fe:cb:db:b3:25:8f:37:9e:22:8d:4c:73:dd:f7:68:43: 2e:2e:5c:34:0c:cf:89:5a:13:5a:55:48:2e:93:92:6b:37:ef: b0:17:5f:77:c5:49:b1:06:77:a5:23:10:c7:71:7d:22:b8:8e: b2:ab:45:27:69:72:33:6e:94:aa:b3:c3:98:4c:88:95:67:a0: 0e:08:ef:98:ac:33:4d:d7:06:ce:46:06:63:10:56:f0:ff:4e: 0f:da:24:90:bc:06:59:d9:29:a5:35:19:41:02:a7:5d:0a:ab: bc:f3:a2:51:17:8a:0f:6a:24:92:59:fe:6d:1a:2e:01:e0:19: 86:3e:f4:9d:4e:b0:f9:b5:00:b9:24:a9:ac:84:cb:ca:5c:28: 68:b9:a3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjQwNTAyMjEzNTE3WhcNMjQwNTA5MjEzNTE3WjAYMRYwFAYD VQQDEw02NjM0MDcxNS1iODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPpHfvAE5OILctJL3aCSrRij1CQaksffofqhesBsmQ9QaRowKIfGCCwUKIAF 3N7TtWbiNkK3HI7yhLjNIpxpwGtXLoIsQq1tQQsMrqUFJ/WdHcw4/EPqi72eQL1f YRplEoB+a0G4gXd4QFV/DEJ6Xh+v8esn3TIwH+pBlEi01lSiEuS+hAb5+oXFD6b1 cmQhggXrFY0WhzWG61VP018gST7alpOZvoK7nlLur8bH/0NKMxQViEGVuRM3ZpU7 huvrVubZuzgtV8iWRhTWQsqI3lmHFKDsXwiRtyMIym9TdFU/HA/KXmMDTwnYqmoA jGLOZqDHepaODOwwQXOfcQrSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlyRetB EMNMwFlOSP+4+g+KY15bMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGHzmBnp4D2qAdcJCMkYgclDUeo+Yrk7fdGUyGI1mBCyl4imoRjGdY uJPKzK3x8PbbULsT1tosbmiK8Tsowm3yxtmUZ+1f4+ca+KGx5JXjWeLqTvlNugDB SDPROTD4TiW8TYh9SWnwWE6qW7QVdv7L27MljzeeIo1Mc933aEMuLlw0DM+JWhNa VUguk5JrN++wF193xUmxBnelIxDHcX0iuI6yq0UnaXIzbpSqs8OYTIiVZ6AOCO+Y rDNN1wbORgZjEFbw/04P2iSQvAZZ2SmlNRlBAqddCqu886JRF4oPaiSSWf5tGi4B 4BmGPvSdTrD5tQC5JKmshMvKXChouaMP -----END CERTIFICATE-----Generated at Thu May 2 22:13:17 2024 by rpki-client on console-fra.rpki-client.org