$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: ILXcUU2kzm/HsgV2nhkh0v3ZeKlm1x8xWnKsefZ5dfg= Subject key identifier: 4D:09:F9:03:A8:98:F8:3B:7E:99:68:EE:3E:BF:43:40:D2:FB:D0:54 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 051A Signing time: Sat 25 May 2024 01:11:35 +0000 Manifest this update: Sat 25 May 2024 01:11:34 +0000 Manifest next update: Sat 01 Jun 2024 01:11:34 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: J5Cm2tuzn+LmMrKjs7WRhKc/JScMsUwrohoa4OzAIeA=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: 71x1Jrez9C8Bb6X9l4tTlVF8M/CxlMqODnBhqCjWY40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 01:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: May 25 01:11:34 2024 GMT Not After : Jun 1 01:11:34 2024 GMT Subject: CN=66513ac6-e1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:84:5c:a5:b2:2a:3b:f2:41:44:b5:02:1e: d7:ca:6c:d4:4e:12:24:4b:20:fb:37:97:81:cb:5e: a9:aa:c6:a9:cb:1d:eb:18:3b:dc:71:c3:5a:7c:ea: f1:2b:f0:10:51:81:0e:e3:3d:af:15:f9:ab:79:1a: 6a:b5:c0:e5:fe:a2:61:7c:bd:fa:c8:c0:28:de:24: 9a:a9:9c:4a:f6:62:c3:d4:49:10:7d:c0:dd:d9:87: c7:e7:be:ed:8d:23:e0:9e:17:47:9a:e9:13:0c:d8: 35:97:f4:c9:7b:c2:3b:08:e1:a1:93:57:e8:80:d2: 44:15:89:ce:d1:14:d5:10:a0:f2:83:b7:da:3a:88: 6b:bd:a9:ef:3f:90:1d:b1:d2:58:3c:01:40:ea:1c: e5:36:53:44:b9:ef:a8:5e:21:0f:fc:74:fa:19:49: ba:dd:a5:c0:e9:ff:30:e2:68:44:f5:95:b9:12:11: 63:67:dd:1f:d9:ae:46:9b:b7:5b:5d:b5:fe:c3:8a: 8a:ba:c2:2d:ff:da:ea:74:e9:5a:1f:6d:72:27:60: 4b:8c:2d:8f:ea:51:a9:55:9a:ff:3b:fa:8a:ae:9b: 76:5f:8f:9e:a8:5a:5e:92:e1:91:bd:f7:4c:f9:d2: 2b:37:0e:7e:fa:ad:ea:9a:15:a6:cd:06:97:58:a3: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:F9:03:A8:98:F8:3B:7E:99:68:EE:3E:BF:43:40:D2:FB:D0:54 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d1:f3:37:95:84:f0:d0:0d:c7:d5:ae:b1:ae:ee:a0:8d:14: cb:97:59:80:a0:34:1c:f9:6d:18:33:1d:2b:b6:39:5c:84:65: e9:c5:7f:24:34:fd:db:9a:74:8f:c5:69:c6:cb:35:cf:a1:e1: b9:e6:2e:27:d5:17:60:26:78:65:f9:d6:e8:4a:8d:06:d6:47: 8b:6f:4c:06:d2:21:77:1f:b1:f0:c8:79:43:e3:da:29:cb:61: 50:25:e2:13:57:96:09:eb:d9:0e:f3:99:11:79:d9:3f:80:41: 5b:51:fe:22:9c:09:c7:be:02:fa:f9:7e:07:c5:9c:cf:30:2a: 8a:bc:b0:c0:43:e5:60:bb:42:0f:a6:4f:9f:9e:36:d4:ba:ba: 99:8f:6e:1b:a9:d8:5b:18:81:bf:98:3f:e1:ae:e8:df:eb:30: 08:75:5f:b9:94:1c:bb:9f:e9:ce:6f:e6:2e:41:c1:95:7e:d6: 80:14:dd:f7:5a:2d:ec:62:e5:21:c8:8e:16:2f:0c:e7:1b:c9: 0f:4a:64:47:bc:7e:40:c6:f0:72:d9:2a:fb:ed:99:50:25:08: 2d:12:ac:f2:c6:c4:12:04:d2:60:d4:99:08:ba:12:5e:3b:af: af:08:4b:dc:02:b9:06:6a:9f:be:2a:50:56:e3:96:21:39:39: ef:0a:56:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjQwNTI1MDExMTM0WhcNMjQwNjAxMDExMTM0WjAYMRYwFAYD VQQDEw02NjUxM2FjNi1lMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVGEXKWyKjvyQUS1Ah7XymzUThIkSyD7N5eBy16pqsapyx3rGDvcccNafOrx K/AQUYEO4z2vFfmreRpqtcDl/qJhfL36yMAo3iSaqZxK9mLD1EkQfcDd2YfH577t jSPgnhdHmukTDNg1l/TJe8I7COGhk1fogNJEFYnO0RTVEKDyg7faOohrvanvP5Ad sdJYPAFA6hzlNlNEue+oXiEP/HT6GUm63aXA6f8w4mhE9ZW5EhFjZ90f2a5Gm7db XbX+w4qKusIt/9rqdOlaH21yJ2BLjC2P6lGpVZr/O/qKrpt2X4+eqFpekuGRvfdM +dIrNw5++q3qmhWmzQaXWKMiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0J+QOo mPg7fplo7j6/Q0DS+9BUMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk0fM3lYTw0A3H1a6xru6gjRTLl1mAoDQc+W0YMx0rtjlchGXpxX8k NP3bmnSPxWnGyzXPoeG55i4n1RdgJnhl+dboSo0G1keLb0wG0iF3H7HwyHlD49op y2FQJeITV5YJ69kO85kRedk/gEFbUf4inAnHvgL6+X4HxZzPMCqKvLDAQ+Vgu0IP pk+fnjbUurqZj24bqdhbGIG/mD/hrujf6zAIdV+5lBy7n+nOb+YuQcGVftaAFN33 Wi3sYuUhyI4WLwznG8kPSmRHvH5AxvBy2Sr77ZlQJQgtEqzyxsQSBNJg1JkIuhJe O6+vCEvcArkGap++KlBW45YhOTnvClb8 -----END CERTIFICATE-----Generated at Sat May 25 04:35:07 2024 by rpki-client on console-ams.rpki-client.org