$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: /JjHvxwsWsep0cvMJHG2+gAyjm04AWllDfFlGOjC9OA= Subject key identifier: 49:B2:98:77:C9:0F:1E:C5:2D:FE:FC:11:8E:AB:09:81:1F:37:B4:39 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 01B1 Signing time: Tue 07 May 2024 04:30:44 +0000 Manifest this update: Tue 07 May 2024 04:30:44 +0000 Manifest next update: Tue 14 May 2024 04:30:44 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: 7YYpARKvSBLONmEFxI9zj8ID5n/D7+xBwy+94e/Pwvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: May 7 04:30:44 2024 GMT Not After : May 14 04:30:44 2024 GMT Subject: CN=6639ae74-86fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:35:eb:f0:3d:4f:65:58:68:1f:ca:e4:47:0d: b4:dd:b5:0c:4d:53:01:c5:6f:09:5f:36:72:15:54: 19:27:a2:6a:ae:b3:31:18:62:88:52:28:2d:bb:34: b8:23:04:7f:fb:ef:97:6e:0c:2e:b5:48:33:92:e2: f2:3f:b4:6c:34:71:c2:e9:a4:49:be:c6:a9:79:b6: 2b:eb:c3:e8:32:be:0c:6a:4d:77:53:09:f6:0a:ff: 9c:d5:62:59:38:47:32:97:d8:ef:ba:6c:58:be:a0: d6:a0:00:19:18:7d:20:ba:a7:3c:80:c5:d7:3b:25: c0:b7:10:5d:3a:81:1c:d8:51:49:c5:ee:2d:7c:e8: 07:85:e5:2e:32:57:fc:66:eb:d6:c2:0a:4c:4b:5e: 94:5b:57:d5:86:90:29:2b:0a:0a:47:09:54:ae:7b: 6d:13:82:e7:eb:af:76:74:24:a0:55:fc:30:f1:6d: 0d:d3:e0:1c:3b:ee:80:3f:9c:32:fc:72:d3:37:c1: bc:6a:40:a3:83:76:ab:a3:2b:08:29:59:8b:04:71: 66:3c:b1:20:35:18:1f:8a:12:87:b8:41:51:fd:0a: e9:11:c3:85:0e:ce:f0:4c:05:4b:66:5f:42:06:c8: 63:b0:9b:22:fe:19:7a:d9:54:a1:16:2d:7f:35:f5: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B2:98:77:C9:0F:1E:C5:2D:FE:FC:11:8E:AB:09:81:1F:37:B4:39 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:12:61:a9:a4:a7:b8:14:16:3e:05:02:e8:87:92:4c:ee: 53:28:a4:9c:63:60:36:5f:69:96:7c:82:6e:db:52:77:aa:8d: d4:11:bb:1e:9f:8e:2c:e9:4d:1f:ec:42:35:54:80:86:07:0d: e3:c8:98:d3:5a:32:bb:bb:0b:dc:9d:c0:ea:6e:f1:f7:21:c0: d6:5f:87:8b:5f:21:9c:76:c5:ca:4b:c3:f1:7b:bb:65:8b:e6: 23:64:a6:ba:87:20:4a:c2:31:40:e7:06:94:ae:3a:c8:66:95: 89:29:8e:4d:60:da:15:bc:d6:82:3c:74:ef:20:3b:79:6b:87: ad:1e:04:33:22:1c:a0:e4:07:18:db:b6:1f:e5:23:ab:08:74: f4:2b:76:e1:60:b8:76:8a:f2:95:f0:0c:59:25:7c:fc:b1:55: a0:c9:1b:8c:00:c6:c1:c7:2a:f3:06:cd:34:e3:0c:63:f3:45: 40:5f:1e:15:c2:79:a3:ea:07:46:8c:85:f7:0f:af:7e:14:4e: c0:e6:30:04:08:51:94:70:d1:f4:e5:51:17:7a:dc:a8:6f:35: 33:6b:ce:da:61:60:56:b0:14:ab:84:3e:8f:04:f2:58:4d:a5: 62:68:40:ee:53:e7:39:4b:21:91:3d:5d:ed:f0:a0:8e:bc:94: 1b:29:a7:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjQwNTA3MDQzMDQ0WhcNMjQwNTE0MDQzMDQ0WjAYMRYwFAYD VQQDEw02NjM5YWU3NC04NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zXr8D1PZVhoH8rkRw203bUMTVMBxW8JXzZyFVQZJ6JqrrMxGGKIUigtuzS4 IwR/+++XbgwutUgzkuLyP7RsNHHC6aRJvsapebYr68PoMr4Mak13Uwn2Cv+c1WJZ OEcyl9jvumxYvqDWoAAZGH0guqc8gMXXOyXAtxBdOoEc2FFJxe4tfOgHheUuMlf8 ZuvWwgpMS16UW1fVhpApKwoKRwlUrnttE4Ln6692dCSgVfww8W0N0+AcO+6AP5wy /HLTN8G8akCjg3aroysIKVmLBHFmPLEgNRgfihKHuEFR/QrpEcOFDs7wTAVLZl9C BshjsJsi/hl62VShFi1/NfUw4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmymHfJ Dx7FLf78EY6rCYEfN7Q5MB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi7BJhqaSnuBQWPgUC6IeSTO5TKKScY2A2X2mWfIJu21J3qo3UEbse n44s6U0f7EI1VICGBw3jyJjTWjK7uwvcncDqbvH3IcDWX4eLXyGcdsXKS8Pxe7tl i+YjZKa6hyBKwjFA5waUrjrIZpWJKY5NYNoVvNaCPHTvIDt5a4etHgQzIhyg5AcY 27Yf5SOrCHT0K3bhYLh2ivKV8AxZJXz8sVWgyRuMAMbBxyrzBs004wxj80VAXx4V wnmj6gdGjIX3D69+FE7A5jAECFGUcNH05VEXetyobzUza87aYWBWsBSrhD6PBPJY TaViaEDuU+c5SyGRPV3t8KCOvJQbKae/ -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org