$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: cvMy4lCd7T8mArGvxCVnPNdxpv8OERlWixXXvDOV+Vg= Subject key identifier: 42:A3:E8:E1:B3:7E:08:15:46:73:90:2D:1C:EB:13:66:3A:53:CD:64 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 02CD Signing time: Wed 01 May 2024 03:43:28 +0000 Manifest this update: Wed 01 May 2024 03:43:27 +0000 Manifest next update: Wed 08 May 2024 03:43:27 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: 17aJiRsRmRddgpulmSeqs5jPkfWpKqVY/q78rUeMZWA=) 2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: UVjSmdKortc7xXR2V1ZwcpHYtGMB4B0YpUSbuXMU18w=) 3: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: u4ixDiIah0HRlbgq6Gff8MvIftonQjJ2hGXt/sRAB/s=) 4: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: SaFx1B9LN0ZyNkvHhJEWt5kJgn2PgssQSYvBTUpmMDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: May 1 03:43:27 2024 GMT Not After : May 8 03:43:27 2024 GMT Subject: CN=6631ba5f-8805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:c7:f1:8f:ac:9a:8b:ea:ac:be:6a:82:4b: ca:b9:42:4d:8e:d0:90:9d:87:cd:8a:b3:55:53:b2: 81:36:82:3e:01:c0:7b:7c:03:71:15:bd:bb:66:cc: fd:28:46:00:65:b8:8a:f4:bf:9a:bd:d8:d3:c9:ea: 4d:06:a2:e2:6b:11:73:e0:9d:76:5f:b8:7d:c5:78: 0c:92:9e:e6:2b:33:c2:eb:e5:95:5d:5e:9a:6e:e9: db:3c:aa:41:f3:fd:fa:ab:ae:b6:7b:99:d8:ba:21: 5f:39:c9:fc:4a:72:53:45:46:c5:00:ed:17:8d:74: 50:6d:aa:7c:d0:2f:d5:8a:73:0e:f6:24:a9:bc:32: ae:3d:02:61:17:c0:ea:12:38:a8:20:b9:8d:61:d1: 59:74:de:68:5c:89:e1:0f:ec:6e:a4:52:dc:85:eb: a5:9c:42:3a:69:9b:61:26:6d:1c:c9:b9:18:c3:f5: ca:49:c6:c5:2e:05:52:96:6a:17:f3:fb:d5:a8:be: 17:73:8c:09:de:b5:43:c4:87:1e:bf:0c:00:33:da: 01:da:01:be:16:af:3c:8e:15:5b:12:60:43:fc:1a: b5:48:59:fd:3d:e5:89:a5:ac:06:ab:cb:0b:99:ed: 6b:6f:ae:54:43:65:f5:27:2d:fc:e3:c9:73:73:63: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:E8:E1:B3:7E:08:15:46:73:90:2D:1C:EB:13:66:3A:53:CD:64 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:67:f3:97:49:bd:06:73:d4:19:fc:3b:ec:a5:e8:11:5b:2e: 34:93:7e:61:b0:8c:d7:49:4e:de:23:35:8c:19:98:99:c1:bb: 09:b9:f0:ac:76:f1:48:09:1f:b1:ca:bd:34:16:1c:4c:e4:d1: dc:15:36:37:b7:73:e7:1e:d9:f0:6a:69:82:e2:dc:48:9e:be: fc:53:f7:6a:b7:bf:6a:59:ea:14:17:6d:e0:f2:c0:ad:bb:47: 49:18:5d:9f:de:7e:ab:77:ff:8b:31:8c:07:0e:da:31:aa:50: 2a:d0:56:b6:0c:61:cd:e9:f8:be:60:ca:ea:65:68:65:9d:e8: 34:e9:ec:1d:94:7d:19:42:cf:96:f7:02:04:d6:29:44:88:29: a2:21:3e:62:91:af:92:98:a0:35:a1:63:7a:87:31:2d:2b:71: e8:f6:3a:6f:21:42:10:c4:a4:42:26:cd:11:c1:be:9d:3c:0e: ef:5b:cc:9a:ee:6b:db:62:b8:8c:07:72:73:91:2c:6b:9f:3d: 19:39:9a:93:18:69:55:0c:85:c0:39:de:a6:ed:7e:f5:cb:31: 62:a4:b4:ea:d3:51:22:27:17:37:1f:19:59:d0:44:a3:e6:34: a8:d3:51:8e:52:a6:f1:a0:4c:82:6f:67:52:ea:a5:dc:da:75: be:dc:b7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjQwNTAxMDM0MzI3WhcNMjQwNTA4MDM0MzI3WjAYMRYwFAYD VQQDEw02NjMxYmE1Zi04ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMDH8Y+smovqrL5qgkvKuUJNjtCQnYfNirNVU7KBNoI+AcB7fANxFb27Zsz9 KEYAZbiK9L+avdjTyepNBqLiaxFz4J12X7h9xXgMkp7mKzPC6+WVXV6abunbPKpB 8/36q662e5nYuiFfOcn8SnJTRUbFAO0XjXRQbap80C/VinMO9iSpvDKuPQJhF8Dq EjioILmNYdFZdN5oXInhD+xupFLcheulnEI6aZthJm0cybkYw/XKScbFLgVSlmoX 8/vVqL4Xc4wJ3rVDxIcevwwAM9oB2gG+Fq88jhVbEmBD/Bq1SFn9PeWJpawGq8sL me1rb65UQ2X1Jy3848lzc2PmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKj6OGz fggVRnOQLRzrE2Y6U81kMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8Z/OXSb0Gc9QZ/DvspegRWy40k35hsIzXSU7eIzWMGZiZwbsJufCs dvFICR+xyr00FhxM5NHcFTY3t3PnHtnwammC4txInr78U/dqt79qWeoUF23g8sCt u0dJGF2f3n6rd/+LMYwHDtoxqlAq0Fa2DGHN6fi+YMrqZWhlneg06ewdlH0ZQs+W 9wIE1ilEiCmiIT5ika+SmKA1oWN6hzEtK3Ho9jpvIUIQxKRCJs0Rwb6dPA7vW8ya 7mvbYriMB3JzkSxrnz0ZOZqTGGlVDIXAOd6m7X71yzFipLTq01EiJxc3HxlZ0ESj 5jSo01GOUqbxoEyCb2dS6qXc2nW+3LfQ -----END CERTIFICATE-----Generated at Wed May 1 04:49:22 2024 by rpki-client on console-ams.rpki-client.org