$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: nXUVzgeJ1kTdfRTgWIB6GM5TvUSgvRphL8wq1GPO+bk= Subject key identifier: 5B:C0:73:2E:BE:EF:D3:49:8A:CC:28:9A:54:26:2F:54:85:43:D1:45 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0458 Signing time: Sun 05 May 2024 01:59:27 +0000 Manifest this update: Sun 05 May 2024 01:59:27 +0000 Manifest next update: Sun 12 May 2024 01:59:27 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: cI8w08v8mo6ObrQy2k7vobzAgGxv1eNp9zgvm2QUb0Y=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: /NFpgPJKOHCk6bZQirkYTooRxtED/FX//EMDLOQqEBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: May 5 01:59:27 2024 GMT Not After : May 12 01:59:27 2024 GMT Subject: CN=6636e7ff-0a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:28:8d:81:13:70:34:1f:05:dd:81:fd:29: 8c:8b:1e:62:2f:32:45:8d:db:87:2e:92:1d:b4:97: 5c:23:41:98:cc:4a:32:97:ec:d8:04:3f:7e:29:82: 18:ea:a8:30:ea:cd:72:3e:1a:35:37:7b:90:eb:08: b7:5c:56:06:ec:ca:88:d4:ad:63:b2:98:60:aa:89: f4:e6:de:ec:a4:18:52:30:07:ad:5b:df:40:ca:cf: 9c:c2:e6:0d:49:8b:5d:e1:e1:5b:c6:b6:74:99:76: e0:d1:1f:c6:3c:e0:b4:be:61:14:fb:d6:bd:3a:b4: db:b7:75:9a:d0:b4:4f:3b:4d:c8:9c:6f:6d:76:37: 78:eb:09:29:53:42:35:96:66:97:fd:34:d4:05:30: ff:44:25:d5:6e:91:80:d5:76:0e:36:0f:0c:bb:43: 7f:84:0b:11:c2:6e:aa:80:5d:a5:01:f8:2c:82:9b: 8e:5c:bf:a7:af:85:29:de:dc:a5:b8:bb:b6:81:23: 9c:a8:7f:15:7c:24:e3:d9:f8:fe:b5:e4:e2:c9:1a: 9d:80:9d:8b:50:ea:da:f4:5d:f8:2f:c0:2c:24:c9: 97:76:00:1c:18:af:b6:28:66:c5:f3:6d:a8:af:fb: 41:d6:eb:e9:93:36:95:90:3f:04:9a:39:f4:b2:7f: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C0:73:2E:BE:EF:D3:49:8A:CC:28:9A:54:26:2F:54:85:43:D1:45 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:4d:39:95:39:71:ea:29:6f:dd:89:eb:e3:e7:43:86:c1: 37:45:da:22:24:16:68:f7:13:7d:52:7c:3c:17:8e:2a:5d:76: 70:81:3e:67:83:88:b8:ea:4c:7a:50:91:81:3b:63:55:c9:67: ff:f2:a0:3c:ee:7e:4a:f5:3c:68:16:31:2d:9e:74:7a:6a:aa: 21:b2:b8:ed:8e:4e:d2:f8:07:d0:1f:70:94:77:96:d8:aa:95: 1a:40:14:fd:0d:4b:a9:ed:69:f1:cd:44:2e:5f:9f:0e:c1:4c: 2f:48:62:87:ca:8a:7d:5b:93:82:92:59:c5:c2:0f:9f:c7:da: ab:51:49:09:8b:d4:a7:6a:1e:7a:da:bd:ff:2f:80:5c:16:23: af:5e:a3:8d:e0:2f:a2:c9:96:0f:4a:29:0c:64:d2:eb:1d:f6: 48:15:49:1d:af:15:09:22:71:72:63:a3:47:b8:f0:3c:b0:2d: bf:3e:b0:ae:80:ac:ad:d7:97:41:f8:26:06:ac:8c:1b:f7:aa: ba:3c:5e:82:87:64:ea:c2:aa:e2:58:73:51:e1:7e:f1:c5:5f: 3a:63:78:0f:7b:b5:c7:fe:c6:28:0b:49:9a:9c:35:d1:8a:2a: 09:a3:a8:66:00:2a:d5:14:7f:f5:44:d8:4c:8b:04:86:af:ef: 0b:87:f3:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjQwNTA1MDE1OTI3WhcNMjQwNTEyMDE1OTI3WjAYMRYwFAYD VQQDEw02NjM2ZTdmZi0wYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CMojYETcDQfBd2B/SmMix5iLzJFjduHLpIdtJdcI0GYzEoyl+zYBD9+KYIY 6qgw6s1yPho1N3uQ6wi3XFYG7MqI1K1jsphgqon05t7spBhSMAetW99Ays+cwuYN SYtd4eFbxrZ0mXbg0R/GPOC0vmEU+9a9OrTbt3Wa0LRPO03InG9tdjd46wkpU0I1 lmaX/TTUBTD/RCXVbpGA1XYONg8Mu0N/hAsRwm6qgF2lAfgsgpuOXL+nr4Up3tyl uLu2gSOcqH8VfCTj2fj+teTiyRqdgJ2LUOra9F34L8AsJMmXdgAcGK+2KGbF822o r/tB1uvpkzaVkD8Emjn0sn+6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvAcy6+ 79NJiswomlQmL1SFQ9FFMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6j005lTlx6ilv3Ynr4+dDhsE3RdoiJBZo9xN9Unw8F44qXXZwgT5n g4i46kx6UJGBO2NVyWf/8qA87n5K9TxoFjEtnnR6aqohsrjtjk7S+AfQH3CUd5bY qpUaQBT9DUup7WnxzUQuX58OwUwvSGKHyop9W5OCklnFwg+fx9qrUUkJi9Snah56 2r3/L4BcFiOvXqON4C+iyZYPSikMZNLrHfZIFUkdrxUJInFyY6NHuPA8sC2/PrCu gKyt15dB+CYGrIwb96q6PF6Ch2TqwqriWHNR4X7xxV86Y3gPe7XH/sYoC0manDXR iioJo6hmACrVFH/1RNhMiwSGr+8Lh/MO -----END CERTIFICATE-----Generated at Sun May 5 03:09:54 2024 by rpki-client on console-ams.rpki-client.org