$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: K5Z0PJQJaEfmTm06EJeTqA4IZfNiuzzO/+L7hjuwDK4= Subject key identifier: FD:BB:E1:E3:F2:F9:29:AB:30:24:55:1B:64:68:2A:E7:65:D8:9D:0C Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 05A9 Signing time: Fri 17 May 2024 01:16:04 +0000 Manifest this update: Fri 17 May 2024 01:16:03 +0000 Manifest next update: Fri 24 May 2024 01:16:03 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: PSlfgxu/eotgjONZYCM/xnoYh8d7MQKpea9TQ+XcC2Q=) 2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: igK4RUZd69l6dw9/JuDTOrtAbsTrMEnSdwYfbwgXfdI=) 3: 5AB6E29E5D3E11EE93D0E174C4F9AE02.roa (hash: 4cumYBn0lyhSsOjdgykM3gRpCx7LH51/perTLX8d77s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: May 17 01:16:03 2024 GMT Not After : May 24 01:16:03 2024 GMT Subject: CN=6646afd3-8323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:4b:0e:d1:8d:a4:6d:01:ea:bd:ab:29:1a: b6:e7:58:4c:99:5c:90:be:20:92:77:6f:70:4c:2a: 93:cb:58:32:6a:bb:83:3c:2b:4a:41:4a:b2:05:fc: 14:17:e1:d5:b9:e4:51:3c:91:9e:58:c7:58:91:00: a2:66:64:06:a6:9e:fa:00:b7:05:1a:1c:15:eb:51: 28:cb:da:5d:31:77:10:a5:ae:01:d6:7a:19:00:52: 3b:f1:79:5c:de:9b:8d:52:9e:24:3f:57:4f:ec:50: 4f:84:15:fd:f6:1c:55:6d:4d:82:af:c6:92:0b:fd: dd:e8:96:f0:d0:f9:6d:e0:18:cc:76:84:98:ad:2f: e8:16:58:9c:0d:36:d1:14:d3:5a:9d:06:34:28:f1: 0e:7f:95:17:aa:2f:b6:87:95:b8:17:74:ec:f0:bf: f5:fd:85:48:df:4b:80:f0:61:b6:ee:52:96:40:f4: fe:eb:20:e9:59:3a:9c:5a:74:00:df:d6:1e:d6:60: 23:e3:f4:02:e6:18:bc:6f:39:ed:b3:68:75:f8:57: fe:2f:86:b3:2a:f9:a5:35:88:e8:56:37:ea:5a:08: 4e:a1:02:4e:2a:af:09:b3:0d:87:21:2c:22:7a:24: e1:f8:9e:7e:78:0c:95:a2:00:1f:c8:8b:09:56:87: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:E1:E3:F2:F9:29:AB:30:24:55:1B:64:68:2A:E7:65:D8:9D:0C X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4b:3c:07:df:71:84:b4:53:34:de:b3:13:e1:5e:0d:1b:fb: 1b:3f:ef:ea:20:3c:e1:37:0a:70:e6:6f:fb:e3:4f:1b:92:2e: 9d:bb:9c:74:42:d4:ce:0d:03:36:0d:6d:78:9e:18:a2:a8:23: 22:e0:dd:41:09:3a:6f:7f:9c:83:5d:fb:7c:5b:db:77:3f:c7: 7d:24:10:28:d1:b2:5e:52:3d:55:bc:04:e2:2c:08:79:c9:35: 00:f2:32:fc:e6:d0:51:31:e4:7a:3b:47:a7:1c:b9:bb:4e:30: 0a:96:96:41:7b:70:17:2d:ba:38:8f:8d:1a:1a:a2:e2:01:7a: 5e:8c:25:71:36:9e:58:64:d7:2e:ff:75:2a:0a:90:8e:c0:b6: 0c:a9:1a:55:66:7b:f5:25:87:4e:0e:e6:e0:f7:45:d6:65:d7: 7b:35:84:ea:96:9b:05:26:ff:fe:5e:25:b8:47:18:15:e0:0e: d7:1f:a1:7f:87:c4:81:eb:5c:b9:5c:be:70:8d:cc:77:64:1f: 3e:89:2b:61:c4:77:13:e1:86:89:64:9d:1c:d0:87:84:93:4e: 20:c6:07:4b:ef:6f:11:04:ee:ff:3b:4c:46:e4:79:42:85:20: fe:21:58:4b:92:bb:38:d6:26:17:77:7b:2b:38:77:cd:9a:d8: 73:3d:be:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUY3QTExMC8GA1UEBRMoRjEwODkyRjg1NDY4QkYwMDRFRUY1RjRFMUZBNTkxN0Yw NjMyQTA0OTAeFw0yNDA1MTcwMTE2MDNaFw0yNDA1MjQwMTE2MDNaMBgxFjAUBgNV BAMTDTY2NDZhZmQzLTgzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdxUsO0Y2kbQHqvaspGrbnWEyZXJC+IJJ3b3BMKpPLWDJqu4M8K0pBSrIF/BQX 4dW55FE8kZ5Yx1iRAKJmZAamnvoAtwUaHBXrUSjL2l0xdxClrgHWehkAUjvxeVze m41SniQ/V0/sUE+EFf32HFVtTYKvxpIL/d3olvDQ+W3gGMx2hJitL+gWWJwNNtEU 01qdBjQo8Q5/lReqL7aHlbgXdOzwv/X9hUjfS4DwYbbuUpZA9P7rIOlZOpxadADf 1h7WYCPj9ALmGLxvOe2zaHX4V/4vhrMq+aU1iOhWN+paCE6hAk4qrwmzDYchLCJ6 JOH4nn54DJWiAB/IiwlWhxQLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/bvh4/L5 KaswJFUbZGgq52XYnQwwHwYDVR0jBBgwFoAU8QiS+FRovwBO719OH6WRfwYyoEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBRjdBL0UwNTMzMzM2QkFD OTExRUJCODA3RDUxQ0M0RjlBRTAyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9F ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFFpUy1GUm92d0JPNzE5T0g2V1Jmd1l5b0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB RjdBL0UwNTMzMzM2QkFDOTExRUJCODA3RDUxQ0M0RjlBRTAyLzhRaVMtRlJvdndC TzcxOU9INldSZndZeW9Fay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlLPAffcYS0UzTesxPhXg0b+xs/7+ogPOE3CnDmb/vjTxuSLp27nHRC 1M4NAzYNbXieGKKoIyLg3UEJOm9/nINd+3xb23c/x30kECjRsl5SPVW8BOIsCHnJ NQDyMvzm0FEx5Ho7R6ccubtOMAqWlkF7cBctujiPjRoaouIBel6MJXE2nlhk1y7/ dSoKkI7AtgypGlVme/Ulh04O5uD3RdZl13s1hOqWmwUm//5eJbhHGBXgDtcfoX+H xIHrXLlcvnCNzHdkHz6JK2HEdxPhholknRzQh4STTiDGB0vvbxEE7v87TEbkeUKF IP4hWEuSuzjWJhd3eys4d82a2HM9vno= -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org