$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json) Hash identifier: +vxzALZtooR8Zg3hpjkMMlEfWZuSedQ6E6LfXkuBs7Q= Subject key identifier: DE:EC:01:C5:96:4D:4A:9F:94:F9:C2:18:39:6A:6E:F0:B9:16:E4:C8 Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Certificate serial: 0DB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft Manifest number: 0DA5 Signing time: Tue 30 Apr 2024 18:49:12 +0000 Manifest this update: Tue 30 Apr 2024 18:49:11 +0000 Manifest next update: Tue 07 May 2024 18:49:11 +0000 Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: Lgmq4jNFJBnmRtAXO6tDiWlhi1GqWbvHi8f38nZi640=) 2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: /08gFmzn4/y9fXhJev07QB9cHVA3TMXCdZ9/9Lrfkn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3505 (0xdb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Validity Not Before: Apr 30 18:49:11 2024 GMT Not After : May 7 18:49:11 2024 GMT Subject: CN=66313d28-2a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:1a:bf:13:de:48:34:2f:60:c9:88:24:7e: 84:c5:ff:aa:55:31:b6:80:2b:6d:cc:25:f1:b7:eb: 49:f3:a9:6f:8d:8d:a6:cf:32:40:0c:e1:79:f3:22: 0a:3a:db:96:37:8b:0b:2a:38:78:37:09:d3:44:28: be:23:19:ca:73:b4:ca:89:73:50:5f:06:b7:12:2f: 60:c4:e8:0f:cf:54:cf:c4:f9:70:cf:7c:1e:4d:05: 92:c7:58:c6:06:de:a2:fd:95:d3:66:89:96:bf:9c: cc:74:55:cc:6d:11:92:18:10:37:a4:5f:8a:1e:31: 19:42:6e:c8:ca:f2:86:63:d3:f2:85:3a:52:2c:d4: 5c:59:9b:4f:75:20:cd:15:f4:66:96:b3:69:9c:8d: e5:3f:3e:22:7c:b8:e2:52:c9:2c:45:f9:3e:ce:bb: ae:41:db:17:f7:9b:35:0a:5a:38:a4:ed:97:92:2a: a6:b7:6d:e5:92:71:97:71:67:18:66:ac:e4:db:08: bc:8f:d7:78:ae:65:ee:bd:ec:2b:ea:b8:ea:fb:69: 4c:cc:b0:c0:fb:4f:41:c1:02:d5:a1:5a:fc:76:83: df:7b:b0:06:70:75:da:fe:2f:c1:30:a2:39:9d:72: f4:17:a1:07:fc:40:bf:5d:e3:63:99:b9:49:1c:cb: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EC:01:C5:96:4D:4A:9F:94:F9:C2:18:39:6A:6E:F0:B9:16:E4:C8 X509v3 Authority Key Identifier: keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:21:87:74:db:d9:52:69:b7:7f:cb:1d:6c:a0:65:df:18:07: 0a:94:50:85:89:87:4a:c2:ae:dc:0d:5a:c1:df:7c:46:9e:78: 54:71:f9:e7:cf:ff:f1:de:da:63:8c:bf:a9:16:57:c0:a1:8e: 3f:d5:d7:1a:d2:1a:2e:86:81:9e:bd:bf:3e:ec:05:34:94:72: 58:38:14:f9:06:82:ac:a9:d9:d4:99:0e:f4:c3:4d:76:f5:3e: 1d:b6:2e:ac:ce:3f:20:ee:a5:10:06:67:38:26:f3:25:a0:4d: 68:3b:50:df:c0:9f:07:af:cd:0e:4e:7d:e6:bc:8c:a0:e7:5f: 4f:f8:f0:2b:59:39:00:de:f1:6b:b7:98:bd:e7:51:1f:02:2b: 97:7a:56:1a:52:a4:d2:49:a8:66:4d:b5:55:f8:07:dd:6e:05: 1e:91:7f:ec:9d:24:b7:8f:57:10:df:01:7a:0a:72:c2:37:07: eb:86:8d:dd:be:36:b4:79:9e:10:17:11:0a:dc:d8:b0:60:c3: fd:05:3d:75:50:54:7a:5a:d1:68:7c:11:e4:f7:b0:f3:44:cc: 5a:da:98:4f:ff:52:21:09:14:9c:20:ff:8f:41:f5:96:4c:f5: 5d:dc:d8:c5:2c:87:eb:f3:74:b1:72:41:7a:fe:77:e1:d6:38: 41:97:58:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1NTQxMTAvBgNVBAUTKEYzRkMzRThGRTNGQ0Q4NkNBRjBGNzFBRjZGQjQyMzFF QzU3MUJBRjYwHhcNMjQwNDMwMTg0OTExWhcNMjQwNTA3MTg0OTExWjAYMRYwFAYD VQQDEw02NjMxM2QyOC0yYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHsavxPeSDQvYMmIJH6Exf+qVTG2gCttzCXxt+tJ86lvjY2mzzJADOF58yIK OtuWN4sLKjh4NwnTRCi+IxnKc7TKiXNQXwa3Ei9gxOgPz1TPxPlwz3weTQWSx1jG Bt6i/ZXTZomWv5zMdFXMbRGSGBA3pF+KHjEZQm7IyvKGY9PyhTpSLNRcWZtPdSDN FfRmlrNpnI3lPz4ifLjiUsksRfk+zruuQdsX95s1Clo4pO2Xkiqmt23lknGXcWcY Zqzk2wi8j9d4rmXuvewr6rjq+2lMzLDA+09BwQLVoVr8doPfe7AGcHXa/i/BMKI5 nXL0F6EH/EC/XeNjmblJHMttRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7sAcWW TUqflPnCGDlqbvC5FuTIMB8GA1UdIwQYMBaAFPP8Po/j/Nhsrw9xr2+0Ix7Fcbr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTU1NC83RTA1M0U5MDk4 Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJHeXZEM0d2YjdRakhzVnh1 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfdy1qLVA4Mkd5dkQzR3ZiN1FqSHNWeHV2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTU1NC83RTA1M0U5MDk4Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJH eXZEM0d2YjdRakhzVnh1dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0IYd029lSabd/yx1soGXfGAcKlFCFiYdKwq7cDVrB33xGnnhUcfnn z//x3tpjjL+pFlfAoY4/1dca0houhoGevb8+7AU0lHJYOBT5BoKsqdnUmQ70w012 9T4dti6szj8g7qUQBmc4JvMloE1oO1DfwJ8Hr80OTn3mvIyg519P+PArWTkA3vFr t5i951EfAiuXelYaUqTSSahmTbVV+AfdbgUekX/snSS3j1cQ3wF6CnLCNwfrho3d vja0eZ4QFxEK3NiwYMP9BT11UFR6WtFofBHk97DzRMxa2phP/1IhCRScIP+PQfWW TPVd3NjFLIfr83SxckF6/nfh1jhBl1jj -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:56 2024 by rpki-client on console-ams.rpki-client.org