$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: jponi3o1+XmrkVpNYG3syRWQ0G3RolECHGpLFVPrGCA= Subject key identifier: 1E:A9:C8:F4:BA:4E:98:48:C5:E6:0A:F0:F1:57:DD:AA:8F:5C:09:37 Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 04AE Signing time: Tue 07 May 2024 02:46:09 +0000 Manifest this update: Tue 07 May 2024 02:46:09 +0000 Manifest next update: Tue 14 May 2024 02:46:08 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: rKrqegFklrOZ8nOnnV0C/GxOACj7B9LyYU1M3AfXzrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: May 7 02:46:09 2024 GMT Not After : May 14 02:46:08 2024 GMT Subject: CN=663995f1-f2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:17:c3:d8:71:bc:a4:c2:a0:cb:2f:96:c9: 64:00:39:a3:9c:7d:c2:f3:1b:a5:6e:a5:54:d0:20: 1b:26:29:29:44:40:39:1c:4b:05:ac:18:e4:d2:a2: de:be:f2:c9:bf:8c:6b:0b:31:3b:ce:f5:41:44:e0: d0:19:f3:1d:07:11:15:d0:12:be:31:76:b1:ef:ce: 9a:a2:da:37:25:c3:98:c5:09:8e:6a:53:c5:96:11: 8d:9a:1b:f0:4e:26:9f:03:db:c0:16:4b:28:f8:ac: ca:60:4a:c8:41:0f:cd:0c:46:c9:9d:cd:3a:c5:1f: 72:61:80:25:74:f1:88:2c:dd:94:f4:7e:7d:0c:cc: 73:4f:b1:c5:94:28:94:b1:06:e6:43:97:4a:f3:4f: 37:60:a2:f5:23:ee:02:8f:76:91:b4:61:e7:a6:bb: f1:00:82:0e:a6:4c:a9:0e:36:3b:c0:17:ca:c2:ef: 78:ce:8c:eb:47:a2:98:80:6f:aa:bc:46:b0:68:9c: 40:6e:97:ed:7c:1c:66:af:a8:8b:46:d3:d1:f8:aa: 21:ba:23:b6:ad:bd:40:8f:af:b5:25:5b:35:ef:e6: 4e:08:3e:5a:fd:9e:cc:fe:53:66:c2:a2:0e:ec:34: be:bc:b4:cc:b5:27:7a:84:f5:a0:8d:48:d0:9b:ae: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:C8:F4:BA:4E:98:48:C5:E6:0A:F0:F1:57:DD:AA:8F:5C:09:37 X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4e:83:2b:e3:2b:a7:21:75:5d:83:c1:10:41:de:67:ff:80: 0f:4f:ce:72:ae:39:e6:a2:56:7e:10:19:6d:af:e0:2a:87:0e: 08:b5:eb:0b:b8:b3:4f:8c:c2:34:cc:8e:1a:ef:71:f1:9f:a6: 15:02:93:35:18:4c:3e:f5:31:71:53:38:30:d0:ec:de:46:19: 16:f9:f7:74:54:1e:e9:34:9b:f2:c9:3f:6d:a2:b9:54:31:5c: 2e:d3:38:8d:c6:91:94:68:a1:24:a2:45:3c:31:e0:58:06:06: ad:6c:01:70:b8:3b:a9:dd:70:ed:a9:42:8d:06:76:6d:43:c7: 2f:5b:b7:04:c0:30:f2:a2:b4:87:de:41:ea:81:15:2e:13:4a: f8:d9:7e:83:9b:98:62:53:ce:23:ba:61:b8:13:c0:29:4f:a8: 37:82:c8:96:b1:1e:a6:c4:13:7a:1d:91:51:48:86:f9:a5:38: 4f:b6:6e:af:b8:85:14:f0:72:e7:2b:ea:7d:1c:8c:90:66:22: 4d:19:ae:be:59:cd:a2:12:f6:91:42:f9:fe:c5:d4:be:06:9e: e4:a4:61:43:b2:a1:61:11:2d:0c:da:e9:8b:0a:07:4a:85:c4: 2d:21:4b:bb:7d:5b:41:44:3a:bf:49:f3:9a:87:36:d9:9a:fe: 0c:7d:d3:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjQwNTA3MDI0NjA5WhcNMjQwNTE0MDI0NjA4WjAYMRYwFAYD VQQDEw02NjM5OTVmMS1mMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DQXw9hxvKTCoMsvlslkADmjnH3C8xulbqVU0CAbJikpREA5HEsFrBjk0qLe vvLJv4xrCzE7zvVBRODQGfMdBxEV0BK+MXax786aoto3JcOYxQmOalPFlhGNmhvw TiafA9vAFkso+KzKYErIQQ/NDEbJnc06xR9yYYAldPGILN2U9H59DMxzT7HFlCiU sQbmQ5dK8083YKL1I+4Cj3aRtGHnprvxAIIOpkypDjY7wBfKwu94zozrR6KYgG+q vEawaJxAbpftfBxmr6iLRtPR+KohuiO2rb1Aj6+1JVs17+ZOCD5a/Z7M/lNmwqIO 7DS+vLTMtSd6hPWgjUjQm64DmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6pyPS6 TphIxeYK8PFX3aqPXAk3MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ToMr4yunIXVdg8EQQd5n/4APT85yrjnmolZ+EBltr+Aqhw4ItesL uLNPjMI0zI4a73Hxn6YVApM1GEw+9TFxUzgw0OzeRhkW+fd0VB7pNJvyyT9torlU MVwu0ziNxpGUaKEkokU8MeBYBgatbAFwuDup3XDtqUKNBnZtQ8cvW7cEwDDyorSH 3kHqgRUuE0r42X6Dm5hiU84jumG4E8ApT6g3gsiWsR6mxBN6HZFRSIb5pThPtm6v uIUU8HLnK+p9HIyQZiJNGa6+Wc2iEvaRQvn+xdS+Bp7kpGFDsqFhES0M2umLCgdK hcQtIUu7fVtBRDq/SfOahzbZmv4MfdNX -----END CERTIFICATE-----Generated at Tue May 7 03:53:38 2024 by rpki-client on console-fra.rpki-client.org