$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: Lspr6uOyMF9yfiy7KCgXagrK8xNUaiB+y+Is26Sy+48= Subject key identifier: 09:04:77:D6:43:46:63:7C:27:D3:31:34:58:89:D6:5F:FC:1D:6A:7F Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0935 Signing time: Tue 30 Apr 2024 21:28:40 +0000 Manifest this update: Tue 30 Apr 2024 21:28:39 +0000 Manifest next update: Tue 07 May 2024 21:28:39 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: BPl6HRtuCfZUyQK91gM0uyI1xKXN6hBoqUxjaEvOQkU=) 2: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (hash: ibjFmXnXnU8N5O1p29U2A3A7TTL4SvNFNaoSn7RurMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Apr 30 21:28:39 2024 GMT Not After : May 7 21:28:39 2024 GMT Subject: CN=66316288-9ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:39:d0:15:dc:30:76:01:da:5f:9d:e3:ca: a4:cc:1c:54:46:27:fb:8a:25:7a:fb:b5:41:ad:a3: 6f:be:ad:81:62:dc:b9:b4:df:6a:32:88:86:73:b5: 67:6a:9f:20:75:6e:6e:85:22:66:6a:ed:f4:2f:87: 6c:02:72:ab:ee:ba:10:76:9d:5d:e4:1f:97:31:da: 65:8c:ae:1a:02:f3:0d:4a:e0:c3:92:5a:2a:b4:7a: a4:7c:a1:cc:80:fa:af:1c:44:f4:31:83:2a:56:a0: d0:06:30:0f:ed:85:e1:af:ae:29:c5:20:14:56:54: 38:da:6e:09:15:fa:8e:fc:0c:86:6c:4c:6f:7a:80: e0:68:53:a1:42:10:48:6b:d2:ee:ad:4d:6b:a6:e6: c0:b9:40:77:80:8f:7c:42:05:ee:21:98:7c:f9:7f: 43:fb:d1:58:b7:84:f5:21:e0:50:63:d3:9d:27:35: fd:5a:3b:70:7c:01:ea:d5:c3:3f:e7:ed:c8:5d:07: 2e:7e:65:90:5d:a3:e2:be:c0:49:94:18:87:f4:0a: 2c:b2:59:38:9d:d9:7a:02:d8:b1:f8:a7:46:3c:e8: df:96:3a:8c:95:22:af:e7:f5:1a:c5:23:0d:45:56: ea:66:79:04:77:a2:f6:0f:ae:3d:d4:3b:bf:12:72: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:77:D6:43:46:63:7C:27:D3:31:34:58:89:D6:5F:FC:1D:6A:7F X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:0c:e9:c5:ea:68:22:5c:22:ac:94:a7:ac:55:c6:59:b4:9f: 03:16:eb:26:c1:37:26:18:31:2b:46:15:29:f2:7d:f0:ee:f0: f8:8c:e7:2f:52:f9:cb:bc:e7:54:55:3b:02:7a:d2:cf:fe:18: ee:f2:88:87:6b:52:36:b5:0d:06:dc:13:53:d5:8e:13:3f:d5: 40:be:81:17:1c:18:e5:15:d3:2a:7f:e1:c6:8a:37:03:fe:08: 0e:8a:39:44:0b:66:b0:3f:f8:8f:46:7f:46:cb:a4:81:d2:b7: 66:7e:9c:1a:cd:a1:54:1c:6d:59:f2:1f:aa:84:92:48:23:5e: 23:dc:67:59:6d:15:d0:e7:e8:93:90:26:8a:38:d6:69:33:80: 03:c6:59:bd:a6:30:6c:15:16:06:99:85:5f:b7:8f:17:3a:eb: c1:1b:de:64:d6:65:bf:41:cc:35:f9:b7:5e:6f:df:1f:cf:67: 06:97:4f:81:67:0d:69:77:97:c4:79:9d:4f:e6:bc:e2:59:95: eb:de:15:63:7a:58:78:09:4a:a6:55:1d:55:05:14:04:19:37: 44:28:44:06:cc:15:f6:7e:10:ed:da:cc:ec:99:5b:20:7d:78: 5b:40:41:ca:82:ee:ac:aa:66:01:cb:00:a3:96:6b:d4:5d:c1: 7f:5a:6e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjQwNDMwMjEyODM5WhcNMjQwNTA3MjEyODM5WjAYMRYwFAYD VQQDEw02NjMxNjI4OC05YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvk50BXcMHYB2l+d48qkzBxURif7iiV6+7VBraNvvq2BYty5tN9qMoiGc7Vn ap8gdW5uhSJmau30L4dsAnKr7roQdp1d5B+XMdpljK4aAvMNSuDDkloqtHqkfKHM gPqvHET0MYMqVqDQBjAP7YXhr64pxSAUVlQ42m4JFfqO/AyGbExveoDgaFOhQhBI a9LurU1rpubAuUB3gI98QgXuIZh8+X9D+9FYt4T1IeBQY9OdJzX9WjtwfAHq1cM/ 5+3IXQcufmWQXaPivsBJlBiH9Aosslk4ndl6Atix+KdGPOjfljqMlSKv5/UaxSMN RVbqZnkEd6L2D6491Du/EnKwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkEd9ZD RmN8J9MxNFiJ1l/8HWp/MB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnDOnF6mgiXCKslKesVcZZtJ8DFusmwTcmGDErRhUp8n3w7vD4jOcv UvnLvOdUVTsCetLP/hju8oiHa1I2tQ0G3BNT1Y4TP9VAvoEXHBjlFdMqf+HGijcD /ggOijlEC2awP/iPRn9Gy6SB0rdmfpwazaFUHG1Z8h+qhJJII14j3GdZbRXQ5+iT kCaKONZpM4ADxlm9pjBsFRYGmYVft48XOuvBG95k1mW/Qcw1+bdeb98fz2cGl0+B Zw1pd5fEeZ1P5rziWZXr3hVjelh4CUqmVR1VBRQEGTdEKEQGzBX2fhDt2szsmVsg fXhbQEHKgu6sqmYBywCjlmvUXcF/Wm7i -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:07 2024 by rpki-client on console-ams.rpki-client.org