$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: f9giMTA7SE9qpWfarOoZVrvlV3ChDiY1v5aqC2ZlhDE= Subject key identifier: 2C:A7:BC:F5:F2:86:9E:46:1C:7E:D1:45:2A:AA:30:93:1F:D8:A9:83 Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: 2C Signing time: Wed 15 May 2024 08:35:17 +0000 Manifest this update: Wed 15 May 2024 08:35:16 +0000 Manifest next update: Wed 22 May 2024 08:35:16 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: AQMj5XbxDKtfYHoOFZxixjUrCqCf/ETf9jYPdarxV7A=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: wIfhQ+g9F9NVqk8nq5n90WhcuB/KJzwzyp/RW8x0Uho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: May 15 08:35:16 2024 GMT Not After : May 22 08:35:16 2024 GMT Subject: CN=664473c5-6949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:0d:38:bd:10:04:b1:27:d1:13:cc:99:8a: 0d:2b:32:6d:20:85:58:6b:0f:51:6a:4a:b0:24:a7: c9:c2:7c:7e:42:2e:ad:25:91:05:d0:29:71:c2:df: fc:cb:36:0b:1c:88:6b:43:5a:6f:4c:f7:1a:9f:9c: 55:07:05:fd:5b:bc:b4:ae:35:86:a9:9b:11:47:3c: 7b:04:4d:e6:de:11:26:c2:e3:c3:dc:a8:f1:7a:74: 0a:3e:a3:b9:bb:ab:45:81:e1:ca:72:c0:bd:c7:a3: 8a:b5:81:c3:c7:8a:c3:12:19:74:f4:5e:5d:d6:e7: 29:3c:66:c1:5a:ba:81:60:0f:f1:61:b5:d3:9f:f4: e4:07:32:54:6f:e1:2b:aa:7a:be:b1:a6:d4:5e:51: 38:9f:cd:80:62:f7:78:0a:14:59:0e:62:4e:02:db: b5:74:e5:f8:e4:d5:3e:c9:cf:82:47:17:9b:dc:43: b3:0c:c6:b3:fa:84:ed:db:1b:57:55:a1:bc:0b:02: 55:23:ae:d3:d9:23:6d:6e:61:75:48:3b:89:2e:1c: d5:71:2e:e9:e1:36:48:bc:ae:86:f8:a0:86:08:47: 67:4b:67:7b:3c:c3:14:3f:1e:82:55:17:1e:cd:51: e4:c0:6f:89:5d:7c:d5:ba:f4:1c:36:56:10:89:23: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A7:BC:F5:F2:86:9E:46:1C:7E:D1:45:2A:AA:30:93:1F:D8:A9:83 X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:73:be:13:5f:bb:91:a3:ff:0c:75:00:57:bf:b3:71:4d:8b: 62:ff:7b:1e:35:ae:50:4c:75:6f:a7:52:b2:ac:7a:a8:21:12: 85:90:ad:57:71:8d:0c:88:f8:af:00:6e:82:7f:02:aa:1e:ac: cb:fa:46:a4:a1:0e:9f:50:5d:f1:ab:59:25:74:de:80:57:5c: 68:ef:22:3b:67:c7:76:67:06:4e:d3:ef:fc:c2:90:e7:2e:eb: da:a7:6a:30:d0:b1:04:2e:83:ce:ef:f8:6f:bf:bc:cd:0b:ca: 62:b1:4b:27:49:ef:38:25:93:f6:59:42:c5:80:0d:c2:52:49: 7c:63:e6:d8:14:7e:86:6c:89:34:af:ce:d7:c5:0a:14:35:df: cf:d5:0e:e7:fb:aa:87:ad:c6:e0:b5:3a:d3:9d:a4:f0:12:34: 35:a6:9e:ec:79:46:8b:eb:5f:9a:b9:0c:70:20:08:b7:47:d4: d0:6c:7a:9e:2e:2d:3f:58:7e:0b:f5:23:74:0a:9a:58:b0:39: 29:b1:ad:21:86:63:91:41:f8:09:79:8a:17:b2:a1:9a:f0:c1: 56:2c:5e:1f:0a:52:ef:fb:14:c9:66:a0:70:84:bf:35:29:9e: bc:53:8f:76:b1:64:3c:5f:8c:ab:ec:0d:a5:46:bd:e9:99:4b: cf:26:7a:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QUMzQjExMC8GA1UEBRMoMDA4RjJDQzg2NDI0MURFODYzNUU5M0E1NzQ0MEY5QzJF QjI1OEJCMzAeFw0yNDA1MTUwODM1MTZaFw0yNDA1MjIwODM1MTZaMBgxFjAUBgNV BAMTDTY2NDQ3M2M1LTY5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz7A04vRAEsSfRE8yZig0rMm0ghVhrD1FqSrAkp8nCfH5CLq0lkQXQKXHC3/zL NgsciGtDWm9M9xqfnFUHBf1bvLSuNYapmxFHPHsETebeESbC48PcqPF6dAo+o7m7 q0WB4cpywL3Ho4q1gcPHisMSGXT0Xl3W5yk8ZsFauoFgD/FhtdOf9OQHMlRv4Suq er6xptReUTifzYBi93gKFFkOYk4C27V05fjk1T7Jz4JHF5vcQ7MMxrP6hO3bG1dV obwLAlUjrtPZI21uYXVIO4kuHNVxLunhNki8rob4oIYIR2dLZ3s8wxQ/HoJVFx7N UeTAb4ldfNW69Bw2VhCJI4yRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULKe89fKG nkYcftFFKqowkx/YqYMwHwYDVR0jBBgwFoAUAI8syGQkHehjXpOldED5wusli7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBQzNCLzk1N0IyNDQwQ0VD QjExRUVCMDMwNTU4N0M0RjlBRTAyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUk4c3lHUWtIZWhqWHBPbGRFRDV3dXNsaTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB QzNCLzk1N0IyNDQwQ0VDQjExRUVCMDMwNTU4N0M0RjlBRTAyL0FJOHN5R1FrSGVo alhwT2xkRUQ1d3VzbGk3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtzvhNfu5Gj/wx1AFe/s3FNi2L/ex41rlBMdW+nUrKseqghEoWQrVdx jQyI+K8AboJ/AqoerMv6RqShDp9QXfGrWSV03oBXXGjvIjtnx3ZnBk7T7/zCkOcu 69qnajDQsQQug87v+G+/vM0LymKxSydJ7zglk/ZZQsWADcJSSXxj5tgUfoZsiTSv ztfFChQ138/VDuf7qoetxuC1OtOdpPASNDWmnux5RovrX5q5DHAgCLdH1NBsep4u LT9Yfgv1I3QKmliwOSmxrSGGY5FB+Al5iheyoZrwwVYsXh8KUu/7FMlmoHCEvzUp nrxTj3axZDxfjKvsDaVGvemZS88met8= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org