$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: CBSH33kH/tVv+HJbBFMNgJBgY7axH16h/2wCM4SrmmA= Subject key identifier: A6:91:9A:01:F3:07:00:79:46:04:4F:53:1D:56:6D:0A:C1:1A:A5:45 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 26A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 267F Signing time: Thu 02 May 2024 16:00:16 +0000 Manifest this update: Thu 02 May 2024 16:00:15 +0000 Manifest next update: Thu 09 May 2024 16:00:15 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: N5Wr8oi7pf1QNf1ATo2Qg3Lv71vxooAMAC+cYNiGW+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9895 (0x26a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: May 2 16:00:15 2024 GMT Not After : May 9 16:00:15 2024 GMT Subject: CN=6633b88f-d5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:27:33:c8:b0:55:36:a4:d3:56:1b:3f:8c: f9:64:30:1f:4a:2a:43:af:ef:70:a1:c4:21:05:2e: 6c:28:ce:50:cb:00:fa:20:b1:5c:ee:48:d7:b8:49: 73:be:61:df:c4:d8:19:48:54:8f:a4:95:7b:25:d8: 9d:44:33:4b:46:9f:5f:b7:0e:99:2e:84:b0:31:fc: f0:36:ee:3c:cb:f7:ca:46:40:1b:03:6f:8e:ee:33: 53:30:76:d9:86:12:f8:2c:1b:6c:50:ba:d1:eb:81: 17:51:c8:d8:83:b0:74:1b:11:ba:15:d4:63:51:c2: c9:89:dd:70:29:c2:04:35:75:43:54:cd:59:d2:43: a4:5c:38:3e:37:31:f3:b2:94:5c:86:34:26:5a:ae: 85:6b:d1:a7:84:7e:4e:0f:46:cc:74:be:c7:8d:d2: 10:aa:ef:20:e6:ec:9b:51:e5:cb:7f:5d:ac:5d:d3: b4:34:9b:14:67:62:33:16:4f:28:5c:06:64:18:07: f5:56:f6:41:67:e8:25:ae:bf:a1:8b:0e:00:2d:19: 3e:5d:da:eb:db:d6:4a:25:0f:c8:94:dc:f3:b7:6c: 98:51:7e:f0:de:29:fb:a4:c9:eb:5e:b3:f1:a6:2c: 93:f8:8d:dc:6d:c4:49:dd:03:fd:6f:63:89:bf:14: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:91:9A:01:F3:07:00:79:46:04:4F:53:1D:56:6D:0A:C1:1A:A5:45 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:69:d7:3f:f7:44:0a:c6:02:42:59:77:75:46:d4:d8:75:87: a4:bb:31:b2:1d:6c:34:51:06:d3:ea:26:d1:19:11:31:b4:0f: d2:2e:3d:d6:3e:8f:88:a2:6c:47:62:c5:3f:dd:7d:ed:6f:d4: 27:a3:cd:b5:fc:f7:af:d8:39:24:e5:37:fe:1b:d6:7f:f6:16: 3a:cb:6d:c4:46:84:90:e6:61:e6:19:22:85:11:d1:01:f2:ff: f2:5a:c3:ce:e6:34:62:02:20:b7:c0:6b:1b:1b:6a:95:0d:86: c9:87:2f:18:b7:3e:7e:f7:e8:cc:bf:88:55:20:6f:c8:29:91: c7:06:01:59:7a:fc:48:29:e0:dc:47:0c:47:28:65:85:22:a3: 86:73:3e:76:04:2b:ee:50:d9:43:75:65:90:9c:26:1a:c6:ba: d3:a7:3b:a8:13:c7:c0:fc:70:55:d9:34:49:12:4a:c5:d2:02: 56:8a:e4:86:aa:48:84:28:36:10:a9:e3:b3:f6:ba:21:ba:5e: 67:a8:d1:44:d8:a1:cd:1d:73:48:ee:86:e2:ad:fe:1e:1e:60: 28:69:e9:96:25:f7:31:84:04:1b:14:07:07:3d:2c:2a:28:b2: d0:7c:4b:60:ec:02:77:25:96:84:78:84:5b:15:a8:19:64:18: 04:ce:ef:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjQwNTAyMTYwMDE1WhcNMjQwNTA5MTYwMDE1WjAYMRYwFAYD VQQDEw02NjMzYjg4Zi1kNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DonM8iwVTak01YbP4z5ZDAfSipDr+9wocQhBS5sKM5QywD6ILFc7kjXuElz vmHfxNgZSFSPpJV7JdidRDNLRp9ftw6ZLoSwMfzwNu48y/fKRkAbA2+O7jNTMHbZ hhL4LBtsULrR64EXUcjYg7B0GxG6FdRjUcLJid1wKcIENXVDVM1Z0kOkXDg+NzHz spRchjQmWq6Fa9GnhH5OD0bMdL7HjdIQqu8g5uybUeXLf12sXdO0NJsUZ2IzFk8o XAZkGAf1VvZBZ+glrr+hiw4ALRk+Xdrr29ZKJQ/IlNzzt2yYUX7w3in7pMnrXrPx piyT+I3cbcRJ3QP9b2OJvxTSRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaRmgHz BwB5RgRPUx1WbQrBGqVFMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHadc/90QKxgJCWXd1RtTYdYekuzGyHWw0UQbT6ibRGRExtA/SLj3W Po+IomxHYsU/3X3tb9Qno821/Pev2Dkk5Tf+G9Z/9hY6y23ERoSQ5mHmGSKFEdEB 8v/yWsPO5jRiAiC3wGsbG2qVDYbJhy8Ytz5+9+jMv4hVIG/IKZHHBgFZevxIKeDc RwxHKGWFIqOGcz52BCvuUNlDdWWQnCYaxrrTpzuoE8fA/HBV2TRJEkrF0gJWiuSG qkiEKDYQqeOz9rohul5nqNFE2KHNHXNI7obirf4eHmAoaemWJfcxhAQbFAcHPSwq KLLQfEtg7AJ3JZaEeIRbFagZZBgEzu/i -----END CERTIFICATE-----Generated at Thu May 2 17:18:30 2024 by rpki-client on console-ams.rpki-client.org