$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: y5BEuJQsHw10AmYVaEH9A9m3c0keUDFQ8zUVH/tgmEs= Subject key identifier: 07:E6:91:24:C2:4B:A1:6E:C3:A8:67:0B:DD:CB:F1:D8:E4:28:F8:9D Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 03AC Signing time: Sun 05 May 2024 02:46:13 +0000 Manifest this update: Sun 05 May 2024 02:46:13 +0000 Manifest next update: Sun 12 May 2024 02:46:13 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: BFiuSlO/G5ZzLrMtJMNaQFnKqkYXFzAM94apBrfSUWQ=) 2: 2852BFB4460811EE89426081C4F9AE02.roa (hash: 5SBJiAli/bXZtfPGIF/C9C+c1KAsv1ipxgIbFADv1co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: May 5 02:46:13 2024 GMT Not After : May 12 02:46:13 2024 GMT Subject: CN=6636f2f5-961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:2a:00:d3:7f:ed:08:77:4e:8d:b6:ca:e2: 00:5f:35:b8:a9:74:f6:1c:1a:31:b2:8d:35:b5:64: 8e:42:ae:7f:c3:c0:a3:82:75:b3:c2:3e:10:ec:20: 75:30:12:fe:0c:de:01:d3:96:a6:d0:5f:d9:e7:da: 88:3a:23:19:2b:2e:d0:2e:5b:45:9b:c9:12:6a:7d: 1a:32:2d:be:33:ae:b6:bb:2b:b3:fc:9a:18:86:72: e6:c3:4f:d0:0e:28:63:d8:2c:55:62:4f:f0:a1:fe: 22:2e:0d:cd:f5:35:46:f2:bd:7b:3d:41:d9:2c:a2: 08:6a:9e:79:ec:83:8b:7d:f4:d7:da:1c:57:24:a8: 50:72:b3:22:e4:8e:f4:9e:0f:31:ca:e3:38:9d:2c: 34:93:06:f5:6b:45:0f:91:43:7d:30:a9:b5:f8:13: ce:c7:8d:fe:14:eb:51:62:70:b8:d3:d9:2b:39:2b: eb:90:d2:92:c7:70:0a:fe:f8:00:52:4f:ae:30:85: 21:c5:76:64:df:2e:3e:fa:14:f0:5d:fc:b3:f3:5d: 4c:b3:1a:c3:77:d7:ee:77:0b:dc:0f:50:b5:a2:67: 34:b8:a3:19:3f:34:c5:51:4a:cf:39:16:00:2f:12: 47:b8:47:49:88:86:93:d6:c2:8a:07:23:7d:9d:3d: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:91:24:C2:4B:A1:6E:C3:A8:67:0B:DD:CB:F1:D8:E4:28:F8:9D X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:36:68:ee:54:8c:72:dd:b5:db:49:5a:df:7b:43:86:94: 71:dd:0b:82:86:4e:3a:0d:c1:fc:0d:78:5a:fd:4c:93:d0:d4: fa:b9:d2:2f:c5:d7:80:b4:ad:75:27:26:7d:61:75:5b:14:cd: 8a:f8:1f:00:fc:11:ec:fb:ba:f9:72:a3:83:af:c6:72:e5:6a: ea:4b:59:64:e6:ce:55:13:47:f6:a1:fb:fb:87:5a:cd:cd:b6: 89:ee:66:b6:6f:63:06:3d:50:6b:94:95:cf:66:f9:13:fd:5e: c8:2d:30:36:93:54:67:d7:10:10:d7:d4:0a:64:25:0d:21:cf: 35:38:2a:ff:82:e8:30:1e:d9:90:d3:a3:1b:b4:b3:e8:c5:bf: 5a:62:78:df:73:07:a0:4a:52:b3:43:b1:af:55:86:06:28:14: 35:9a:d3:ad:f5:a4:51:9b:86:1e:87:e0:c0:79:6a:a5:ea:8a: 6e:ae:e1:80:30:63:b6:9f:bf:90:a2:d4:0f:04:59:23:c7:64: ad:15:02:51:21:47:b9:53:26:65:b9:99:50:44:c6:48:54:9c: 3b:0a:76:1a:d5:30:63:72:e1:6e:8c:65:e6:66:1b:30:74:2c: 44:73:68:da:74:4d:9a:a5:fb:a5:75:ca:b9:c8:9e:4f:f4:78: 91:8f:be:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjQwNTA1MDI0NjEzWhcNMjQwNTEyMDI0NjEzWjAYMRYwFAYD VQQDEw02NjM2ZjJmNS05NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Q0qANN/7Qh3To22yuIAXzW4qXT2HBoxso01tWSOQq5/w8CjgnWzwj4Q7CB1 MBL+DN4B05am0F/Z59qIOiMZKy7QLltFm8kSan0aMi2+M662uyuz/JoYhnLmw0/Q Dihj2CxVYk/wof4iLg3N9TVG8r17PUHZLKIIap557IOLffTX2hxXJKhQcrMi5I70 ng8xyuM4nSw0kwb1a0UPkUN9MKm1+BPOx43+FOtRYnC409krOSvrkNKSx3AK/vgA Uk+uMIUhxXZk3y4++hTwXfyz811MsxrDd9fudwvcD1C1omc0uKMZPzTFUUrPORYA LxJHuEdJiIaT1sKKByN9nT1csQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfmkSTC S6Fuw6hnC93L8djkKPidMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdmzZo7lSMct2120la33tDhpRx3QuChk46DcH8DXha/UyT0NT6udIv xdeAtK11JyZ9YXVbFM2K+B8A/BHs+7r5cqODr8Zy5WrqS1lk5s5VE0f2ofv7h1rN zbaJ7ma2b2MGPVBrlJXPZvkT/V7ILTA2k1Rn1xAQ19QKZCUNIc81OCr/gugwHtmQ 06MbtLPoxb9aYnjfcwegSlKzQ7GvVYYGKBQ1mtOt9aRRm4Yeh+DAeWql6opuruGA MGO2n7+QotQPBFkjx2StFQJRIUe5UyZluZlQRMZIVJw7CnYa1TBjcuFujGXmZhsw dCxEc2jadE2apfuldcq5yJ5P9HiRj77J -----END CERTIFICATE-----Generated at Sun May 5 03:47:46 2024 by rpki-client on console-fra.rpki-client.org