$ rpki-client -vvf rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft File: g8qOn9YBtd1dXQXkVltHHhAyMMo.mft (raw, json) Hash identifier: bA3pmYaQgE+anxRhqUKLaxYeQBKwPVyAMahD16HKcX4= Subject key identifier: 2F:AC:94:CF:62:BB:A6:38:0D:76:14:FA:5B:EC:5E:CA:85:D7:49:D1 Authority key identifier: 83:CA:8E:9F:D6:01:B5:DD:5D:5D:05:E4:56:5B:47:1E:10:32:30:CA Certificate issuer: /CN=A9188844/serialNumber=83CA8E9FD601B5DD5D5D05E4565B471E103230CA Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8qOn9YBtd1dXQXkVltHHhAyMMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft Manifest number: 06EF Signing time: Thu 02 May 2024 22:54:32 +0000 Manifest this update: Thu 02 May 2024 22:54:32 +0000 Manifest next update: Thu 09 May 2024 22:54:32 +0000 Files and hashes: 1: g8qOn9YBtd1dXQXkVltHHhAyMMo.crl (hash: UMAljVNcJuPQz69zxjXDZBdchqdvxj/sV9O8uJeYbio=) 2: E8454C18D1F611EEBEC5CC2AC4F9AE02.roa (hash: QdAbubmMRXRcrweErZUchE74Aram3A6+tzpLXqaLz24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.crl rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8qOn9YBtd1dXQXkVltHHhAyMMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188844/serialNumber=83CA8E9FD601B5DD5D5D05E4565B471E103230CA Validity Not Before: May 2 22:54:32 2024 GMT Not After : May 9 22:54:32 2024 GMT Subject: CN=663419a8-d53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:51:d9:61:cf:53:99:94:73:28:87:d6:a9: 77:60:d5:7c:72:23:a4:3f:a4:c9:a1:e1:d8:cf:10: dc:57:e5:4b:0f:0f:fa:f2:c5:7c:a4:73:2a:d1:92: 54:74:02:b9:b3:49:f9:af:eb:a3:0e:aa:3f:cd:ea: 57:05:80:2e:05:d6:e7:42:fa:a2:6c:39:42:b2:f6: d1:d6:b5:f9:0d:05:d6:7c:b5:fc:52:b4:d8:15:ae: 9c:8f:d1:13:f9:13:52:6a:7b:bf:0d:f8:27:39:53: 51:9b:7e:5a:be:08:61:87:bb:ca:7c:0a:ff:2c:ed: 37:e9:7a:1f:12:45:5e:e6:fe:b7:1e:c7:68:93:a6: cf:fa:6b:f7:1b:10:0d:51:5a:73:cf:a6:a1:ef:e4: bd:0e:81:d3:e4:6c:9a:16:c8:52:bb:5f:70:04:7f: de:0b:de:60:74:3b:6e:3f:34:ca:98:4a:2f:86:06: 34:0c:99:2d:55:00:a1:f8:37:12:52:cf:f8:ed:52: b7:b0:8d:05:31:2c:d9:5b:bf:c1:69:06:43:6f:f1: 67:09:08:ae:e8:2c:7f:79:97:ef:2e:d0:ff:6d:4c: ba:0d:81:58:9f:a1:ae:19:eb:87:6d:81:5b:c7:e6: 83:b1:9b:72:de:26:a3:00:2f:57:b4:9a:35:cf:ec: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AC:94:CF:62:BB:A6:38:0D:76:14:FA:5B:EC:5E:CA:85:D7:49:D1 X509v3 Authority Key Identifier: keyid:83:CA:8E:9F:D6:01:B5:DD:5D:5D:05:E4:56:5B:47:1E:10:32:30:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8qOn9YBtd1dXQXkVltHHhAyMMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:42:75:02:37:15:f0:b0:72:91:17:2a:2c:d8:47:af:c9:d5: f3:a0:0d:c0:a7:b7:9e:ef:68:b6:78:46:95:06:d1:50:de:aa: 08:32:32:66:ee:bd:7c:b0:51:fe:b6:9e:d2:1a:94:c3:7d:0c: d7:f9:2b:dd:14:14:68:0f:5c:01:dd:1a:d9:5e:ff:2d:93:07: 01:bd:1b:06:99:94:08:56:55:02:88:34:d4:83:40:9c:72:3e: 2e:9f:a1:e3:7e:03:4b:23:3a:23:b1:45:41:05:ac:fb:36:2b: 4b:8d:69:b8:2f:be:f4:a1:1f:f0:3e:1f:2b:dc:5b:82:96:6b: 71:04:df:25:02:4e:8e:c3:c4:34:1a:fb:e3:99:d6:ba:5a:b1: 47:ec:c3:d0:4e:63:e6:ab:36:f4:a4:44:bc:43:25:6c:c0:6c: 5c:d0:ee:09:e0:38:70:c6:b4:ae:1b:82:f3:89:95:22:f6:9a: 4f:ff:d6:ee:06:96:68:52:4a:7e:83:3f:19:44:3b:35:58:e9: 68:55:f3:78:1d:35:a8:3c:68:ee:20:da:dd:ae:ec:b5:d4:c9: a8:d2:7e:c6:d6:7a:84:70:db:fd:23:10:93:b0:cc:61:f2:7e: 18:6c:87:07:66:ff:20:57:ec:ad:d3:2e:81:0a:51:3f:40:a3: 4f:36:2f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg4NDQxMTAvBgNVBAUTKDgzQ0E4RTlGRDYwMUI1REQ1RDVEMDVFNDU2NUI0NzFF MTAzMjMwQ0EwHhcNMjQwNTAyMjI1NDMyWhcNMjQwNTA5MjI1NDMyWjAYMRYwFAYD VQQDEw02NjM0MTlhOC1kNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcZR2WHPU5mUcyiH1ql3YNV8ciOkP6TJoeHYzxDcV+VLDw/68sV8pHMq0ZJU dAK5s0n5r+ujDqo/zepXBYAuBdbnQvqibDlCsvbR1rX5DQXWfLX8UrTYFa6cj9ET +RNSanu/DfgnOVNRm35avghhh7vKfAr/LO036XofEkVe5v63Hsdok6bP+mv3GxAN UVpzz6ah7+S9DoHT5GyaFshSu19wBH/eC95gdDtuPzTKmEovhgY0DJktVQCh+DcS Us/47VK3sI0FMSzZW7/BaQZDb/FnCQiu6Cx/eZfvLtD/bUy6DYFYn6GuGeuHbYFb x+aDsZty3iajAC9XtJo1z+wvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+slM9i u6Y4DXYU+lvsXsqF10nRMB8GA1UdIwQYMBaAFIPKjp/WAbXdXV0F5FZbRx4QMjDK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODg0NC9CQjE2MDM1NkZD QjQxMUVBQTAyOEE0MEFDNEY5QUUwMi9nOHFPbjlZQnRkMWRYUVhrVmx0SEhoQXlN TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4cU9uOVlCdGQxZFhRWGtWbHRISGhBeU1Nby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODg0NC9CQjE2MDM1NkZDQjQxMUVBQTAyOEE0MEFDNEY5QUUwMi9nOHFPbjlZQnRk MWRYUVhrVmx0SEhoQXlNTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQnUCNxXwsHKRFyos2EevydXzoA3Ap7ee72i2eEaVBtFQ3qoIMjJm 7r18sFH+tp7SGpTDfQzX+SvdFBRoD1wB3RrZXv8tkwcBvRsGmZQIVlUCiDTUg0Cc cj4un6HjfgNLIzojsUVBBaz7NitLjWm4L770oR/wPh8r3FuClmtxBN8lAk6Ow8Q0 Gvvjmda6WrFH7MPQTmPmqzb0pES8QyVswGxc0O4J4DhwxrSuG4LziZUi9ppP/9bu BpZoUkp+gz8ZRDs1WOloVfN4HTWoPGjuINrdruy11Mmo0n7G1nqEcNv9IxCTsMxh 8n4YbIcHZv8gV+yt0y6BClE/QKNPNi8T -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org