$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: m5YCazZM0m5Cdq5bFh8iyR0tmLYca3I0AVZ02JVML5k= Subject key identifier: 46:E1:36:97:85:92:1E:8E:E4:9D:1F:B1:A6:B6:7F:A2:83:60:5A:FD Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: 3F Signing time: Wed 15 May 2024 08:20:39 +0000 Manifest this update: Wed 15 May 2024 08:20:38 +0000 Manifest next update: Wed 22 May 2024 08:20:38 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: /voUAqt7IK3iwiP8tYN9XoTX9Wr2QEL1fnOqLFraLKA=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: 0YwIpwZV+EamQ2q72vxnEy2ZKU8ZjP3fuxP6rNu/zT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: May 15 08:20:38 2024 GMT Not After : May 22 08:20:38 2024 GMT Subject: CN=66447056-0f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:e3:0a:b2:38:e9:8a:34:8d:8e:7c:38:ff: 80:7a:7b:c8:91:4a:e9:5a:41:01:39:38:a6:f8:4b: 38:e3:5c:00:ad:59:de:3d:6a:0c:a9:df:ac:5d:c7: 2e:5e:bc:9c:a9:bd:45:3d:c7:6b:48:a5:77:87:e7: c3:d8:95:b3:db:58:6f:00:0c:bb:64:16:a1:26:f8: 59:ff:c0:79:08:ce:ba:d4:26:47:88:e4:dc:48:62: 11:53:47:91:0f:e1:5f:7c:52:b4:41:7e:0b:f9:19: 5d:3b:09:13:2a:1b:30:e3:37:14:2b:90:13:f4:b1: 3b:a8:0c:72:65:92:a5:08:bd:25:87:98:e4:08:2a: 4a:51:0e:c8:be:40:4b:12:d5:15:81:45:f9:17:11: 91:b5:1a:40:d9:ab:d9:09:6a:6c:f5:e9:ad:e7:d4: d3:72:47:45:86:68:04:c9:99:22:e5:61:e6:c3:e9: 99:5b:98:cf:54:d9:57:ac:38:8a:ce:75:8d:ff:7c: 8d:85:d6:bd:8c:33:04:01:56:cb:84:a4:f8:0b:dd: 53:2e:55:c8:82:86:cf:c4:85:6a:b6:bb:09:1f:a5: 7d:cc:2c:4e:ca:2d:0e:24:ce:f2:76:ba:ae:e9:f3: 5b:42:ff:a4:2a:9f:36:3b:ab:20:b9:24:c7:74:25: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:36:97:85:92:1E:8E:E4:9D:1F:B1:A6:B6:7F:A2:83:60:5A:FD X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:8f:78:e6:e6:6b:9a:f4:68:07:a5:b2:d3:be:8a:17:27:e8: 86:c9:0a:7f:70:7f:3f:a9:68:53:ec:0a:af:a6:70:d3:72:11: e8:71:76:09:ae:22:da:85:21:01:b7:1d:58:7b:13:ff:98:06: 76:d6:ad:4c:b1:6f:ae:88:80:cd:0f:1f:82:c5:99:ab:b4:58: a7:fe:6b:10:a8:44:71:00:12:16:69:3e:dd:25:88:da:37:e8: ce:65:b9:56:88:cf:ab:0b:91:bb:41:43:ed:28:08:f5:bf:da: d2:ad:90:7f:f4:d4:50:6f:e6:1f:93:1d:ca:09:bf:94:ca:38: 0c:c1:43:d5:87:03:9c:7b:90:2d:55:ff:f9:2f:cb:f5:64:a4: 16:8a:f4:32:a6:be:a8:4d:94:89:e3:91:d1:aa:34:37:73:35: 3e:fe:b9:76:a9:89:a1:91:82:05:af:97:89:15:43:03:a1:45: 5f:a9:cd:5c:e1:98:de:c8:96:38:e0:d2:81:62:23:fd:21:91: cb:17:81:6f:c0:19:1f:59:1b:50:e5:5b:cd:c6:f0:ad:3b:46: 9b:32:f1:28:1b:1f:da:f2:74:90:8f:c9:40:e2:84:7b:c6:d6: a5:14:77:29:bc:c4:b4:99:fc:f5:68:79:ed:02:99:d0:31:bd: 2a:56:dc:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY0NTExMC8GA1UEBRMoNDZFRjA0QkYxMTk4QkUwRTJBMzEzQUE3QUQwQUIwRkM3 RTA4MUM0NTAeFw0yNDA1MTUwODIwMzhaFw0yNDA1MjIwODIwMzhaMBgxFjAUBgNV BAMTDTY2NDQ3MDU2LTBmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMq+MKsjjpijSNjnw4/4B6e8iRSulaQQE5OKb4SzjjXACtWd49agyp36xdxy5e vJypvUU9x2tIpXeH58PYlbPbWG8ADLtkFqEm+Fn/wHkIzrrUJkeI5NxIYhFTR5EP 4V98UrRBfgv5GV07CRMqGzDjNxQrkBP0sTuoDHJlkqUIvSWHmOQIKkpRDsi+QEsS 1RWBRfkXEZG1GkDZq9kJamz16a3n1NNyR0WGaATJmSLlYebD6ZlbmM9U2VesOIrO dY3/fI2F1r2MMwQBVsuEpPgL3VMuVciChs/EhWq2uwkfpX3MLE7KLQ4kzvJ2uq7p 81tC/6QqnzY7qyC5JMd0JbjvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURuE2l4WS Ho7knR+xprZ/ooNgWv0wHwYDVR0jBBgwFoAURu8EvxGYvg4qMTqnrQqw/H4IHEUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjQ1L0ZEOTk2NTE0QjhB QTExRUU5OUQ2QzgxQkM0RjlBRTAyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnU4RXZ4R1l2ZzRxTVRxbnJRcXdfSDRJSEVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjQ1L0ZEOTk2NTE0QjhBQTExRUU5OUQ2QzgxQkM0RjlBRTAyL1J1OEV2eEdZdmc0 cU1UcW5yUXF3X0g0SUhFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCPeObma5r0aAelstO+ihcn6IbJCn9wfz+paFPsCq+mcNNyEehxdgmu ItqFIQG3HVh7E/+YBnbWrUyxb66IgM0PH4LFmau0WKf+axCoRHEAEhZpPt0liNo3 6M5luVaIz6sLkbtBQ+0oCPW/2tKtkH/01FBv5h+THcoJv5TKOAzBQ9WHA5x7kC1V //kvy/VkpBaK9DKmvqhNlInjkdGqNDdzNT7+uXapiaGRggWvl4kVQwOhRV+pzVzh mN7Iljjg0oFiI/0hkcsXgW/AGR9ZG1DlW83G8K07Rpsy8SgbH9rydJCPyUDihHvG 1qUUdym8xLSZ/PVoee0CmdAxvSpW3Eo= -----END CERTIFICATE-----Generated at Wed May 15 09:04:14 2024 by rpki-client on console-ams.rpki-client.org