$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: JJ+PlUV3Cv+hVzbzxozqwIray0mRRbrIAO51n3gctmQ= Subject key identifier: 22:3A:84:C4:D8:8F:D0:BC:64:DB:CC:0F:07:BC:25:86:20:CC:61:4E Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 1A Signing time: Wed 15 May 2024 08:50:52 +0000 Manifest this update: Wed 15 May 2024 08:50:52 +0000 Manifest next update: Wed 22 May 2024 08:50:52 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: 8AAwFIjxvbc3a9r/xD/cq6bLTGrAqG9LKJzlYPsEvE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: May 15 08:50:52 2024 GMT Not After : May 22 08:50:52 2024 GMT Subject: CN=6644776c-7c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:4e:7d:17:cd:3d:b4:9e:5c:e9:4b:8d:bd: 30:23:ff:06:81:6c:50:ba:60:57:33:6f:81:e6:ac: e5:66:05:ce:b8:e7:01:c2:9c:05:49:97:6d:16:a9: 40:05:23:a3:88:b5:de:a8:f6:24:d7:bc:e0:b8:dd: e0:81:0d:6b:47:aa:f4:87:85:04:79:d2:b8:53:07: da:94:cd:9c:1e:a6:82:03:4f:e3:0e:8a:b9:fe:9a: 35:3b:34:98:e6:df:83:ac:79:a2:7f:2a:6e:8d:85: fb:06:cb:66:51:9b:d0:36:b2:dc:a0:51:bd:90:90: 0a:3b:50:37:1e:1d:60:70:c6:43:03:b0:5e:3a:8e: 28:fc:2c:5a:96:3e:a2:1b:2b:52:26:32:49:4e:28: fa:df:68:5b:67:cf:33:0a:81:e1:18:81:60:2f:ce: 39:e0:c7:f7:aa:79:a4:87:13:5c:69:2f:44:48:12: 33:32:75:0a:17:73:1d:e8:a8:b6:64:13:c5:b8:a4: a7:4c:50:fc:04:82:34:3a:d4:83:82:57:88:69:99: 7e:2c:f7:37:00:72:b0:79:2c:fd:50:95:cf:d7:37: ba:5e:45:c5:66:20:f2:ed:d5:35:d0:a2:75:0c:2a: 5d:77:c6:3f:6b:fa:4c:45:fb:84:6a:24:f2:b6:68: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:84:C4:D8:8F:D0:BC:64:DB:CC:0F:07:BC:25:86:20:CC:61:4E X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3f:a2:0b:71:60:3e:61:ba:c8:6d:06:6f:8d:db:e1:d0:e2: aa:94:e9:3e:50:5d:81:d0:a0:8d:e3:c7:9b:35:93:5d:1c:d1: d5:0f:b2:95:8e:3c:c5:b8:ba:bf:a1:fb:ce:3f:1f:0c:87:61: f8:56:3b:4d:04:e3:a1:d2:37:98:f0:13:db:04:d2:ca:7a:ef: 99:3b:03:e4:d0:65:f2:4e:69:66:e5:0d:a2:7c:9d:49:25:51: 8c:10:97:c7:15:4c:b9:f1:98:72:fa:e3:09:5b:c2:23:7b:da: a2:61:5b:3c:3b:53:a4:08:c4:27:c4:ed:1a:45:fc:76:2a:f9: 80:8c:7f:2a:b1:4b:52:50:dc:1c:ee:8e:86:45:12:81:eb:5d: c4:1c:f3:ec:98:69:a0:6b:53:4f:34:01:74:c9:02:c6:9c:cb: 41:2a:d4:7d:1a:dc:93:65:0f:ee:39:b0:07:f3:c0:f3:ca:2c: 40:1a:09:a9:ea:60:2f:9e:af:07:53:c6:34:2b:e8:66:1f:c0: 53:dc:37:7b:18:bc:25:c2:d7:6a:03:76:c1:8a:04:ec:ed:91: 91:57:7e:ef:ab:83:a5:5e:ab:a2:73:17:dd:56:3f:fe:f4:ad: 3d:8d:8f:55:58:de:fb:8b:a7:e7:7d:ca:b0:37:43:14:25:6b: 82:be:f7:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0ZBRDExMC8GA1UEBRMoMDNGRjA2NTdDMEVDRjg3Mzk4MzAzM0Y3QzZDNjQ4OEIz Mzc4OUM0MzAeFw0yNDA1MTUwODUwNTJaFw0yNDA1MjIwODUwNTJaMBgxFjAUBgNV BAMTDTY2NDQ3NzZjLTdjNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7r059F809tJ5c6UuNvTAj/waBbFC6YFczb4HmrOVmBc645wHCnAVJl20WqUAF I6OItd6o9iTXvOC43eCBDWtHqvSHhQR50rhTB9qUzZwepoIDT+MOirn+mjU7NJjm 34OseaJ/Km6NhfsGy2ZRm9A2stygUb2QkAo7UDceHWBwxkMDsF46jij8LFqWPqIb K1ImMklOKPrfaFtnzzMKgeEYgWAvzjngx/eqeaSHE1xpL0RIEjMydQoXcx3oqLZk E8W4pKdMUPwEgjQ61IOCV4hpmX4s9zcAcrB5LP1Qlc/XN7peRcVmIPLt1TXQonUM Kl13xj9r+kxF+4RqJPK2aKhfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIjqExNiP 0Lxk28wPB7wlhiDMYU4wHwYDVR0jBBgwFoAUA/8GV8Ds+HOYMDP3xsZIizN4nEMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDRkFELzU2MUQ2NjJFRUEw NDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5F TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV84R1Y4RHMtSE9ZTURQM3hzWklpek40bkVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD RkFELzU2MUQ2NjJFRUEwNDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhP WU1EUDN4c1pJaXpONG5FTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABU/ogtxYD5hushtBm+N2+HQ4qqU6T5QXYHQoI3jx5s1k10c0dUPspWO PMW4ur+h+84/HwyHYfhWO00E46HSN5jwE9sE0sp675k7A+TQZfJOaWblDaJ8nUkl UYwQl8cVTLnxmHL64wlbwiN72qJhWzw7U6QIxCfE7RpF/HYq+YCMfyqxS1JQ3Bzu joZFEoHrXcQc8+yYaaBrU080AXTJAsacy0Eq1H0a3JNlD+45sAfzwPPKLEAaCanq YC+erwdTxjQr6GYfwFPcN3sYvCXC12oDdsGKBOztkZFXfu+rg6Veq6JzF91WP/70 rT2Nj1VY3vuLp+d9yrA3QxQla4K+95M= -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org