$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: HdxRuMSkoIqI0FLCafmXgUv3QDG1AbUKf0SXZ3PY22Q= Subject key identifier: C3:36:54:D8:30:DC:AB:45:B7:62:60:D0:13:DC:E9:B6:21:5E:70:B1 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 04DD Signing time: Fri 03 May 2024 01:27:48 +0000 Manifest this update: Fri 03 May 2024 01:27:47 +0000 Manifest next update: Fri 10 May 2024 01:27:47 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: 6sL2aVM08bgP7DRTuHZMqKobD0KYN8JtndMHhdN5Fcg=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: 1gFlLDZEPlRADkZIIRCf6FHg4FghD3uFjKDBnakBIvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: May 3 01:27:47 2024 GMT Not After : May 10 01:27:47 2024 GMT Subject: CN=66343d94-5450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:85:25:57:ee:8d:42:ed:41:6c:53:a8:22: b0:01:fa:83:f5:37:d3:12:c7:46:ee:ce:55:e2:4e: c5:e1:63:d9:2e:2b:8d:3a:f2:df:43:ca:c0:f8:76: 42:13:35:d2:4d:2d:91:1c:82:88:65:47:8e:ba:91: 83:09:ab:52:d0:33:b5:29:23:5c:79:f3:61:d9:5b: fd:66:18:65:59:bb:cd:ea:da:4b:e1:0d:cc:16:fe: 69:b0:be:a4:62:f3:18:a1:22:9a:66:ed:29:06:7b: 5d:56:fb:1b:ae:e6:39:20:72:95:11:c1:62:37:5a: d6:ec:bb:18:2e:fb:22:ac:42:67:46:18:41:93:0b: c8:45:4b:64:83:8e:c1:f2:ca:d3:f6:b5:09:4a:d2: 8f:67:c4:53:6b:ca:58:76:74:af:19:b3:65:44:df: 2c:27:e6:40:03:8e:08:0a:cb:b0:83:0a:53:7c:f3: 83:64:12:8e:3d:cf:71:c5:7c:72:1d:4d:e2:fc:c8: cf:2f:11:0d:9a:35:63:a6:6d:b4:0a:f4:f3:13:34: 5c:83:3a:d2:79:bb:ee:8b:41:3e:db:9c:c6:d2:2a: 8c:52:f6:df:7a:33:3a:00:83:52:e5:2d:35:07:3d: ac:be:a2:6b:a2:4e:f8:b5:35:5f:98:49:f9:5f:46: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:54:D8:30:DC:AB:45:B7:62:60:D0:13:DC:E9:B6:21:5E:70:B1 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1f:df:5a:c4:e7:b8:f0:23:80:36:b1:0d:13:b1:5b:d9:8f: 14:5b:78:8e:2d:a9:37:59:2e:e5:c8:b6:ce:8a:5d:d2:cd:81: 53:de:1e:fa:ad:2f:cd:bc:3f:ad:60:b0:40:b8:1f:b6:32:bc: bb:e9:75:5b:1a:38:a2:69:83:24:b5:94:8b:53:7f:bd:83:5e: 7e:80:54:3d:26:4b:59:01:87:29:3f:ec:37:9f:59:ca:6f:ba: a9:c4:8a:d1:12:f8:e8:15:d6:df:2b:69:8f:88:0c:c1:4d:40: c8:d0:f4:6a:ea:70:4d:15:b1:9b:23:e5:c0:12:fb:97:c6:5c: 63:67:f6:e2:fa:9b:dc:a4:5a:46:ce:06:dc:c3:86:86:a3:62: 6b:c4:0f:2c:14:21:41:e2:33:30:a2:5d:b7:44:77:48:eb:d8: b6:1f:35:fd:d8:53:30:e3:4a:5a:b7:f3:40:d7:14:ae:82:d2: 8f:b1:b6:53:64:2e:53:69:c9:1c:64:fd:53:f6:5f:d3:9f:15: df:a3:c3:4a:3e:dd:98:a8:85:4b:9a:fc:bd:c7:bb:9c:29:68: 5a:0d:97:af:53:c5:fe:d2:b2:84:c1:d7:73:28:e3:00:a6:7a: 5e:77:0f:5b:2e:ff:65:fe:27:f1:b2:f8:a1:41:05:35:08:f7: 19:40:02:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjQwNTAzMDEyNzQ3WhcNMjQwNTEwMDEyNzQ3WjAYMRYwFAYD VQQDEw02NjM0M2Q5NC01NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodOFJVfujULtQWxTqCKwAfqD9TfTEsdG7s5V4k7F4WPZLiuNOvLfQ8rA+HZC EzXSTS2RHIKIZUeOupGDCatS0DO1KSNcefNh2Vv9ZhhlWbvN6tpL4Q3MFv5psL6k YvMYoSKaZu0pBntdVvsbruY5IHKVEcFiN1rW7LsYLvsirEJnRhhBkwvIRUtkg47B 8srT9rUJStKPZ8RTa8pYdnSvGbNlRN8sJ+ZAA44ICsuwgwpTfPODZBKOPc9xxXxy HU3i/MjPLxENmjVjpm20CvTzEzRcgzrSebvui0E+25zG0iqMUvbfejM6AINS5S01 Bz2svqJrok74tTVfmEn5X0Yz0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM2VNgw 3KtFt2Jg0BPc6bYhXnCxMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWH99axOe48COANrENE7Fb2Y8UW3iOLak3WS7lyLbOil3SzYFT3h76 rS/NvD+tYLBAuB+2Mry76XVbGjiiaYMktZSLU3+9g15+gFQ9JktZAYcpP+w3n1nK b7qpxIrREvjoFdbfK2mPiAzBTUDI0PRq6nBNFbGbI+XAEvuXxlxjZ/bi+pvcpFpG zgbcw4aGo2JrxA8sFCFB4jMwol23RHdI69i2HzX92FMw40pat/NA1xSugtKPsbZT ZC5TackcZP1T9l/TnxXfo8NKPt2YqIVLmvy9x7ucKWhaDZevU8X+0rKEwddzKOMA pnpedw9bLv9l/ifxsvihQQU1CPcZQAKi -----END CERTIFICATE-----Generated at Fri May 3 04:45:20 2024 by rpki-client on console-fra.rpki-client.org