$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: Mn705SwK7NjLjWv6DotTPhb/c3bbHaxE4SRdJ0SGHdw= Subject key identifier: 85:9A:63:AA:FF:8B:58:4C:38:F0:0D:AB:D4:03:8B:E8:2C:B1:DC:82 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 78 Signing time: Sun 19 May 2024 07:20:53 +0000 Manifest this update: Sun 19 May 2024 07:20:53 +0000 Manifest next update: Sun 26 May 2024 07:20:53 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: KsqldaSndRip9XQQlWr71QTcPHtq5TJtJZOrN5hR5X4=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: aUFB4aYhGGe3Q1A/4qQPphh/RmFp8OnW/auHXXVnUmo=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: 3DzAptEmwcqiuvo4m0qnrVzILunvT+CiNtZ2oFZVUbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: May 19 07:20:53 2024 GMT Not After : May 26 07:20:53 2024 GMT Subject: CN=6649a855-2980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:31:bf:68:b4:55:e1:e7:78:20:88:7c:06: 9f:b2:0d:11:76:cd:7b:00:dc:97:c9:84:ee:f6:ec: 60:5f:09:45:7c:49:4d:81:cf:0c:e8:7f:ed:69:3f: be:80:bc:88:ae:39:2b:06:59:ca:25:4c:4d:ef:ee: c6:48:ba:ba:80:2d:c0:d4:60:42:a1:53:d5:d0:9e: 7f:87:47:65:f2:25:76:b0:37:0b:aa:a5:3a:be:f1: 49:7d:95:67:25:bc:62:2e:4a:f3:e7:d6:c2:21:15: 5a:76:4b:04:d6:a7:1b:e0:07:67:84:ef:45:bb:dc: 3c:1f:b1:99:b5:f5:78:e3:e4:80:22:0b:89:07:03: 02:de:4b:31:ac:63:e7:95:00:f7:46:72:97:ba:ad: 03:df:5f:96:31:82:f3:37:dc:02:c0:13:e3:92:ee: 71:5c:49:98:88:35:ac:49:c9:1e:bc:cc:28:cb:52: 8d:61:2e:80:0e:95:95:9b:91:67:6e:ea:fa:92:e2: 10:ba:b5:40:73:ff:be:ca:d0:69:24:53:52:0b:0b: 7d:a8:ca:c4:d8:4c:e6:a0:85:82:40:20:46:a9:5b: ec:c6:11:c5:06:81:70:2b:2c:16:d2:ff:62:ae:ba: b9:0e:fe:45:06:35:d7:b2:58:98:4b:e8:d3:50:5a: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:63:AA:FF:8B:58:4C:38:F0:0D:AB:D4:03:8B:E8:2C:B1:DC:82 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0f:0e:d7:d1:92:a9:2b:c9:8b:2c:39:41:ef:34:9f:06:0d: f0:80:9b:b5:6a:19:72:2d:6f:a0:87:b8:43:31:5e:9c:55:ac: c7:a8:51:66:75:06:e5:1a:c5:4b:3a:02:69:14:d8:a2:1b:80: 51:09:f5:2b:05:6b:74:ac:bc:4f:c8:8c:aa:1a:64:34:4d:cc: 92:e4:b0:c0:66:d4:9d:57:6d:d3:a0:27:3e:0d:ef:80:b4:36: 46:36:06:9e:40:83:4a:55:2a:34:ce:14:f6:6f:49:83:03:ff: f0:ff:c2:e2:c5:00:41:ba:2a:b9:2c:ed:85:9f:9c:34:04:04: f2:3a:f7:33:2a:6c:ce:86:a9:20:a7:e6:99:b3:05:06:9c:87: c1:fe:19:55:95:e8:6f:05:60:d9:8b:37:f7:0b:11:e1:5d:ae: 8e:b3:29:7b:ab:6a:94:6f:e6:a0:09:c2:ab:5b:26:e5:52:42: 84:eb:af:cd:05:db:89:07:31:88:d9:78:82:a2:3a:11:28:92: ba:ee:f6:b0:11:76:32:ab:a3:2f:75:18:97:86:4c:61:90:3f: 61:05:ac:a3:5e:e3:28:e7:f4:a5:f7:af:4a:7b:74:00:2a:99: af:85:a6:a3:48:85:1d:1b:5e:55:30:fa:92:4c:86:2c:0e:69: 66:0f:77:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDgxNDExMC8GA1UEBRMoODFBMEExODRCOUM2MjU5MzYwRUEzM0JCMjgzQ0ExQjQz MjFCQjAzNTAeFw0yNDA1MTkwNzIwNTNaFw0yNDA1MjYwNzIwNTNaMBgxFjAUBgNV BAMTDTY2NDlhODU1LTI5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVeDG/aLRV4ed4IIh8Bp+yDRF2zXsA3JfJhO727GBfCUV8SU2Bzwzof+1pP76A vIiuOSsGWcolTE3v7sZIurqALcDUYEKhU9XQnn+HR2XyJXawNwuqpTq+8Ul9lWcl vGIuSvPn1sIhFVp2SwTWpxvgB2eE70W73DwfsZm19Xjj5IAiC4kHAwLeSzGsY+eV APdGcpe6rQPfX5YxgvM33ALAE+OS7nFcSZiINaxJyR68zCjLUo1hLoAOlZWbkWdu 6vqS4hC6tUBz/77K0GkkU1ILC32oysTYTOaghYJAIEapW+zGEcUGgXArLBbS/2Ku urkO/kUGNdeyWJhL6NNQWulvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhZpjqv+L WEw48A2r1AOL6Cyx3IIwHwYDVR0jBBgwFoAUgaChhLnGJZNg6jO7KDyhtDIbsDUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0ODE0LzEwMTY4OTI2NjFC RjExRUU4NjAyNEYzRkM0RjlBRTAyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNE VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2FDaGhMbkdKWk5nNmpPN0tEeWh0RElic0RVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 ODE0LzEwMTY4OTI2NjFCRjExRUU4NjAyNEYzRkM0RjlBRTAyL2dhQ2hoTG5HSlpO ZzZqTzdLRHlodERJYnNEVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACcPDtfRkqkryYssOUHvNJ8GDfCAm7VqGXItb6CHuEMxXpxVrMeoUWZ1 BuUaxUs6AmkU2KIbgFEJ9SsFa3SsvE/IjKoaZDRNzJLksMBm1J1XbdOgJz4N74C0 NkY2Bp5Ag0pVKjTOFPZvSYMD//D/wuLFAEG6Krks7YWfnDQEBPI69zMqbM6GqSCn 5pmzBQach8H+GVWV6G8FYNmLN/cLEeFdro6zKXurapRv5qAJwqtbJuVSQoTrr80F 24kHMYjZeIKiOhEokrru9rARdjKroy91GJeGTGGQP2EFrKNe4yjn9KX3r0p7dAAq ma+FpqNIhR0bXlUw+pJMhiwOaWYPdx0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org