$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: 3FfDVTnFSdINsatmLjVNWf3eDnGZZBvU9/AMJUqOA/Y= Subject key identifier: 1B:1B:64:80:41:94:50:85:E6:C7:25:AA:D7:F6:DA:4A:2C:56:D6:5D Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0D87 Signing time: Sat 18 May 2024 18:34:56 +0000 Manifest this update: Sat 18 May 2024 18:34:55 +0000 Manifest next update: Sat 25 May 2024 18:34:55 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: PdkzDMibsONeGJGbbK1wkwvd7kO5m8Ref51JcR432cg=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: m7oha2gzEKa462adSVv9N+yxAfXSubCm5TOTd/sl3OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: May 18 18:34:55 2024 GMT Not After : May 25 18:34:55 2024 GMT Subject: CN=6648f4d0-aed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:71:3f:e0:c9:29:91:33:27:97:f1:1d:af: dd:e8:da:fa:78:0c:78:f3:43:39:59:13:47:2b:1d: 33:ea:25:6a:44:9d:4d:4e:d6:99:db:aa:22:65:1c: ff:2f:2a:e3:6e:7c:6b:07:1f:cd:18:50:49:6d:c5: ec:c2:4b:05:0a:3c:0e:45:7b:48:9a:73:f9:b8:27: 69:a1:c0:39:d9:1f:59:35:23:ad:52:74:ee:95:c0: 6d:e3:fb:89:ea:2c:5a:e6:bb:2a:f1:02:0c:52:0d: 6e:b8:f9:61:58:cd:70:fa:d5:8c:fb:33:d7:ac:4e: de:de:13:7c:f2:39:d8:fa:fa:4d:1f:19:bd:55:5b: 02:91:aa:97:36:ff:5b:37:46:c2:a4:15:cc:da:ff: 12:86:b6:d7:72:96:05:10:ec:fd:db:5f:ba:9e:0d: ea:1e:f3:8c:17:12:35:ed:8d:26:d2:b6:29:18:87: 4e:ce:af:97:13:0d:b4:03:3b:4d:3a:c7:bb:7c:53: ea:3c:8f:53:ae:97:30:75:88:a6:20:48:ce:7d:56: b8:6a:54:f1:37:08:97:dc:6a:5a:4a:95:77:b5:83: b9:90:f9:42:ec:36:14:b2:86:77:cd:a4:d3:75:8a: 19:f4:22:31:28:44:fa:a0:48:8f:bb:d7:47:29:24: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:64:80:41:94:50:85:E6:C7:25:AA:D7:F6:DA:4A:2C:56:D6:5D X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bb:46:ca:50:c5:a7:9c:95:47:61:66:c0:5e:39:bd:68:b1: 2e:16:62:8e:3d:d3:6a:cf:db:00:b8:a5:bf:ab:f8:d6:48:1f: a1:48:fe:ad:64:d3:9a:e8:43:d5:15:2a:50:6e:b1:b5:b7:98: d0:9a:74:a2:42:79:96:2f:c0:c0:f9:93:d3:f5:33:f8:3f:a9: f3:02:97:89:5e:5d:11:0a:fb:55:1f:ad:9d:22:5c:a6:97:2a: 1c:f2:82:1b:13:4d:ea:b6:ec:04:a0:5a:c3:25:18:76:51:81: 3d:6b:dc:7d:cb:60:7d:8f:d7:cc:ec:c5:98:0b:51:dc:ab:94: 48:87:85:2f:0f:e1:83:ff:36:91:6e:9a:98:36:f7:3a:4e:93: c8:07:07:f0:e4:1f:79:3a:ca:38:69:30:b1:ba:71:32:94:bf: 41:7e:fd:f6:12:47:74:b2:3f:e8:42:23:ff:17:b6:d3:48:8e: 5e:1e:75:ca:ee:4a:86:09:08:c0:8e:dd:6d:d3:9e:34:03:2c: 9d:a6:72:8f:8a:c3:e6:09:72:15:7d:b0:75:94:90:6c:63:aa: 23:e5:87:97:74:69:a2:26:69:14:8f:f1:35:b3:b4:0b:da:a0: 4c:27:e3:81:dc:2e:a6:87:ce:2f:3a:1f:81:4f:55:21:8d:8c: 6d:b1:8e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjQwNTE4MTgzNDU1WhcNMjQwNTI1MTgzNDU1WjAYMRYwFAYD VQQDEw02NjQ4ZjRkMC1hZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArahxP+DJKZEzJ5fxHa/d6Nr6eAx480M5WRNHKx0z6iVqRJ1NTtaZ26oiZRz/ LyrjbnxrBx/NGFBJbcXswksFCjwORXtImnP5uCdpocA52R9ZNSOtUnTulcBt4/uJ 6ixa5rsq8QIMUg1uuPlhWM1w+tWM+zPXrE7e3hN88jnY+vpNHxm9VVsCkaqXNv9b N0bCpBXM2v8ShrbXcpYFEOz921+6ng3qHvOMFxI17Y0m0rYpGIdOzq+XEw20AztN Ose7fFPqPI9TrpcwdYimIEjOfVa4alTxNwiX3GpaSpV3tYO5kPlC7DYUsoZ3zaTT dYoZ9CIxKET6oEiPu9dHKSRP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsbZIBB lFCF5sclqtf22kosVtZdMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+u0bKUMWnnJVHYWbAXjm9aLEuFmKOPdNqz9sAuKW/q/jWSB+hSP6t ZNOa6EPVFSpQbrG1t5jQmnSiQnmWL8DA+ZPT9TP4P6nzApeJXl0RCvtVH62dIlym lyoc8oIbE03qtuwEoFrDJRh2UYE9a9x9y2B9j9fM7MWYC1Hcq5RIh4UvD+GD/zaR bpqYNvc6TpPIBwfw5B95Oso4aTCxunEylL9Bfv32Ekd0sj/oQiP/F7bTSI5eHnXK 7kqGCQjAjt1t0540AyydpnKPisPmCXIVfbB1lJBsY6oj5YeXdGmiJmkUj/E1s7QL 2qBMJ+OB3C6mh84vOh+BT1UhjYxtsY4m -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org