$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: seGlZb4UelOySlQlw9Ydzzx3GOmWBzsmKwQ3vfBi2+A= Subject key identifier: 7E:30:DF:29:C8:09:D9:DF:C6:C7:83:8B:FA:6F:C1:EB:5F:4F:6A:D9 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 09B7 Signing time: Sat 18 May 2024 20:50:08 +0000 Manifest this update: Sat 18 May 2024 20:50:08 +0000 Manifest next update: Sat 25 May 2024 20:50:08 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: I00h8qZEF9u+1JQDWpDL6QZZ5ICK1RVMCciBPtvSSFU=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: 0cvbxP20kbDfmHfHGVhiDmzqDHp8ThkRVUA3Ma5jp/o=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: VQgzjbt+yUKlk0a3cKkNbYjoYrGC1Q3yZRt8dWoxZtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: May 18 20:50:08 2024 GMT Not After : May 25 20:50:08 2024 GMT Subject: CN=66491480-4bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:11:d1:5b:ca:f4:16:1e:f1:55:24:22:d2: 56:6b:16:9e:25:fb:ee:ee:b3:44:5e:c9:75:de:cf: d7:0f:e8:16:c8:93:e8:6e:97:c2:90:59:84:e7:77: 73:b2:8d:66:5d:11:13:9c:10:60:80:69:8d:27:b4: cc:d0:46:ac:24:d7:02:4f:91:ca:f5:48:b9:bd:8e: 56:f7:9f:46:9d:67:ee:f0:b7:33:a9:58:72:b1:30: cb:0d:79:3d:1f:f5:84:e3:84:1c:e2:7e:f2:6c:58: 2f:c0:fd:3b:6a:4f:d6:64:44:5e:2a:97:ee:77:ba: ea:25:b9:35:1e:f5:9e:1b:62:d1:e6:83:85:19:f9: 90:ae:1a:47:65:39:e6:24:89:2b:dc:91:d4:d2:d7: 13:59:29:cc:b4:81:79:96:a4:9b:0e:31:27:5b:3c: 16:b8:7d:96:64:15:76:80:a2:7d:1f:ab:37:16:0f: d4:d1:9e:48:cc:85:66:09:e8:d6:d0:db:d8:90:ec: cf:fd:85:99:12:b3:35:ae:04:94:95:62:7b:aa:0b: 32:b5:64:6b:a9:cc:d3:c2:cf:d2:96:ce:95:8f:52: da:38:4c:cd:8e:1d:9e:e4:2a:9c:6a:44:47:14:6f: 66:c5:5a:93:0e:29:0d:5c:82:7a:1d:8a:6f:56:3d: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:30:DF:29:C8:09:D9:DF:C6:C7:83:8B:FA:6F:C1:EB:5F:4F:6A:D9 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:77:9a:e8:02:a7:36:38:d1:e2:63:db:d8:e5:7d:93:aa:0e: ee:be:b9:01:d5:8e:af:75:3f:d1:d7:27:51:5e:0b:41:ac:6c: 6d:bc:2f:59:42:3c:e7:c7:1f:27:51:90:9a:e7:d7:d4:8d:f8: f6:16:bf:5d:c3:fa:46:91:82:94:31:e4:fb:e2:47:c8:a4:82: 10:3b:56:ef:36:1e:75:11:8e:73:c2:bd:e9:85:21:e6:e4:ed: 22:67:29:ee:49:70:19:9c:d9:79:99:f1:49:32:54:e6:f4:08: 32:89:1a:67:80:bc:2b:af:04:66:e6:e9:9a:47:90:4f:af:3a: 9c:00:02:ee:62:55:ce:04:d9:24:0a:88:7a:d5:b0:bb:96:5b: d9:39:02:93:a5:58:e9:24:7b:df:b5:e6:b9:b9:df:07:d8:5a: ec:78:d8:1a:ab:39:74:fd:f6:be:56:9c:90:e0:f3:f3:b1:d3: 11:85:cc:53:8c:1d:c3:60:94:e5:97:66:d4:aa:0f:43:05:02: 8d:84:3f:9d:48:02:01:af:15:ef:22:07:ab:97:a3:6c:fc:cb: 5b:ff:41:2e:5b:5c:21:f2:f6:f7:6e:ff:0e:ff:8a:9f:95:d2: 06:52:fc:de:a5:1d:d3:fc:45:69:79:f3:87:99:bf:79:d1:3d: fb:48:fe:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjQwNTE4MjA1MDA4WhcNMjQwNTI1MjA1MDA4WjAYMRYwFAYD VQQDEw02NjQ5MTQ4MC00YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4wR0VvK9BYe8VUkItJWaxaeJfvu7rNEXsl13s/XD+gWyJPobpfCkFmE53dz so1mXRETnBBggGmNJ7TM0EasJNcCT5HK9Ui5vY5W959GnWfu8LczqVhysTDLDXk9 H/WE44Qc4n7ybFgvwP07ak/WZEReKpfud7rqJbk1HvWeG2LR5oOFGfmQrhpHZTnm JIkr3JHU0tcTWSnMtIF5lqSbDjEnWzwWuH2WZBV2gKJ9H6s3Fg/U0Z5IzIVmCejW 0NvYkOzP/YWZErM1rgSUlWJ7qgsytWRrqczTws/Sls6Vj1LaOEzNjh2e5CqcakRH FG9mxVqTDikNXIJ6HYpvVj0GewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4w3ynI CdnfxseDi/pvwetfT2rZMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjd5roAqc2ONHiY9vY5X2Tqg7uvrkB1Y6vdT/R1ydRXgtBrGxtvC9Z Qjznxx8nUZCa59fUjfj2Fr9dw/pGkYKUMeT74kfIpIIQO1bvNh51EY5zwr3phSHm 5O0iZynuSXAZnNl5mfFJMlTm9AgyiRpngLwrrwRm5umaR5BPrzqcAALuYlXOBNkk Coh61bC7llvZOQKTpVjpJHvftea5ud8H2FrseNgaqzl0/fa+VpyQ4PPzsdMRhcxT jB3DYJTll2bUqg9DBQKNhD+dSAIBrxXvIgerl6Ns/Mtb/0EuW1wh8vb3bv8O/4qf ldIGUvzepR3T/EVpefOHmb950T37SP5c -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org