$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json) Hash identifier: 9M9CCBF9t4vILSilqZdatBGmPPxE4biW+WDQgeAX34s= Subject key identifier: 82:77:6D:D6:49:D3:EA:8B:75:7F:3B:4B:09:F7:6B:1D:2D:AF:00:03 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 1001 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft Manifest number: 0FFC Signing time: Sat 18 May 2024 18:01:22 +0000 Manifest this update: Sat 18 May 2024 18:01:22 +0000 Manifest next update: Sat 25 May 2024 18:01:22 +0000 Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: ymew5nfMk/xbqExUgFGjWlcREeIJQM6bkw6BP0s2ggk=) 2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: jk0OlUtsonV+OqmO20RP7bvOZGqpwgHo/K8308TyxMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4097 (0x1001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: May 18 18:01:22 2024 GMT Not After : May 25 18:01:22 2024 GMT Subject: CN=6648ecf2-287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:7f:43:dd:6a:14:44:48:cb:3c:ce:fd:cc: 10:3b:2b:61:53:27:fe:dc:11:a4:d2:f4:d0:5d:70: 70:0a:f7:03:d0:7b:e6:a1:88:65:8a:52:4b:d1:7d: d9:c8:1e:66:d2:27:e5:c6:7c:db:c2:a1:d4:00:a5: 00:91:86:3d:89:b4:11:95:98:ff:b4:56:e2:26:f3: 0f:62:1d:2c:1f:74:bf:be:39:5b:2f:a7:fc:1f:19: 1e:39:4c:04:3e:82:1c:5b:2b:c1:42:35:58:45:56: 27:45:72:0d:51:af:09:76:9a:0a:49:d3:de:b6:06: 4a:e0:b1:fc:ce:75:85:51:dc:27:33:93:d2:92:52: ce:46:00:33:fb:eb:35:bb:29:4f:d8:67:49:71:96: 24:d7:5a:08:81:71:7a:f4:46:f5:a9:af:f2:7c:2d: 9e:0b:b5:86:db:0e:9a:95:ca:95:7e:a2:4d:64:b8: a8:56:15:a0:b4:90:88:86:86:c4:b3:e4:8a:59:0b: 22:9e:b5:5b:6b:6a:8a:bd:1f:65:35:43:60:1f:b0: bf:04:73:23:db:f1:9e:b3:94:ce:a3:43:01:82:00: dc:e7:47:1a:8a:f9:db:5b:6c:0f:66:db:8d:f9:ab: 38:df:76:84:fa:b0:56:2e:06:69:34:a3:81:43:4e: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:77:6D:D6:49:D3:EA:8B:75:7F:3B:4B:09:F7:6B:1D:2D:AF:00:03 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1a:de:e1:ef:2f:59:10:d0:17:ff:34:06:03:2f:a7:24:b4: c1:ae:2a:a2:e6:91:1d:f8:a3:53:51:af:ad:49:0b:cf:7f:dd: ef:62:c8:c5:82:a8:8c:84:89:fe:0f:25:43:07:3c:c6:90:5c: c7:68:3f:bb:37:2b:93:1e:69:32:e1:c4:76:e9:22:aa:cb:2a: e4:97:c0:79:7f:76:c6:9a:a9:e6:66:63:4f:a6:5a:21:73:1a: 34:fb:31:04:51:b7:67:9c:31:76:4e:9a:df:11:56:5c:3b:10: e2:ed:b3:0a:27:f4:d6:b2:f8:1f:a2:88:1e:82:7a:21:bc:f6: dd:e1:91:80:87:af:56:2b:ff:fb:b1:cd:46:4e:23:93:de:23: 05:2b:4c:78:f5:e6:f3:10:13:6e:81:ce:0d:33:70:5e:7f:7c: dd:95:36:23:8d:44:a5:39:2e:61:75:98:05:1e:8a:5e:0b:81: 79:7f:d6:1f:05:46:2f:52:08:e7:79:a8:71:e2:6e:88:26:ca: 8f:36:31:19:19:05:ed:b1:84:f3:5e:ea:86:81:ba:ef:9b:0b: 5c:73:14:32:8c:56:ff:9a:a5:ad:dd:65:75:3a:ba:dd:12:c3: 3f:d0:ae:b4:02:14:ea:95:12:68:78:08:87:6d:1b:d6:d5:a9: 7b:98:fd:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjQwNTE4MTgwMTIyWhcNMjQwNTI1MTgwMTIyWjAYMRYwFAYD VQQDEw02NjQ4ZWNmMi0yODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J1/Q91qFERIyzzO/cwQOythUyf+3BGk0vTQXXBwCvcD0HvmoYhlilJL0X3Z yB5m0iflxnzbwqHUAKUAkYY9ibQRlZj/tFbiJvMPYh0sH3S/vjlbL6f8HxkeOUwE PoIcWyvBQjVYRVYnRXINUa8JdpoKSdPetgZK4LH8znWFUdwnM5PSklLORgAz++s1 uylP2GdJcZYk11oIgXF69Eb1qa/yfC2eC7WG2w6alcqVfqJNZLioVhWgtJCIhobE s+SKWQsinrVba2qKvR9lNUNgH7C/BHMj2/Ges5TOo0MBggDc50caivnbW2wPZtuN +as433aE+rBWLgZpNKOBQ05UGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ3bdZJ 0+qLdX87Swn3ax0trwADMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjMwNC9FNzg4QzhBMjI1ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NI Uy1mZXQ3OUNFbkxMSTlvWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqGt7h7y9ZENAX/zQGAy+nJLTBriqi5pEd+KNTUa+tSQvPf93vYsjF gqiMhIn+DyVDBzzGkFzHaD+7NyuTHmky4cR26SKqyyrkl8B5f3bGmqnmZmNPploh cxo0+zEEUbdnnDF2TprfEVZcOxDi7bMKJ/TWsvgfoogegnohvPbd4ZGAh69WK//7 sc1GTiOT3iMFK0x49ebzEBNugc4NM3Bef3zdlTYjjUSlOS5hdZgFHopeC4F5f9Yf BUYvUgjneahx4m6IJsqPNjEZGQXtsYTzXuqGgbrvmwtccxQyjFb/mqWt3WV1Orrd EsM/0K60AhTqlRJoeAiHbRvW1al7mP0s -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org