$ rpki-client -vvf rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft File: RdhhD84X2f9OjJ4teiU9pcL4f5s.mft (raw, json) Hash identifier: b3UUlfaIa6I0rJFoZcCQ0LgXSTjVqyNaSzHoAvKbj/A= Subject key identifier: 8A:A3:D2:AC:05:FE:1A:7B:75:21:41:B0:5A:91:63:DB:86:32:05:FB Authority key identifier: 45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B Certificate issuer: /CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft Manifest number: 08F0 Signing time: Sat 04 May 2024 21:33:25 +0000 Manifest this update: Sat 04 May 2024 21:33:25 +0000 Manifest next update: Sat 11 May 2024 21:33:25 +0000 Files and hashes: 1: RdhhD84X2f9OjJ4teiU9pcL4f5s.crl (hash: LeVpEpT0knjxCaEElpzBntxkKPcY0nrtMQmCz2rCx/0=) 2: 033AD246931B11EA974F0D67C4F9AE02.roa (hash: A05hXlPyDyCmrrB//fofeb9End0V/GDz0BxXzSOGPfc=) 3: 01CD0726931B11EA974F0D67C4F9AE02.roa (hash: 8rUvu6Zm9mS07ZXUdbkRAFT1ufjglbtScs1T7Sy1+Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B Validity Not Before: May 4 21:33:25 2024 GMT Not After : May 11 21:33:25 2024 GMT Subject: CN=6636a9a5-7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:f9:27:f2:de:8d:0e:d3:f3:de:87:fe:9a: a9:e8:6f:64:0d:e7:43:65:8a:d1:e4:26:98:bf:f4: 21:54:20:cb:00:82:82:b6:62:78:00:c3:6b:ae:2a: a7:7d:e4:8f:c1:a2:b4:83:05:61:d5:39:2d:a0:90: ea:40:6c:71:2e:c2:29:48:8d:b8:d1:26:fc:3f:e1: 6e:c2:60:af:09:ad:13:bc:f0:43:1e:a5:49:d7:c8: 97:6d:f4:c4:4e:2a:49:74:b9:69:0e:86:8e:27:c8: f2:40:43:1b:bb:70:99:87:72:08:4c:42:ab:1a:67: 0e:ae:74:72:8e:fe:6c:98:48:8d:00:c2:83:43:2a: e4:f3:d8:0a:21:7b:d6:24:c9:ba:09:ff:9e:9f:3f: 25:1f:65:50:f8:1c:75:29:4a:68:18:d9:a3:33:de: cb:5e:51:77:a5:5f:1b:e6:8d:d6:91:c6:93:73:2e: d2:61:3c:c0:55:8e:b4:54:6e:4c:cd:d2:ea:e9:bb: c4:72:7e:51:d7:2d:db:02:be:b5:ac:dc:0c:ea:79: d0:ea:d4:cc:cf:9d:b1:4e:e4:30:2e:33:d3:31:db: 1c:0b:c3:7c:ae:0c:f1:10:07:bf:64:ea:0d:ae:18: 98:11:d7:55:bf:90:98:64:68:8a:47:3d:14:4d:a6: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:D2:AC:05:FE:1A:7B:75:21:41:B0:5A:91:63:DB:86:32:05:FB X509v3 Authority Key Identifier: keyid:45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:09:aa:95:96:92:59:0c:1f:d7:82:22:6b:9e:48:f8:5a: 79:b8:e2:c7:8c:35:19:50:61:8f:f5:7c:9a:ed:39:04:80:25: bb:9b:90:70:d4:10:b0:03:32:e2:50:45:b8:dd:d8:d3:5c:60: 4f:0a:bd:60:30:25:02:b0:40:f5:e6:f7:bb:f1:da:4a:52:02: f9:15:64:9b:d4:c5:c8:8a:c1:aa:e7:fe:f7:4e:e9:45:eb:d2: 8a:e1:c4:7e:b3:b0:0d:72:92:ef:26:17:a1:84:47:be:7e:d5: 36:4b:6b:f8:ea:6a:ed:b9:42:05:f4:4c:6c:4b:93:b2:2d:1d: 4c:68:a1:62:f5:19:8f:bc:14:f9:10:fa:ea:6c:20:3d:ef:42: aa:2e:f5:c3:94:67:7d:69:08:a7:b7:82:31:14:39:21:0a:77: 88:ab:97:34:3a:b5:1f:36:26:97:a3:2d:ae:d5:9b:77:d3:ea: 9b:7f:ea:9e:2c:34:b2:81:0c:59:40:71:18:db:fd:1a:95:54: 60:74:cc:42:83:0d:27:e9:b2:ff:c8:83:58:04:63:84:b3:96: 26:57:1d:48:57:d6:b9:f2:53:47:bb:38:5c:94:fb:46:7f:c5: bd:8a:02:a5:20:a4:9a:60:aa:ea:ce:57:59:9f:8b:01:c1:c5: 8e:cc:19:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ1RjUxMTAvBgNVBAUTKDQ1RDg2MTBGQ0UxN0Q5RkY0RThDOUUyRDdBMjUzREE1 QzJGODdGOUIwHhcNMjQwNTA0MjEzMzI1WhcNMjQwNTExMjEzMzI1WjAYMRYwFAYD VQQDEw02NjM2YTlhNS03YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hr5J/LejQ7T896H/pqp6G9kDedDZYrR5CaYv/QhVCDLAIKCtmJ4AMNrriqn feSPwaK0gwVh1TktoJDqQGxxLsIpSI240Sb8P+FuwmCvCa0TvPBDHqVJ18iXbfTE TipJdLlpDoaOJ8jyQEMbu3CZh3IITEKrGmcOrnRyjv5smEiNAMKDQyrk89gKIXvW JMm6Cf+enz8lH2VQ+Bx1KUpoGNmjM97LXlF3pV8b5o3WkcaTcy7SYTzAVY60VG5M zdLq6bvEcn5R1y3bAr61rNwM6nnQ6tTMz52xTuQwLjPTMdscC8N8rgzxEAe/ZOoN rhiYEddVv5CYZGiKRz0UTaZErwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqj0qwF /hp7dSFBsFqRY9uGMgX7MB8GA1UdIwQYMBaAFEXYYQ/OF9n/ToyeLXolPaXC+H+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDVGNS85QjE4QjQzMDg4 RjIxMUVBODk5RUJFNjdDNEY5QUUwMi9SZGhoRDg0WDJmOU9qSjR0ZWlVOXBjTDRm NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JkaGhEODRYMmY5T2pKNHRlaVU5cGNMNGY1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDVGNS85QjE4QjQzMDg4RjIxMUVBODk5RUJFNjdDNEY5QUUwMi9SZGhoRDg0WDJm OU9qSjR0ZWlVOXBjTDRmNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+QmqlZaSWQwf14Iia55I+Fp5uOLHjDUZUGGP9Xya7TkEgCW7m5Bw 1BCwAzLiUEW43djTXGBPCr1gMCUCsED15ve78dpKUgL5FWSb1MXIisGq5/73TulF 69KK4cR+s7ANcpLvJhehhEe+ftU2S2v46mrtuUIF9ExsS5OyLR1MaKFi9RmPvBT5 EPrqbCA970KqLvXDlGd9aQint4IxFDkhCneIq5c0OrUfNiaXoy2u1Zt30+qbf+qe LDSygQxZQHEY2/0alVRgdMxCgw0n6bL/yINYBGOEs5YmVx1IV9a58lNHuzhclPtG f8W9igKlIKSaYKrqzldZn4sBwcWOzBmj -----END CERTIFICATE-----Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org