$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: 7YRkuA9qK6Bl8UFTsuENZJ8QWhD9XIuYDW3Wz6HzZ9s= Subject key identifier: C4:B8:7D:75:30:C6:01:95:1E:24:C6:AD:60:4D:01:73:BF:18:76:D1 Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 06E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 06DF Signing time: Sat 18 May 2024 22:51:36 +0000 Manifest this update: Sat 18 May 2024 22:51:36 +0000 Manifest next update: Sat 25 May 2024 22:51:36 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: 8OaZ32MwdQFkRo93B/HBFS7uOK09vY1JfqN7M6UskTo=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: mu2x4RjDstwEWrJsfMZgnqbcUPiE/QrJuHYOuwVOO6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1763 (0x6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: May 18 22:51:36 2024 GMT Not After : May 25 22:51:36 2024 GMT Subject: CN=664930f8-a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:ee:28:d4:93:d1:97:c2:26:81:b3:ce:9a: 3e:f1:ed:48:ea:ea:64:7a:48:40:db:17:20:a1:c1: 10:e3:e9:94:b5:12:e7:37:f0:fb:bc:69:29:6d:e0: 14:6c:b7:6d:e0:c8:f2:f5:05:04:dc:b6:47:02:d4: 0b:a0:74:7c:4c:0e:a4:b6:64:5a:27:e6:6a:13:75: fe:a5:c3:aa:39:29:f7:f3:91:e7:b0:3a:18:7b:8d: c9:09:a1:98:10:e0:69:ae:26:90:91:b9:20:ea:15: b9:5f:a4:85:96:f0:53:8c:37:cd:fa:c4:79:1a:6b: 67:5c:34:3e:07:69:cd:ab:67:1c:c9:87:d7:f9:d0: 04:ac:7a:26:6e:86:48:b4:db:b6:2d:a4:43:13:a8: 20:64:5e:f4:f5:e4:fa:55:72:a7:ce:bd:ee:fb:72: f9:70:8f:88:cb:d1:2e:6b:d7:17:29:16:24:3d:a2: 33:c3:e9:7c:f8:02:48:fa:b4:fb:42:32:af:9b:84: 46:3e:9e:8c:c4:d0:68:16:6f:17:d5:d3:a7:21:db: f4:1c:c7:a4:41:80:fa:f0:a3:3c:ad:f5:45:71:54: 7c:ec:b6:2c:30:30:0a:eb:2c:30:d0:b3:0d:1b:13: f6:74:87:2b:b9:9a:b2:bf:dd:33:df:f0:52:10:47: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:7D:75:30:C6:01:95:1E:24:C6:AD:60:4D:01:73:BF:18:76:D1 X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:19:56:b4:6f:a5:e6:24:49:53:97:5a:19:06:13:1b:d9:c8: d4:47:d0:ad:4f:59:cb:69:bd:db:af:48:89:26:a1:ac:e0:2e: e6:c2:ba:dc:de:19:f0:f8:fe:5c:30:6b:3d:92:e2:73:52:a1: 1a:28:40:5a:b4:98:8e:5c:93:dc:d8:56:44:fa:f3:d0:42:49: 25:92:a2:19:df:c2:ca:b1:25:1b:3c:78:5b:a7:8b:bb:f6:db: 57:61:92:0c:d0:8c:74:44:56:b2:e0:b0:ea:44:78:a8:7d:1b: 16:84:21:fd:9d:32:a4:e6:f0:56:66:1c:1c:a8:f3:c6:5e:d9: 4e:73:eb:5d:9a:e7:fe:f3:e8:b8:eb:f3:37:c7:c5:2b:f7:e7: ae:2e:76:d7:3d:db:c1:5b:18:48:f3:49:4f:e2:3f:1d:d9:78: 9c:8d:6a:f6:4f:d2:c3:f7:4f:95:26:05:54:77:56:8d:de:83: fb:e2:de:5b:de:98:7c:af:9d:29:1f:23:b1:63:7b:0b:a1:96: 8f:2f:56:06:85:40:79:55:89:da:01:77:87:fa:5b:dd:59:34: 14:b7:c0:df:23:2d:65:21:3e:2d:68:29:89:25:7d:10:b9:1f: 3a:42:d7:65:f3:a7:e2:68:b1:f2:58:5c:20:da:2d:c8:48:b7: 77:97:4c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjQwNTE4MjI1MTM2WhcNMjQwNTI1MjI1MTM2WjAYMRYwFAYD VQQDEw02NjQ5MzBmOC1hMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR3uKNST0ZfCJoGzzpo+8e1I6upkekhA2xcgocEQ4+mUtRLnN/D7vGkpbeAU bLdt4Mjy9QUE3LZHAtQLoHR8TA6ktmRaJ+ZqE3X+pcOqOSn385HnsDoYe43JCaGY EOBpriaQkbkg6hW5X6SFlvBTjDfN+sR5GmtnXDQ+B2nNq2ccyYfX+dAErHomboZI tNu2LaRDE6ggZF709eT6VXKnzr3u+3L5cI+Iy9Eua9cXKRYkPaIzw+l8+AJI+rT7 QjKvm4RGPp6MxNBoFm8X1dOnIdv0HMekQYD68KM8rfVFcVR87LYsMDAK6yww0LMN GxP2dIcruZqyv90z3/BSEEf7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS4fXUw xgGVHiTGrWBNAXO/GHbRMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4GVa0b6XmJElTl1oZBhMb2cjUR9CtT1nLab3br0iJJqGs4C7mwrrc 3hnw+P5cMGs9kuJzUqEaKEBatJiOXJPc2FZE+vPQQkklkqIZ38LKsSUbPHhbp4u7 9ttXYZIM0Ix0RFay4LDqRHiofRsWhCH9nTKk5vBWZhwcqPPGXtlOc+tdmuf+8+i4 6/M3x8Ur9+euLnbXPdvBWxhI80lP4j8d2XicjWr2T9LD90+VJgVUd1aN3oP74t5b 3ph8r50pHyOxY3sLoZaPL1YGhUB5VYnaAXeH+lvdWTQUt8DfIy1lIT4taCmJJX0Q uR86Qtdl86fiaLHyWFwg2i3ISLd3l0y9 -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org