$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json) Hash identifier: NPP2y9/DUyvpAS/xsxnx+JBpYAVP4lP+GUEvBF9af0I= Subject key identifier: C4:B3:7A:43:45:BE:35:F7:1B:57:5C:96:FB:F4:08:29:76:FE:03:11 Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft Manifest number: 0708 Signing time: Sat 18 May 2024 22:39:14 +0000 Manifest this update: Sat 18 May 2024 22:39:14 +0000 Manifest next update: Sat 25 May 2024 22:39:14 +0000 Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: xyjfG84Eu/TgULnzIkQL3jThjtIoJy0x8hlNQth3Yyc=) 2: 816A256CF57311EA86849119C4F9AE02.roa (hash: EEgmZei8HhhUqdqGUy+3MwlUAdmMR7L1GMUa6BLQ8n4=) 3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: SmI9leCfFLtOvnnfK7B7KqE9luDwQr36vUW6d0ksspk=) 4: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: qXyp1dhNAf5pEULKnvRa1JrpHHV4lQwSoi6tPVocCG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Validity Not Before: May 18 22:39:14 2024 GMT Not After : May 25 22:39:14 2024 GMT Subject: CN=66492e12-a5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:4d:54:16:dc:7d:9e:bf:66:1c:ce:87:62: 6f:a6:cb:20:32:25:e6:6a:8f:af:11:56:dc:34:63: 95:8c:b7:24:0d:0d:61:84:ad:37:91:58:53:14:d9: 20:af:27:1c:b5:14:46:27:be:8e:68:8d:cd:6a:67: 83:31:59:27:b7:83:3b:2b:21:81:3f:2f:b3:e1:ac: 46:07:27:15:ca:90:85:ef:bf:b2:d2:cd:7d:ce:7f: e3:ab:3d:30:e3:b5:fa:ea:f5:fb:c7:27:11:ce:c2: eb:fb:1f:24:fa:40:d3:a6:bf:cf:0e:86:1e:b3:5b: 5e:e7:49:fa:41:1b:ff:26:fd:a9:de:ef:7c:c5:79: f6:e7:f5:84:bf:f9:ca:c8:2d:0a:fd:01:11:8b:c0: 39:14:37:8c:17:1c:cc:7c:d9:be:98:77:53:69:f4: ec:43:cb:37:46:67:95:f4:aa:a7:45:ed:6a:b4:b1: f6:ba:f9:b0:76:14:33:08:b8:d3:89:1f:26:2f:da: 79:35:e9:52:a8:a6:08:44:da:74:d6:67:17:5e:91: b3:6c:94:b8:81:6e:9c:91:f9:59:68:7b:bb:07:aa: 0e:6b:fd:0f:eb:f8:ea:db:e3:ab:57:14:86:0f:3a: ad:73:f6:dc:cb:5f:13:1b:34:1d:97:2c:06:9f:c4: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:7A:43:45:BE:35:F7:1B:57:5C:96:FB:F4:08:29:76:FE:03:11 X509v3 Authority Key Identifier: keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4b:02:bf:9c:3e:42:d7:7f:f7:c2:1a:61:6b:01:e4:19:44: be:54:95:16:ae:47:52:02:f8:6b:ad:e8:af:dd:19:a4:b7:c2: 87:fc:07:c6:98:ee:94:ca:c4:c5:2a:6a:90:85:ed:65:a8:d1: 2c:90:04:4d:f0:db:77:3b:37:a8:a2:cd:25:c4:76:1f:ca:36: 84:c2:2e:54:e9:1f:6a:33:b0:97:a9:22:9d:e2:a1:48:a3:7f: cb:db:e5:a8:8b:45:50:fe:07:dc:98:07:78:ad:06:9c:5c:30: 44:1b:9e:9a:1b:a0:b8:77:96:89:14:9a:bd:6e:59:92:54:4a: 3b:57:db:8b:e7:f1:24:d8:d8:86:1c:76:f2:c9:c7:bc:32:2e: 4e:c6:c2:3a:32:f0:6c:d8:d5:4a:56:3a:76:bb:a0:4d:53:bb: c2:bc:8d:8f:2d:3c:10:64:97:af:9c:f4:03:0c:9f:ad:00:4f: 13:3d:a0:8c:81:d8:eb:b7:e5:95:c8:1e:f9:d7:b2:f8:a9:06: b4:e2:07:bb:38:bf:11:31:99:2c:01:82:56:1d:f1:75:e4:3a: e0:2d:77:c9:c6:fd:32:e9:db:e6:4d:81:ae:3c:32:b6:dd:79: 4e:b4:43:78:8e:91:1e:f4:3a:1c:d2:42:46:94:65:74:b4:9e: c5:68:88:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF RTRGQ0E2RkQwHhcNMjQwNTE4MjIzOTE0WhcNMjQwNTI1MjIzOTE0WjAYMRYwFAYD VQQDEw02NjQ5MmUxMi1hNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z9NVBbcfZ6/ZhzOh2JvpssgMiXmao+vEVbcNGOVjLckDQ1hhK03kVhTFNkg rycctRRGJ76OaI3NameDMVknt4M7KyGBPy+z4axGBycVypCF77+y0s19zn/jqz0w 47X66vX7xycRzsLr+x8k+kDTpr/PDoYes1te50n6QRv/Jv2p3u98xXn25/WEv/nK yC0K/QERi8A5FDeMFxzMfNm+mHdTafTsQ8s3RmeV9KqnRe1qtLH2uvmwdhQzCLjT iR8mL9p5NelSqKYIRNp01mcXXpGzbJS4gW6ckflZaHu7B6oOa/0P6/jq2+OrVxSG Dzqtc/bcy18TGzQdlywGn8RKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSzekNF vjX3G1dclvv0CCl2/gMRMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1 NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZ d05tM09VQXhrNWZ1VDhwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4SwK/nD5C13/3whphawHkGUS+VJUWrkdSAvhrreiv3Rmkt8KH/AfG mO6UysTFKmqQhe1lqNEskARN8Nt3Ozeoos0lxHYfyjaEwi5U6R9qM7CXqSKd4qFI o3/L2+Woi0VQ/gfcmAd4rQacXDBEG56aG6C4d5aJFJq9blmSVEo7V9uL5/Ek2NiG HHbyyce8Mi5OxsI6MvBs2NVKVjp2u6BNU7vCvI2PLTwQZJevnPQDDJ+tAE8TPaCM gdjrt+WVyB7517L4qQa04ge7OL8RMZksAYJWHfF15DrgLXfJxv0y6dvmTYGuPDK2 3XlOtEN4jpEe9Doc0kJGlGV0tJ7FaIgB -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org