$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: E7J1Dj66jHzSqPA6K58ZbNY4sNofEaF/B97Le17PEWE= Subject key identifier: B4:F4:B2:B0:21:FF:6D:B6:5B:F5:17:B4:1B:0C:B3:48:ED:56:99:DD Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 050D Signing time: Sun 19 May 2024 01:09:13 +0000 Manifest this update: Sun 19 May 2024 01:09:13 +0000 Manifest next update: Sun 26 May 2024 01:09:12 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: tcEsbfPBELxlP4Z8ogjTaOoMvOMUKACTxCsrTkvKPYU=) 2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: osB3o1oF2xMnyVF3DFng98w8KuMn+le3eUZCsy/doRU=) 3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: hooAX2OxbnAxEYVV3GefPOYGFhwfni9EQuxarxtyOcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: May 19 01:09:13 2024 GMT Not After : May 26 01:09:12 2024 GMT Subject: CN=66495139-7993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:94:99:eb:1b:f1:69:4f:92:e9:63:74:14: 17:74:f1:ff:9d:7b:0e:4a:6d:7b:a0:97:9f:e1:e0: 41:99:2c:ff:b7:6a:eb:1a:b1:d7:a2:f1:fa:f1:26: 29:39:b4:69:65:68:09:87:f2:df:50:56:70:3a:02: fb:23:3b:2a:6a:bc:20:5d:b2:3b:e6:08:fa:f3:91: 22:31:2b:95:d9:ad:df:43:17:d6:d9:37:cd:0c:1f: eb:54:1c:e1:20:1e:4c:65:c7:22:f3:8b:c0:33:b4: e9:7e:41:4b:9b:82:a7:e6:cc:cb:9e:ef:28:62:06: 30:04:dd:85:5b:a8:67:21:cf:57:3a:46:36:e7:c2: 65:03:ce:d6:86:0b:a4:9f:1c:6a:14:6b:d0:80:28: cd:e4:5d:95:10:80:d1:cf:d5:54:48:1a:fb:02:97: 37:70:d3:de:57:57:fc:85:44:89:01:81:91:0a:21: 85:53:73:3c:02:57:54:08:1e:26:86:2c:18:eb:29: 0b:82:97:cf:dd:50:98:0f:6b:b7:aa:68:db:a7:dc: a9:ba:8e:35:03:6f:51:d7:d7:18:2f:f1:cd:f3:b4: 5c:52:f0:dd:ce:2c:69:ee:33:2c:36:44:2c:c5:95: 97:14:56:91:d0:da:84:9b:c9:58:b7:de:c4:06:b9: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F4:B2:B0:21:FF:6D:B6:5B:F5:17:B4:1B:0C:B3:48:ED:56:99:DD X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:68:b2:7e:b1:3d:c5:96:92:d6:aa:0f:49:b9:fb:2f:22:45: a9:74:53:61:ea:2e:40:60:99:b2:7f:3b:c3:c0:68:25:c8:d9: 15:3e:d8:c1:13:1b:2b:69:8a:ea:53:ba:dd:a8:1e:9a:a5:e4: 9d:0a:45:79:38:26:3d:36:fc:f1:9e:59:65:19:44:1b:2a:f3: ed:b4:83:6c:dd:93:29:8b:c1:97:02:d7:b7:df:af:08:ce:a4: 9b:da:48:90:26:d1:a9:0d:b5:28:c8:a1:13:0c:b9:7f:63:d1: 69:ce:74:14:82:cf:fb:f2:32:49:9a:8a:82:99:dc:a0:4f:13: ca:e3:59:f7:cf:35:a1:c4:9a:07:a1:0b:9b:73:48:aa:e5:a0: 2f:a3:76:03:b5:02:d2:c7:94:b3:d2:dd:01:a9:14:e9:0f:c8: 1f:6e:87:5c:4a:a3:63:b7:52:4a:70:b8:bd:16:0b:ba:0f:79: b6:1a:94:86:ca:09:55:4b:d2:f7:74:b8:fd:02:de:9f:7c:37: dc:55:06:1e:01:fa:cc:bb:0d:69:2b:92:4c:d2:25:bf:8a:c3: 0f:30:3b:7d:23:28:dc:90:35:5d:7a:a7:37:8b:40:d6:35:61: 76:af:74:62:28:d7:2b:47:87:2e:da:05:67:a8:c0:d4:da:16: ff:80:3c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjQwNTE5MDEwOTEzWhcNMjQwNTI2MDEwOTEyWjAYMRYwFAYD VQQDEw02NjQ5NTEzOS03OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/aUmesb8WlPkuljdBQXdPH/nXsOSm17oJef4eBBmSz/t2rrGrHXovH68SYp ObRpZWgJh/LfUFZwOgL7IzsqarwgXbI75gj685EiMSuV2a3fQxfW2TfNDB/rVBzh IB5MZcci84vAM7TpfkFLm4Kn5szLnu8oYgYwBN2FW6hnIc9XOkY258JlA87Whguk nxxqFGvQgCjN5F2VEIDRz9VUSBr7Apc3cNPeV1f8hUSJAYGRCiGFU3M8AldUCB4m hiwY6ykLgpfP3VCYD2u3qmjbp9ypuo41A29R19cYL/HN87RcUvDdzixp7jMsNkQs xZWXFFaR0NqEm8lYt97EBrmzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT0srAh /222W/UXtBsMs0jtVpndMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcaLJ+sT3FlpLWqg9JufsvIkWpdFNh6i5AYJmyfzvDwGglyNkVPtjB ExsraYrqU7rdqB6apeSdCkV5OCY9NvzxnlllGUQbKvPttINs3ZMpi8GXAte3368I zqSb2kiQJtGpDbUoyKETDLl/Y9FpznQUgs/78jJJmoqCmdygTxPK41n3zzWhxJoH oQubc0iq5aAvo3YDtQLSx5Sz0t0BqRTpD8gfbodcSqNjt1JKcLi9Fgu6D3m2GpSG yglVS9L3dLj9At6ffDfcVQYeAfrMuw1pK5JM0iW/isMPMDt9IyjckDVdeqc3i0DW NWF2r3RiKNcrR4cu2gVnqMDU2hb/gDyO -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org