$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: hl2ruyIAoFotfSaO0L+eSDB+vVRkGAeGDYaIMXrr5Qg= Subject key identifier: 73:28:03:5C:9C:8A:39:43:6C:54:06:02:76:4E:49:8F:3E:57:D5:D2 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0AD5 Signing time: Sat 18 May 2024 20:04:00 +0000 Manifest this update: Sat 18 May 2024 20:03:59 +0000 Manifest next update: Sat 25 May 2024 20:03:59 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: ZsJg9h89+4Xa1fEXNDSolhNsd0LX8zVxt50jvYHeQd4=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: QKMiKL/JeBGCPPoVnZJlvG2i/9OQBNeXlmRuNI0W64g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: May 18 20:03:59 2024 GMT Not After : May 25 20:03:59 2024 GMT Subject: CN=664909b0-795c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:6a:06:44:cc:e8:42:c9:5f:62:17:4c:b3: cd:43:10:78:ea:ac:3c:73:43:de:9b:77:1f:ed:43: d6:11:0c:7a:1a:56:97:c6:9b:92:cf:42:2a:58:c2: 14:5a:01:a8:db:c3:c8:d9:ec:f7:2a:12:2e:78:ca: f3:f1:4c:e2:fe:dd:fb:da:d3:1a:7f:b4:1e:b9:7b: 52:9f:cf:e1:1d:65:e4:54:82:d1:d0:ce:fb:0c:b6: f6:dc:21:51:9e:f5:16:4d:bc:14:80:bf:9b:a8:bd: 20:97:88:3e:05:d2:d8:4c:21:a3:34:e1:5f:c6:ce: fe:15:30:a1:7e:9b:24:2f:f0:a8:34:37:90:22:8b: da:a7:58:24:0e:ef:b6:2c:e8:63:bf:9f:b2:7a:1d: a0:9e:73:c5:ad:97:42:8a:ab:fc:df:6a:3e:98:6d: d9:da:8b:7e:24:65:db:57:7b:e7:49:2d:c4:41:4e: 92:7a:0d:dd:43:26:52:8d:87:ac:99:e9:55:b3:22: ed:a1:18:70:b3:ea:11:e3:3d:d8:9f:13:3f:14:70: e5:de:ee:1a:31:50:d8:38:74:e4:24:ba:8a:f5:67: dc:8d:0b:d6:30:86:fb:f4:70:2f:16:e0:ed:fc:7d: db:64:61:77:2e:8f:80:f5:8b:dd:13:18:80:a6:9a: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:03:5C:9C:8A:39:43:6C:54:06:02:76:4E:49:8F:3E:57:D5:D2 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:94:fa:34:9a:4a:0d:1a:e7:78:30:34:07:a6:dc:30:d4:9c: 6f:99:5c:90:5e:1e:55:d2:0e:ff:6c:1a:1e:42:73:99:f2:e7: f3:8e:cb:c0:9f:e8:7a:c3:32:7d:c5:57:72:08:50:c0:5e:92: 2d:68:bc:45:bc:13:99:36:e9:c2:f6:29:d4:7f:b2:e5:47:61: 24:58:57:d9:af:fe:e4:c1:77:d1:bf:e9:c8:35:f5:27:0a:e5: 9d:c0:0a:08:66:87:d6:10:96:b6:55:8d:43:04:e6:b6:49:0d: 8e:15:ea:c8:df:26:c7:c1:e1:e1:1f:7d:f7:76:02:ab:0c:d1: fd:d1:f2:af:b5:94:c3:4a:e3:4d:16:21:9c:14:4c:9b:1b:ab: cc:52:4f:f4:10:5c:d5:36:1a:55:82:0f:29:3e:5e:85:aa:de: 3e:ca:52:d7:85:66:66:d4:96:7e:8d:37:87:f3:27:00:65:38: 8f:a2:e5:94:47:2d:5f:d7:21:3a:dc:f0:6e:3d:b5:e3:1d:e1: c6:f0:2f:b4:f8:27:82:e0:46:fa:be:08:36:74:ad:ab:38:83: 89:19:b7:ba:43:b8:ae:3f:20:6d:de:09:07:3e:25:d8:3f:aa: 06:00:e1:ed:1a:e6:eb:0e:8b:9f:94:e2:b9:92:cb:95:80:de: 0e:e1:a0:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjQwNTE4MjAwMzU5WhcNMjQwNTI1MjAwMzU5WjAYMRYwFAYD VQQDEw02NjQ5MDliMC03OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBlqBkTM6ELJX2IXTLPNQxB46qw8c0Pem3cf7UPWEQx6GlaXxpuSz0IqWMIU WgGo28PI2ez3KhIueMrz8Uzi/t372tMaf7QeuXtSn8/hHWXkVILR0M77DLb23CFR nvUWTbwUgL+bqL0gl4g+BdLYTCGjNOFfxs7+FTChfpskL/CoNDeQIovap1gkDu+2 LOhjv5+yeh2gnnPFrZdCiqv832o+mG3Z2ot+JGXbV3vnSS3EQU6Seg3dQyZSjYes melVsyLtoRhws+oR4z3YnxM/FHDl3u4aMVDYOHTkJLqK9WfcjQvWMIb79HAvFuDt /H3bZGF3Lo+A9YvdExiAppoRcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMoA1yc ijlDbFQGAnZOSY8+V9XSMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXlPo0mkoNGud4MDQHptww1JxvmVyQXh5V0g7/bBoeQnOZ8ufzjsvA n+h6wzJ9xVdyCFDAXpItaLxFvBOZNunC9inUf7LlR2EkWFfZr/7kwXfRv+nINfUn CuWdwAoIZofWEJa2VY1DBOa2SQ2OFerI3ybHweHhH333dgKrDNH90fKvtZTDSuNN FiGcFEybG6vMUk/0EFzVNhpVgg8pPl6Fqt4+ylLXhWZm1JZ+jTeH8ycAZTiPouWU Ry1f1yE63PBuPbXjHeHG8C+0+CeC4Eb6vgg2dK2rOIOJGbe6Q7iuPyBt3gkHPiXY P6oGAOHtGubrDouflOK5ksuVgN4O4aDi -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org