$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft File: mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft (raw, json) Hash identifier: 7thKYH5pd0UBDxALItoTwN9sQ02gAWeonYNw5fiaPiA= Subject key identifier: 5D:5C:F2:5A:3D:9A:27:DB:FD:C0:68:EC:C1:DD:94:03:A3:5C:D2:42 Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF Certificate issuer: /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft Manifest number: 06B8 Signing time: Sat 01 Jun 2024 00:42:33 +0000 Manifest this update: Sat 01 Jun 2024 00:42:32 +0000 Manifest next update: Sat 08 Jun 2024 00:42:32 +0000 Files and hashes: 1: mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl (hash: YCCyHTog1RKYjibv7Zt3IoA99SHrQuDaO9hDDIT/PKQ=) 2: 0F785ED8171F11EB9D7AD884C4F9AE02.roa (hash: ZpjOcQRNDlH5qRGo4JGz7s8WdXPnuqrQVNeiUcwkU1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Validity Not Before: Jun 1 00:42:32 2024 GMT Not After : Jun 8 00:42:32 2024 GMT Subject: CN=665a6e79-f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:33:b7:b1:f0:3f:a9:e5:8e:32:26:a8:5d: 33:68:f0:43:01:ec:5d:bb:6b:19:a5:c7:da:85:b2: 5b:80:7f:0a:cd:ef:8e:1d:81:74:29:f7:be:8a:31: 95:b3:fe:ca:d6:58:28:f3:01:2a:df:8d:14:dd:00: 6a:7e:73:c8:51:16:8c:ec:60:3d:83:dd:9d:5e:de: 69:13:d6:2c:d2:b7:b5:c3:a1:76:f8:50:67:90:d1: 8b:b9:c6:aa:5e:77:fb:ac:4a:54:e5:26:77:4c:4e: 1e:9e:ae:7e:f6:f2:3f:6d:2f:43:1f:97:9b:13:3d: d9:97:b2:51:e8:d7:64:b4:09:63:86:0e:4c:ed:2f: a9:33:6e:e1:8c:87:5c:ba:e7:ce:a3:22:f5:bd:a1: 21:2b:91:15:20:dc:0e:f2:d5:e1:0d:48:71:c4:62: 4c:b7:c8:14:88:a4:f1:8e:2d:99:6d:89:2e:8e:a2: 91:a3:1e:fc:f0:f5:42:48:6d:40:b6:3f:b0:39:dd: 62:ae:df:6d:e4:01:c3:0c:0f:21:85:ad:be:5a:2f: 27:c9:b7:14:48:fb:fb:ce:6e:d7:2d:9f:17:41:f0: 09:75:f1:68:98:ea:6b:51:f9:0c:00:cf:27:da:38: ce:f3:d3:cf:88:b7:f2:4d:3e:b3:61:b9:81:49:8a: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:F2:5A:3D:9A:27:DB:FD:C0:68:EC:C1:DD:94:03:A3:5C:D2:42 X509v3 Authority Key Identifier: keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c5:7d:58:5b:42:49:d4:c0:34:f4:c5:b0:0c:7b:cb:74:c1: d8:d5:a1:12:58:df:d1:a4:8f:09:dc:b7:9b:4e:8c:93:39:5d: 1c:5a:3d:ea:de:82:f8:be:00:bd:b5:3f:a7:07:1a:18:39:ad: e5:de:2d:e9:9a:d3:7d:de:77:e3:ee:d5:47:31:cd:a4:2c:d8: b2:22:46:f1:34:1d:c6:1b:ac:d4:f2:f9:e0:bd:58:31:13:96: d4:1b:20:f3:54:89:55:a2:2c:19:26:5f:52:dd:a1:3b:85:a2: 7b:df:4f:cf:36:dd:1c:79:2a:62:f0:ab:c6:96:5f:37:d7:af: 77:b7:19:d2:30:e9:85:66:70:54:b6:30:2e:d2:8a:20:8a:94: 98:b8:70:cd:49:2c:ee:09:1a:16:77:bf:7f:a4:0b:13:1e:c4: f4:3d:d6:7c:3c:54:4a:93:b0:82:3a:38:8c:cc:c3:bc:35:79: 43:74:f9:6a:ce:3d:3d:24:31:16:64:2f:6f:79:5c:bb:c1:32: 82:08:8a:f0:36:f4:35:99:b3:80:92:bf:cd:bb:23:9a:a3:26: 3b:81:e4:df:b0:bb:79:a3:36:21:67:ea:99:fb:b6:7d:91:38: 15:d0:8b:d2:42:fd:40:ea:6c:a0:08:75:ab:6f:88:0e:e0:0e: 45:c7:c4:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMTIxMTAvBgNVBAUTKDk4NzRFNkQ2MUE2MEQ4ODQ0QzMwMUQ4MUYzMzc3Q0JG MzRGMEQ4QkYwHhcNMjQwNjAxMDA0MjMyWhcNMjQwNjA4MDA0MjMyWjAYMRYwFAYD VQQDEw02NjVhNmU3OS1mNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuQzt7HwP6nljjImqF0zaPBDAexdu2sZpcfahbJbgH8Kze+OHYF0Kfe+ijGV s/7K1lgo8wEq340U3QBqfnPIURaM7GA9g92dXt5pE9Ys0re1w6F2+FBnkNGLucaq Xnf7rEpU5SZ3TE4enq5+9vI/bS9DH5ebEz3Zl7JR6NdktAljhg5M7S+pM27hjIdc uufOoyL1vaEhK5EVINwO8tXhDUhxxGJMt8gUiKTxji2ZbYkujqKRox788PVCSG1A tj+wOd1irt9t5AHDDA8hha2+Wi8nybcUSPv7zm7XLZ8XQfAJdfFomOprUfkMAM8n 2jjO89PPiLfyTT6zYbmBSYqm2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1c8lo9 mifb/cBo7MHdlAOjXNJCMB8GA1UdIwQYMBaAFJh05tYaYNiETDAdgfM3fL808Ni/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIxMi8yNkQzNjI3ODE3 MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJUk1NQjJCOHpkOHZ6VHcy TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21IVG0xaHBnMklSTU1CMkI4emQ4dnpUdzJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIxMi8yNkQzNjI3ODE3MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJ Uk1NQjJCOHpkOHZ6VHcyTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTxX1YW0JJ1MA09MWwDHvLdMHY1aESWN/RpI8J3LebToyTOV0cWj3q 3oL4vgC9tT+nBxoYOa3l3i3pmtN93nfj7tVHMc2kLNiyIkbxNB3GG6zU8vngvVgx E5bUGyDzVIlVoiwZJl9S3aE7haJ730/PNt0ceSpi8KvGll831693txnSMOmFZnBU tjAu0oogipSYuHDNSSzuCRoWd79/pAsTHsT0PdZ8PFRKk7CCOjiMzMO8NXlDdPlq zj09JDEWZC9veVy7wTKCCIrwNvQ1mbOAkr/NuyOaoyY7geTfsLt5ozYhZ+qZ+7Z9 kTgV0IvSQv1A6mygCHWrb4gO4A5Fx8Rm -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org