$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.mft File: lH79G_b5Opjf68FT2rDad8xAKMc.mft (raw, json) Hash identifier: POmp31ZHBnV0245c3g0+FU+1u66HlyXjflWFNoVVLOE= Subject key identifier: 0D:4D:76:4D:BF:6C:33:24:A8:30:02:E5:72:E4:9E:E4:31:5F:37:74 Authority key identifier: 94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7 Certificate issuer: /CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.mft Manifest number: 0876 Signing time: Tue 30 Apr 2024 21:56:32 +0000 Manifest this update: Tue 30 Apr 2024 21:56:32 +0000 Manifest next update: Tue 07 May 2024 21:56:32 +0000 Files and hashes: 1: lH79G_b5Opjf68FT2rDad8xAKMc.crl (hash: yzx074JDeD3VkiVe/CMJrpgxN0JBIW/3b718XQjeIII=) 2: 26977EE09BDD11EAA977C354C4F9AE02.roa (hash: x4lxAaGtrSeS0lrxvos3sPjAeXTdOLROpYER2mbKtLU=) 3: 843B56E29BDE11EA85D44F5BC4F9AE02.roa (hash: cq+gsgGf0xlM6mMNEjf4nudlnuy6rL+K/G0FG3xwLns=) 4: 260E35549BDD11EAA977C354C4F9AE02.roa (hash: jhUHyeyJ5nAgLY1M5CKQeobpRh2T1hkfgwte/yUNba8=) 5: 0C4115F836B711ECABB59984C4F9AE02.roa (hash: jRJKm3hAzsPeACUity1JalsFpQe+JQLZN14S5ht26Ks=) 6: 272E95469BDD11EAA977C354C4F9AE02.roa (hash: pX90Bi9L86T2QPWDnLl4En4zB6ZmM52b9FOWQh47a0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7 Validity Not Before: Apr 30 21:56:32 2024 GMT Not After : May 7 21:56:32 2024 GMT Subject: CN=66316910-c62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:cb:e1:8e:8d:81:7c:88:dc:c8:ae:63:48: e5:42:23:fc:62:36:ec:40:29:56:9d:53:e3:ff:cb: 9e:91:6b:9c:de:2f:12:7e:47:e8:a0:1b:88:60:06: 74:31:81:3c:08:64:50:1a:5c:28:c7:05:89:71:28: e6:00:92:fa:28:55:60:5f:f3:3f:87:c3:24:5c:99: ab:85:4e:00:35:5a:27:5e:3c:4d:df:6a:b9:a6:70: 8d:06:96:b0:76:0e:21:3d:2f:2e:46:2a:26:51:5f: 6a:07:99:3c:0e:57:dd:64:e4:58:ae:b5:1a:83:9e: ed:30:df:34:7c:57:a0:a1:81:22:69:d2:a6:b3:13: 05:cb:b2:94:ca:e2:f8:94:92:b8:82:c0:04:c3:d6: 3d:32:0f:ee:c8:5a:9c:47:50:e1:4e:47:e1:0b:80: 01:2b:ca:d5:fa:94:d2:78:44:8d:8e:75:98:30:0b: bc:32:13:e5:4c:53:90:cb:78:a2:50:37:de:f7:18: a0:15:db:8b:e9:1e:30:46:4e:68:e9:15:97:bd:0a: 76:9b:35:95:40:4b:af:d1:ce:f6:51:20:57:78:ec: 09:1f:4a:10:4f:60:e1:99:86:d4:35:dd:3d:5e:05: e0:74:ab:99:4f:99:af:ea:fd:44:03:01:01:cc:f5: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:76:4D:BF:6C:33:24:A8:30:02:E5:72:E4:9E:E4:31:5F:37:74 X509v3 Authority Key Identifier: keyid:94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:71:cb:79:a1:a5:0b:83:90:03:58:67:14:74:17:a2:67:0b: f2:ff:5f:a5:52:84:fa:8b:95:1a:dd:53:d3:7c:bf:9c:84:79: c9:6b:4c:7f:43:86:5d:c1:20:35:39:e2:45:49:ca:50:d9:68: 74:a6:44:97:b6:56:8c:ba:be:95:09:10:9f:cd:da:00:4c:cf: f7:86:9f:97:91:46:bb:74:8a:3d:27:c8:32:75:8e:f0:7f:19: cc:b8:de:07:54:aa:6d:49:e2:8b:dd:d9:d0:00:2a:bf:c7:ef: 33:d5:8b:75:cf:37:5c:60:2e:88:04:0a:ec:8c:2f:26:36:af: fb:bc:c9:4a:53:4b:98:a9:26:32:60:d1:f5:b0:97:a1:95:cc: 48:3b:cb:d3:9f:bd:fe:b5:28:50:ba:7e:93:48:ac:7c:2e:3a: 4b:5a:fe:c4:a3:60:16:be:fa:1b:fb:6d:f1:1e:e9:81:f1:ab: 66:e4:a2:07:e3:72:71:c3:a2:11:41:2c:6b:1f:b4:a6:e6:2d: 3b:90:67:34:ea:9c:b9:cd:58:07:b9:78:2f:0f:ea:18:b9:67: da:6b:b2:96:0d:d7:9b:78:36:86:66:5b:a8:7d:20:87:c4:f9: 1f:47:be:5d:c0:d8:6e:40:03:eb:5b:ea:44:43:68:77:1b:de: 0e:d1:38:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFCODkxMTAvBgNVBAUTKDk0N0VGRDFCRjZGOTNBOThERkVCQzE1M0RBQjBEQTc3 Q0M0MDI4QzcwHhcNMjQwNDMwMjE1NjMyWhcNMjQwNTA3MjE1NjMyWjAYMRYwFAYD VQQDEw02NjMxNjkxMC1jNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGzL4Y6NgXyI3MiuY0jlQiP8YjbsQClWnVPj/8uekWuc3i8SfkfooBuIYAZ0 MYE8CGRQGlwoxwWJcSjmAJL6KFVgX/M/h8MkXJmrhU4ANVonXjxN32q5pnCNBpaw dg4hPS8uRiomUV9qB5k8DlfdZORYrrUag57tMN80fFegoYEiadKmsxMFy7KUyuL4 lJK4gsAEw9Y9Mg/uyFqcR1DhTkfhC4ABK8rV+pTSeESNjnWYMAu8MhPlTFOQy3ii UDfe9xigFduL6R4wRk5o6RWXvQp2mzWVQEuv0c72USBXeOwJH0oQT2DhmYbUNd09 XgXgdKuZT5mv6v1EAwEBzPXW7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1Ndk2/ bDMkqDAC5XLknuQxXzd0MB8GA1UdIwQYMBaAFJR+/Rv2+TqY3+vBU9qw2nfMQCjH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUI4OS9DRTA2QTlFQzlC REExMUVBODIzMzZBNTBDNEY5QUUwMi9sSDc5R19iNU9wamY2OEZUMnJEYWQ4eEFL TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xINzlHX2I1T3BqZjY4RlQyckRhZDh4QUtNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUI4OS9DRTA2QTlFQzlCREExMUVBODIzMzZBNTBDNEY5QUUwMi9sSDc5R19iNU9w amY2OEZUMnJEYWQ4eEFLTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0cct5oaULg5ADWGcUdBeiZwvy/1+lUoT6i5Ua3VPTfL+chHnJa0x/ Q4ZdwSA1OeJFScpQ2Wh0pkSXtlaMur6VCRCfzdoATM/3hp+XkUa7dIo9J8gydY7w fxnMuN4HVKptSeKL3dnQACq/x+8z1Yt1zzdcYC6IBArsjC8mNq/7vMlKU0uYqSYy YNH1sJehlcxIO8vTn73+tShQun6TSKx8LjpLWv7Eo2AWvvob+23xHumB8atm5KIH 43Jxw6IRQSxrH7Sm5i07kGc06py5zVgHuXgvD+oYuWfaa7KWDdebeDaGZluofSCH xPkfR75dwNhuQAPrW+pEQ2h3G94O0TgY -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:08 2024 by rpki-client on console-ams.rpki-client.org