$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft File: ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json) Hash identifier: vV5k37fHLljSHhDO1fF84InLanOyBySsUxynB8coL2Q= Subject key identifier: DD:E3:4C:2A:BD:F0:13:02:CA:48:C2:EF:A8:F4:1B:0D:4E:F8:64:C5 Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft Manifest number: 0B78 Signing time: Sat 18 May 2024 19:27:44 +0000 Manifest this update: Sat 18 May 2024 19:27:43 +0000 Manifest next update: Sat 25 May 2024 19:27:43 +0000 Files and hashes: 1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: IvOlac6Si6nx2y7944Y9ENaTyYmiLtrgTmZPCwTr3Rg=) 2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: iri5afv19a7bXiRd7Nk8kbx56eexWN0L/K7dATQ5L1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Validity Not Before: May 18 19:27:43 2024 GMT Not After : May 25 19:27:43 2024 GMT Subject: CN=66490130-f0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:46:76:94:b1:11:a9:eb:c5:36:b1:5b:ba: 99:db:27:6b:b2:b7:f6:6a:46:66:db:79:26:2c:84: 00:33:f1:5e:5b:dc:6f:75:41:4d:28:f1:22:0f:20: 0a:82:e0:53:26:1b:79:31:34:20:0e:8f:61:95:7a: 39:7a:d8:0f:70:15:1f:b6:aa:02:30:93:69:6c:95: 99:b8:72:1b:7f:58:35:61:76:45:2f:ad:8a:7c:71: 5d:c4:a5:7f:b2:c4:2b:cb:9d:46:70:2a:d2:e5:28: 8a:6c:cd:d8:7e:f0:55:f4:74:5b:78:1b:4c:c3:2a: 0f:6e:69:03:f3:5b:fd:96:fb:c8:92:0a:cc:c5:b7: 95:99:76:3d:fc:96:3e:2d:2c:8c:ca:16:7e:62:58: 99:e5:c7:49:e7:91:03:21:17:5e:76:68:62:c5:49: 90:25:0a:0d:33:c0:10:5e:e3:12:92:26:31:be:39: eb:56:74:ec:a6:cc:16:4e:fe:33:42:fd:26:88:1e: 22:4f:70:c0:0d:c5:5a:83:63:d1:a8:0f:09:3d:c6: cb:9a:da:20:3f:72:f1:10:29:de:f7:67:4e:c0:30: 01:84:ba:26:c3:d3:26:18:be:c1:b8:61:a9:40:dd: 44:31:52:53:c7:58:e8:c9:e2:71:45:f6:1b:4e:8a: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:4C:2A:BD:F0:13:02:CA:48:C2:EF:A8:F4:1B:0D:4E:F8:64:C5 X509v3 Authority Key Identifier: keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c0:76:77:47:5b:c1:0c:8c:9b:36:2d:00:0c:21:96:08:05: 89:e4:48:08:64:08:93:f5:6f:fb:86:e9:aa:d6:92:44:2e:31: 1e:98:6b:0f:83:df:53:9c:80:53:3f:b7:f7:5e:09:c3:2a:8a: b8:42:e1:f7:15:80:ea:87:96:ac:0a:d5:56:1e:f5:89:d7:f0: ea:15:06:41:63:8a:49:41:18:b2:89:ad:5d:7f:1f:f7:d9:11: 4f:dc:57:b1:df:ff:13:fb:e3:1e:dc:d5:d5:c7:23:57:96:ff: 2a:af:61:94:3c:61:ff:8d:c2:27:1d:32:a1:a0:6e:4b:25:ee: 60:ad:81:a6:3a:f6:98:95:78:80:f3:c2:cd:d2:86:f6:71:ed: a2:e7:f8:c3:0b:f7:d1:55:a3:31:e0:a7:40:c6:28:67:5e:8c: 0a:a1:9d:17:4d:b6:3d:64:ff:5b:df:84:4a:33:23:4a:97:06: 1c:3c:bb:e2:34:d6:76:9b:39:14:83:89:55:02:77:e1:23:39: fe:37:70:00:ca:07:ba:8d:ab:b9:8a:55:70:53:41:01:bb:c5: 75:52:2d:8a:4a:d8:5e:9f:4f:81:7c:52:6f:b5:35:15:57:f9: cc:98:83:aa:94:52:99:72:da:1b:0a:7d:81:69:45:b0:30:9a: 18:c9:9e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE MTE4NDc1RjcwHhcNMjQwNTE4MTkyNzQzWhcNMjQwNTI1MTkyNzQzWjAYMRYwFAYD VQQDEw02NjQ5MDEzMC1mMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZFGdpSxEanrxTaxW7qZ2ydrsrf2akZm23kmLIQAM/FeW9xvdUFNKPEiDyAK guBTJht5MTQgDo9hlXo5etgPcBUftqoCMJNpbJWZuHIbf1g1YXZFL62KfHFdxKV/ ssQry51GcCrS5SiKbM3YfvBV9HRbeBtMwyoPbmkD81v9lvvIkgrMxbeVmXY9/JY+ LSyMyhZ+YliZ5cdJ55EDIRdedmhixUmQJQoNM8AQXuMSkiYxvjnrVnTspswWTv4z Qv0miB4iT3DADcVag2PRqA8JPcbLmtogP3LxECne92dOwDABhLomw9MmGL7BuGGp QN1EMVJTx1joyeJxRfYbTopluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3jTCq9 8BMCykjC76j0Gw1O+GTFMB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2 RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ1MS9COTM0OTM3QTA2RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3 S2hMaG5WZFpDdGpSR0VkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfwHZ3R1vBDIybNi0ADCGWCAWJ5EgIZAiT9W/7humq1pJELjEemGsP g99TnIBTP7f3XgnDKoq4QuH3FYDqh5asCtVWHvWJ1/DqFQZBY4pJQRiyia1dfx/3 2RFP3Fex3/8T++Me3NXVxyNXlv8qr2GUPGH/jcInHTKhoG5LJe5grYGmOvaYlXiA 88LN0ob2ce2i5/jDC/fRVaMx4KdAxihnXowKoZ0XTbY9ZP9b34RKMyNKlwYcPLvi NNZ2mzkUg4lVAnfhIzn+N3AAyge6jau5ilVwU0EBu8V1Ui2KSthen0+BfFJvtTUV V/nMmIOqlFKZctobCn2BaUWwMJoYyZ6h -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org