$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft File: dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json) Hash identifier: N2ImPqGsPNZM/IcfGTluE2YyG+yZ2QwiTQbpY+JVvVA= Subject key identifier: AD:DC:AE:0D:33:0D:65:80:30:E9:50:D8:74:5E:30:31:93:AC:0D:8B Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft Manifest number: 06C7 Signing time: Tue 30 Apr 2024 23:23:02 +0000 Manifest this update: Tue 30 Apr 2024 23:23:01 +0000 Manifest next update: Tue 07 May 2024 23:23:01 +0000 Files and hashes: 1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: EEdOMGBtaxc63ACj0wTJalkYCPkfO1ilWALwnNI7Oqo=) 2: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: R/F0OlKI9Yze+qZkshO0ucOOT2ruih0hRAtyrbqmeWc=) 3: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: LCASSlw73kj8RjI+w/Ba5rk4QWoYYoa/QySnVh2z4EE=) 4: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: d/Hb2ygr4nfXODEYxK0HqBHniP5aw3JfKXlA0VwQ0vY=) 5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: fmLFWf/mQN23ivfz+XPN5RMVSxs9MAhpdzQIsqVJ1tM=) 6: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: D2FGX1uBKJAQLXsSJrhJxbXjvVDFY65lUFJpBZJOz5o=) 7: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: ICF+dHQWnJNnfViptqUTP7VKsB6pk9eDoAT9uFZY3Dc=) 8: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: 8tAfjE5UOtWsk+PXFcghoh37/Uq2gO8SE28c+QSwwoo=) 9: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: BWr/Xbgr3f+jXE5/QqLaXJBHzGPsMNW8l2koNUOwM0E=) 10: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: TaNRbY1DkJ7hhXIz5HW5dwkD3/+aswTarJUeDf+v28Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Apr 30 23:23:01 2024 GMT Not After : May 7 23:23:01 2024 GMT Subject: CN=66317d56-d6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:5a:58:bd:40:5b:bd:51:87:30:d2:86:77: d3:de:41:84:80:89:01:3c:d0:3c:96:d7:ec:25:8a: d7:9e:39:a8:4e:15:3c:3b:69:98:9d:d4:22:56:d5: 71:4c:8b:76:bb:93:f4:24:94:c0:48:21:b6:c8:35: e4:d1:0c:ee:5b:05:93:1d:6c:ef:87:35:3c:9d:9f: 77:e7:f6:30:82:b4:2b:0d:9e:8b:ab:12:2d:bc:ea: 57:1b:db:3d:0c:aa:c3:d8:5d:8b:03:bf:e8:34:91: 9b:a5:77:a3:93:f7:0d:79:ae:c3:cb:aa:c6:39:df: c6:bf:8e:05:6f:6e:b1:53:6f:a1:ad:4d:4b:25:09: 37:8c:8b:7d:b1:1b:93:ae:8b:d2:3b:96:4f:2c:82: ef:4f:09:89:b6:a8:9b:f2:c8:fa:f4:53:7a:27:ab: c7:b7:e4:7e:0c:98:30:f4:1f:5b:a2:b6:c5:19:a7: 29:e8:c9:2e:75:9f:cc:15:e1:22:eb:31:7e:e9:c2: 3c:d1:db:77:71:85:09:cf:a0:6f:b1:0a:c2:bc:a8: c5:38:ab:3d:61:1c:38:9a:f4:4b:95:d7:43:26:a6: 12:12:26:8f:0f:ff:99:ec:ca:5f:dd:46:e2:1b:47: f4:f8:c3:36:e5:8b:32:6e:6d:37:90:a5:44:04:ac: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:AE:0D:33:0D:65:80:30:E9:50:D8:74:5E:30:31:93:AC:0D:8B X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:bf:73:c6:89:23:29:83:41:6c:e0:46:3b:52:bc:34:b1:bd: 5b:37:12:d1:3c:a4:7f:c7:37:c8:df:6e:f6:3d:8e:0a:ff:38: 4f:3f:b1:86:40:37:8c:b9:1f:0e:cc:7f:44:a5:10:e1:3f:b8: cd:c9:25:0e:9e:41:e7:ab:b0:3c:69:e0:b3:16:54:d1:cf:e4: 84:48:02:a9:45:c8:b7:c0:94:bf:ea:a5:84:6e:d6:06:2c:1d: e2:b5:5e:06:89:69:c1:a2:fb:3f:6b:06:b1:92:a2:0a:77:8c: bf:e7:13:8e:82:42:00:5a:c5:da:d3:6e:df:c1:56:03:f7:4e: ca:7b:ed:02:52:17:c1:7f:b4:a8:a6:9c:9c:b7:0c:e8:bc:ac: 6a:09:a2:7a:cf:90:35:af:bf:a8:61:e4:c1:dc:62:a1:bd:0a: 50:01:d5:d3:ca:33:39:1c:aa:5d:f6:9d:5f:39:95:e8:dd:37: 0d:5d:f3:32:0e:79:1c:8a:37:7a:1e:b1:e3:30:9e:d6:81:7a: e8:69:7a:85:a2:eb:b0:85:ca:a8:a8:d7:3e:d7:21:80:46:0d: 1c:a9:9b:a6:fa:72:8c:0c:59:af:94:c1:f5:f0:79:51:d3:61: de:fc:08:82:91:e3:8b:79:fa:e5:cf:8b:f3:61:ea:82:57:1b: 21:8a:81:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjQwNDMwMjMyMzAxWhcNMjQwNTA3MjMyMzAxWjAYMRYwFAYD VQQDEw02NjMxN2Q1Ni1kNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkVaWL1AW71RhzDShnfT3kGEgIkBPNA8ltfsJYrXnjmoThU8O2mYndQiVtVx TIt2u5P0JJTASCG2yDXk0QzuWwWTHWzvhzU8nZ935/YwgrQrDZ6LqxItvOpXG9s9 DKrD2F2LA7/oNJGbpXejk/cNea7Dy6rGOd/Gv44Fb26xU2+hrU1LJQk3jIt9sRuT rovSO5ZPLILvTwmJtqib8sj69FN6J6vHt+R+DJgw9B9borbFGacp6MkudZ/MFeEi 6zF+6cI80dt3cYUJz6BvsQrCvKjFOKs9YRw4mvRLlddDJqYSEiaPD/+Z7Mpf3Ubi G0f0+MM25Ysybm03kKVEBKxf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3crg0z DWWAMOlQ2HReMDGTrA2LMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcxOC85MjgzRURFRTBFOTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010 T045aXFEdFhzRHVpaUg1dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWv3PGiSMpg0Fs4EY7Urw0sb1bNxLRPKR/xzfI3272PY4K/zhPP7GG QDeMuR8OzH9EpRDhP7jNySUOnkHnq7A8aeCzFlTRz+SESAKpRci3wJS/6qWEbtYG LB3itV4GiWnBovs/awaxkqIKd4y/5xOOgkIAWsXa027fwVYD907Ke+0CUhfBf7So ppyctwzovKxqCaJ6z5A1r7+oYeTB3GKhvQpQAdXTyjM5HKpd9p1fOZXo3TcNXfMy Dnkcijd6HrHjMJ7WgXroaXqFouuwhcqoqNc+1yGARg0cqZum+nKMDFmvlMH18HlR 02He/AiCkeOLefrlz4vzYeqCVxshioFu -----END CERTIFICATE-----Generated at Wed May 1 00:35:48 2024 by rpki-client on console-ams.rpki-client.org