$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: aN/frZ29Hj6VvB8Vt+HsGWRHJWgIlnDIZMcOx2h+XtM= Subject key identifier: 9A:45:89:09:9B:25:23:6F:38:10:FD:A9:47:86:D4:5D:15:2D:A3:55 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 77 Signing time: Fri 17 May 2024 07:27:18 +0000 Manifest this update: Fri 17 May 2024 07:27:17 +0000 Manifest next update: Fri 24 May 2024 07:27:17 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: 69oGUKRu+HUxOBioaw+orw0okJU5qvWlAEbtE4Kzm88=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: aUFB4aYhGGe3Q1A/4qQPphh/RmFp8OnW/auHXXVnUmo=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: 3DzAptEmwcqiuvo4m0qnrVzILunvT+CiNtZ2oFZVUbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: May 17 07:27:17 2024 GMT Not After : May 24 07:27:17 2024 GMT Subject: CN=664706d6-f990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f5:20:f4:e4:b7:6d:8e:4f:4f:87:2f:58:97: 6d:1d:89:2c:a5:cc:4b:a2:e1:34:c4:8b:08:2d:67: c6:86:37:3d:1b:da:bd:eb:37:70:f8:3f:4b:5a:f4: 14:95:36:e2:f9:e1:a0:f2:a1:74:15:3f:63:a6:3c: d5:a2:a0:4a:7e:19:be:2f:73:bc:78:5d:26:f1:66: 0b:0e:9c:d7:b7:a3:b8:de:de:d3:a7:66:be:71:a2: c6:1f:d0:06:cf:2e:44:dc:03:3f:c7:ad:89:fe:94: bc:fe:76:17:2b:9d:48:70:55:15:ef:ba:4c:57:a4: 4a:2b:d9:18:d8:2a:d3:18:03:f6:fd:94:68:6c:33: 34:02:81:79:56:20:60:7c:44:9a:de:90:6a:5b:11: c6:f7:f8:a0:8d:d2:42:ca:46:cb:6c:ab:d8:84:32: 79:ac:df:40:d6:40:b4:c5:66:3f:20:41:57:51:2d: 6a:f6:31:4f:d6:39:7b:e5:87:ea:1b:53:1f:5c:d9: 2a:82:96:86:99:0a:0a:da:f9:3f:eb:54:6d:58:c8: 80:fe:a1:39:36:c0:e6:25:7b:04:87:c6:21:d1:8f: de:bd:8e:e5:4e:9c:6f:b8:c6:27:c2:1c:94:46:3a: 39:f1:84:9b:69:28:02:78:68:af:f6:c5:18:39:33: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:45:89:09:9B:25:23:6F:38:10:FD:A9:47:86:D4:5D:15:2D:A3:55 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9a:19:f2:db:16:09:d5:3a:13:0b:74:4f:8c:50:b2:3e:9d: 04:37:75:6b:89:2b:c8:5f:df:58:7e:f4:2b:ac:6e:c6:65:40: 9a:d9:7e:26:10:60:48:24:4c:76:f4:73:b6:19:34:48:09:c8: 3a:38:9e:d4:9f:b5:67:73:53:3b:43:df:98:56:54:d9:e8:b2: c9:38:ba:cd:49:40:9f:6b:a2:ef:ce:e5:b0:79:97:90:7b:5e: 3d:7a:86:c9:57:c0:a5:08:ee:32:c6:90:0e:df:39:d3:18:ab: 94:8f:e3:00:24:d8:cd:33:1a:65:75:b6:f9:46:c0:bc:a0:48: 58:12:8e:81:af:c2:d3:36:d8:d8:44:6c:67:5c:90:59:2f:3c: 8b:7c:88:9e:dc:6d:c7:cc:6d:da:ba:f9:60:c4:ed:e2:58:09: 65:43:99:d6:24:d5:50:c0:ed:1d:df:08:2a:b3:96:6d:a4:99: 33:10:4d:04:8a:28:73:f7:dd:ec:90:a0:c2:43:49:1a:e4:10: 0b:4c:d0:5d:5a:75:c7:db:54:8f:93:f5:30:b7:dc:91:54:47: 38:c7:84:1e:e3:0e:ce:79:41:9a:da:33:db:1c:27:57:fc:2e: ac:b9:5b:40:12:74:89:43:10:b0:c5:f1:04:b8:77:b7:8c:f9: 9f:04:6c:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDgxNDExMC8GA1UEBRMoODFBMEExODRCOUM2MjU5MzYwRUEzM0JCMjgzQ0ExQjQz MjFCQjAzNTAeFw0yNDA1MTcwNzI3MTdaFw0yNDA1MjQwNzI3MTdaMBgxFjAUBgNV BAMTDTY2NDcwNmQ2LWY5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu9SD05Ldtjk9Phy9Yl20diSylzEui4TTEiwgtZ8aGNz0b2r3rN3D4P0ta9BSV NuL54aDyoXQVP2OmPNWioEp+Gb4vc7x4XSbxZgsOnNe3o7je3tOnZr5xosYf0AbP LkTcAz/HrYn+lLz+dhcrnUhwVRXvukxXpEor2RjYKtMYA/b9lGhsMzQCgXlWIGB8 RJrekGpbEcb3+KCN0kLKRstsq9iEMnms30DWQLTFZj8gQVdRLWr2MU/WOXvlh+ob Ux9c2SqCloaZCgra+T/rVG1YyID+oTk2wOYlewSHxiHRj969juVOnG+4xifCHJRG OjnxhJtpKAJ4aK/2xRg5M3SnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmkWJCZsl I284EP2pR4bUXRUto1UwHwYDVR0jBBgwFoAUgaChhLnGJZNg6jO7KDyhtDIbsDUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0ODE0LzEwMTY4OTI2NjFC RjExRUU4NjAyNEYzRkM0RjlBRTAyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNE VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2FDaGhMbkdKWk5nNmpPN0tEeWh0RElic0RVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 ODE0LzEwMTY4OTI2NjFCRjExRUU4NjAyNEYzRkM0RjlBRTAyL2dhQ2hoTG5HSlpO ZzZqTzdLRHlodERJYnNEVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuaGfLbFgnVOhMLdE+MULI+nQQ3dWuJK8hf31h+9CusbsZlQJrZfiYQ YEgkTHb0c7YZNEgJyDo4ntSftWdzUztD35hWVNnossk4us1JQJ9rou/O5bB5l5B7 Xj16hslXwKUI7jLGkA7fOdMYq5SP4wAk2M0zGmV1tvlGwLygSFgSjoGvwtM22NhE bGdckFkvPIt8iJ7cbcfMbdq6+WDE7eJYCWVDmdYk1VDA7R3fCCqzlm2kmTMQTQSK KHP33eyQoMJDSRrkEAtM0F1adcfbVI+T9TC33JFURzjHhB7jDs55QZraM9scJ1f8 Lqy5W0ASdIlDELDF8QS4d7eM+Z8EbLM= -----END CERTIFICATE-----Generated at Fri May 17 08:52:43 2024 by rpki-client on console-ams.rpki-client.org