$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: aIOCBxEnnhLVAa+8n2DOOuce73YzDjdVTVbdPfb3EQ8= Subject key identifier: 29:FB:CD:91:D3:D9:05:61:77:8C:AD:28:11:89:8A:02:96:1E:FA:6F Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0962 Signing time: Sat 04 May 2024 21:13:01 +0000 Manifest this update: Sat 04 May 2024 21:13:00 +0000 Manifest next update: Sat 11 May 2024 21:13:00 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: jkgMmV9nDnEVKGlmcc+eqnjbFoMHWxzLwyKgIlQGhd4=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: iuQBORVLtuzDIuncz9VmwS8znnsu9e38o4Zo2zyKz8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: May 4 21:13:00 2024 GMT Not After : May 11 21:13:00 2024 GMT Subject: CN=6636a4dd-f88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e3:74:fa:d0:9b:0c:25:3e:53:77:7f:5f:1c: 0a:1c:a2:c3:fc:86:a1:f8:a7:eb:76:9b:9a:1e:8d: f2:bc:e6:d1:91:81:a9:ed:5d:43:36:7b:12:b4:4f: 9c:d4:7e:e6:90:e6:90:ce:88:8b:0d:ba:8f:52:06: ee:30:56:15:8e:32:98:17:b4:7a:b5:30:9f:f3:a5: 77:b2:55:f7:c4:94:52:31:09:b0:62:e3:99:b5:2b: e6:8d:af:a3:c0:d4:68:2e:ec:6f:ae:16:77:be:21: 0e:7d:00:89:a0:b1:60:bc:cd:e1:65:2d:7f:f1:5b: 3f:7e:64:2e:fb:9e:ac:ed:45:07:c3:c1:cf:ed:65: 91:0b:b9:e4:55:43:22:7e:60:60:21:53:31:a8:07: 9d:bf:2a:ea:88:27:55:9a:fa:df:0e:76:f8:37:39: 44:eb:fb:b2:10:cb:82:fa:64:cd:6d:f9:95:0b:11: 63:d1:d1:b1:fe:53:f9:14:e5:8c:8d:5d:ee:a3:91: 33:9f:92:00:61:22:45:e8:26:0b:39:21:54:fc:51: 5b:d3:26:bd:6b:3b:22:74:75:13:77:a5:e3:a8:0b: d6:33:d3:ac:7e:82:f5:14:9e:1e:55:07:9a:95:a9: 84:19:59:cc:bd:2b:f0:52:4b:41:54:9f:61:52:fa: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FB:CD:91:D3:D9:05:61:77:8C:AD:28:11:89:8A:02:96:1E:FA:6F X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:70:b6:2a:72:92:0c:74:4a:b9:90:f0:8c:02:c8:cc:96:40: 58:57:b1:64:8a:15:52:ca:a7:12:fd:e0:93:c3:a7:4e:b7:12: 3f:1f:24:c3:6e:fa:62:80:a4:62:14:b1:8b:d2:a6:47:c7:44: f9:78:13:70:47:df:64:c6:1a:ab:90:c8:51:ca:05:1c:70:32: 36:2d:cb:5f:b8:fd:c2:57:e5:7e:99:4b:1d:c4:5b:8e:00:ea: 9f:93:c6:59:c4:6c:cf:f5:83:e8:24:f0:ca:30:a3:03:24:30: a0:e5:90:91:fd:6d:70:a8:4a:25:45:ff:ac:59:9a:73:48:d8: 41:c0:32:e2:2b:ef:1e:09:93:c3:3c:93:13:1a:25:a0:cd:b7: 2b:a8:21:84:83:54:dc:81:bf:99:87:88:65:2c:15:91:2b:46: 45:50:50:ed:7d:9c:da:a0:d2:ff:cd:44:23:f0:5f:f6:0b:68: 66:95:0a:49:ee:33:e9:7f:6f:41:68:df:66:1d:cc:b7:94:0e: ba:1d:8d:ac:46:a9:10:bc:10:b4:35:4e:3f:d2:84:a9:34:9e: 71:62:2e:a1:4f:92:c9:5e:f6:bb:dc:4e:53:e6:3f:82:6f:da: 1e:bf:46:e4:e8:65:6b:24:11:a3:42:85:e4:54:38:13:06:89: 81:85:fd:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjQwNTA0MjExMzAwWhcNMjQwNTExMjExMzAwWjAYMRYwFAYD VQQDEw02NjM2YTRkZC1mODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ON0+tCbDCU+U3d/XxwKHKLD/Iah+KfrdpuaHo3yvObRkYGp7V1DNnsStE+c 1H7mkOaQzoiLDbqPUgbuMFYVjjKYF7R6tTCf86V3slX3xJRSMQmwYuOZtSvmja+j wNRoLuxvrhZ3viEOfQCJoLFgvM3hZS1/8Vs/fmQu+56s7UUHw8HP7WWRC7nkVUMi fmBgIVMxqAedvyrqiCdVmvrfDnb4NzlE6/uyEMuC+mTNbfmVCxFj0dGx/lP5FOWM jV3uo5Ezn5IAYSJF6CYLOSFU/FFb0ya9azsidHUTd6XjqAvWM9OsfoL1FJ4eVQea lamEGVnMvSvwUktBVJ9hUvpf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn7zZHT 2QVhd4ytKBGJigKWHvpvMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3cLYqcpIMdEq5kPCMAsjMlkBYV7FkihVSyqcS/eCTw6dOtxI/HyTD bvpigKRiFLGL0qZHx0T5eBNwR99kxhqrkMhRygUccDI2LctfuP3CV+V+mUsdxFuO AOqfk8ZZxGzP9YPoJPDKMKMDJDCg5ZCR/W1wqEolRf+sWZpzSNhBwDLiK+8eCZPD PJMTGiWgzbcrqCGEg1Tcgb+Zh4hlLBWRK0ZFUFDtfZzaoNL/zUQj8F/2C2hmlQpJ 7jPpf29BaN9mHcy3lA66HY2sRqkQvBC0NU4/0oSpNJ5xYi6hT5LJXva73E5T5j+C b9oev0bk6GVrJBGjQoXkVDgTBomBhf3J -----END CERTIFICATE-----Generated at Sun May 5 00:12:19 2024 by rpki-client on console-fra.rpki-client.org