$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: GBJPjo4SVqAiP26CU+T0Px/EsucRFeXKbYEKJoUOKew= Subject key identifier: 4D:AD:BC:7D:19:82:3E:0B:12:0D:8B:59:FC:0D:23:A3:63:D0:1A:A0 Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 7C Signing time: Wed 15 May 2024 07:23:09 +0000 Manifest this update: Wed 15 May 2024 07:23:09 +0000 Manifest next update: Wed 22 May 2024 07:23:09 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: zkUJH6LKT4Q9oGrj5ZWBFgSQu6O5m4FcnNxuhtpnEiY=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: 1dpcwbxbOmSptn78t7IKa9RvI5w/WLT63SPq7v5q1Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: May 15 07:23:09 2024 GMT Not After : May 22 07:23:09 2024 GMT Subject: CN=664462dd-f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:bd:03:6f:7c:85:d5:93:d2:a2:8e:5a:3f: e8:8f:3a:d4:39:f2:78:8b:97:f4:76:fc:10:06:60: 45:96:ec:2c:c9:bd:41:9b:4d:6a:c2:e2:67:c8:49: 30:29:56:8a:0d:13:31:37:b4:f6:71:28:1d:af:c9: c2:69:6b:59:78:ad:59:64:3a:08:9b:b1:09:d4:f8: e1:fb:89:6d:60:6a:c1:57:df:3f:8a:d4:bf:74:f9: fa:b9:d8:f0:06:ff:0c:55:a6:e0:76:a1:ee:6a:3a: e9:77:84:f0:fc:fd:33:fe:7b:86:9c:07:e6:bc:b0: a7:df:b7:04:36:4b:f8:7c:43:03:4f:66:8e:84:58: 11:88:5d:c7:0f:2c:db:34:f7:ef:98:2b:ed:3c:91: fa:90:43:8d:8b:99:b7:d4:70:ed:f7:7e:a8:a1:75: 15:c1:d5:fc:62:57:a8:56:3b:f9:12:c9:01:19:cb: 55:d7:db:87:95:d6:dd:f3:5a:15:3e:b5:f5:6b:60: cb:d1:8f:93:82:f9:0c:6d:eb:5f:56:b7:fe:f6:37: 67:39:fa:64:de:96:14:cb:af:c3:83:d4:0e:36:8b: 15:84:00:a5:13:c4:44:88:de:9b:08:59:f5:c4:4e: 13:bc:da:11:63:3a:25:af:8c:07:81:58:da:ec:1c: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:BC:7D:19:82:3E:0B:12:0D:8B:59:FC:0D:23:A3:63:D0:1A:A0 X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f0:92:10:38:61:f8:e5:b3:89:d7:e9:4b:2e:c9:a6:25:8a: f7:03:0d:df:61:e8:11:47:65:0b:8a:31:82:92:2d:0c:7e:b1: 9f:1c:67:be:67:58:07:e8:15:8f:1b:19:27:68:d6:4f:c1:c8: 9f:ac:9f:62:e8:27:4f:ea:ff:e1:12:21:63:14:94:6f:9f:45: e2:33:d6:2a:2f:d6:ed:52:1f:4d:57:c8:da:5e:1b:4f:cb:46: f9:52:13:a6:46:b3:ab:eb:1c:a8:7e:f8:6d:f3:26:56:88:d0: c5:71:81:c6:8f:b0:6e:3f:2f:40:b7:9b:fd:d8:d3:8f:34:cb: 12:7c:8d:09:00:8e:02:98:64:59:ef:4c:45:8a:97:05:94:f5: 07:9e:3b:c6:34:bc:64:35:e8:2a:72:0d:90:51:54:f3:95:2a: 83:47:93:7b:87:c4:da:56:af:42:c5:b7:a6:be:79:84:69:46: d9:96:9d:8e:44:f1:5b:c5:4a:1a:bb:8b:00:bf:69:1d:70:dd: d1:8a:8d:6a:11:5b:84:47:23:3d:80:71:de:57:6d:12:50:b0: 3b:70:05:66:46:56:e9:27:ab:97:9f:c3:50:c4:16:ea:81:ee: 36:9a:d7:ea:4a:58:86:6a:5c:a0:2f:5d:4f:bc:e2:d5:89:45: 94:76:0c:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzlFODExMC8GA1UEBRMoODUyOTlGMERCMTRDOEYwQTUzRDI0NDZFRkRCMENDMDU5 QzE1MjRCRjAeFw0yNDA1MTUwNzIzMDlaFw0yNDA1MjIwNzIzMDlaMBgxFjAUBgNV BAMTDTY2NDQ2MmRkLWYyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2rr0Db3yF1ZPSoo5aP+iPOtQ58niLl/R2/BAGYEWW7CzJvUGbTWrC4mfISTAp VooNEzE3tPZxKB2vycJpa1l4rVlkOgibsQnU+OH7iW1gasFX3z+K1L90+fq52PAG /wxVpuB2oe5qOul3hPD8/TP+e4acB+a8sKfftwQ2S/h8QwNPZo6EWBGIXccPLNs0 9++YK+08kfqQQ42LmbfUcO33fqihdRXB1fxiV6hWO/kSyQEZy1XX24eV1t3zWhU+ tfVrYMvRj5OC+Qxt619Wt/72N2c5+mTelhTLr8OD1A42ixWEAKUTxESI3psIWfXE ThO82hFjOiWvjAeBWNrsHF09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTa28fRmC PgsSDYtZ/A0jo2PQGqAwHwYDVR0jBBgwFoAUhSmfDbFMjwpT0kRu/bDMBZwVJL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOUU4L0ZERjY3MzA2NThG RDExRUU5RDJEMjM3NkM0RjlBRTAyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNtZkRiRk1qd3BUMGtSdV9iRE1CWndWSkw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OUU4L0ZERjY3MzA2NThGRDExRUU5RDJEMjM3NkM0RjlBRTAyL2hTbWZEYkZNandw VDBrUnVfYkRNQlp3VkpMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHwkhA4Yfjls4nX6UsuyaYlivcDDd9h6BFHZQuKMYKSLQx+sZ8cZ75n WAfoFY8bGSdo1k/ByJ+sn2LoJ0/q/+ESIWMUlG+fReIz1iov1u1SH01XyNpeG0/L RvlSE6ZGs6vrHKh++G3zJlaI0MVxgcaPsG4/L0C3m/3Y0480yxJ8jQkAjgKYZFnv TEWKlwWU9QeeO8Y0vGQ16CpyDZBRVPOVKoNHk3uHxNpWr0LFt6a+eYRpRtmWnY5E 8VvFShq7iwC/aR1w3dGKjWoRW4RHIz2Acd5XbRJQsDtwBWZGVuknq5efw1DEFuqB 7jaa1+pKWIZqXKAvXU+84tWJRZR2DC4= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org