$ rpki-client -vvf rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft File: RhpvMegu0A9M7nmnAkijjj-Sb34.mft (raw, json) Hash identifier: A1iO1lLmvLbFHu0BbvzZIg4dOrO85WwRfmTYaxo0pO8= Subject key identifier: E7:EF:02:CF:3A:12:A6:F7:58:76:57:B4:64:77:04:85:E4:84:04:F7 Authority key identifier: 46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E Certificate issuer: /CN=A9132086/serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft Manifest number: 0675 Signing time: Sat 04 May 2024 23:41:14 +0000 Manifest this update: Sat 04 May 2024 23:41:14 +0000 Manifest next update: Sat 11 May 2024 23:41:14 +0000 Files and hashes: 1: RhpvMegu0A9M7nmnAkijjj-Sb34.crl (hash: f2Gf+SNJEX8LtQSWYIwoyl2KHVqSd2NJAfdOxwvwCKY=) 2: D0D950CC880C11ED9353737BC4F9AE02.roa (hash: D6inkKTBjKWIPzk/frnGZ1dDbJ+jq7ybe23tSn7zDQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132086/serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E Validity Not Before: May 4 23:41:14 2024 GMT Not After : May 11 23:41:14 2024 GMT Subject: CN=6636c79a-4214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:52:4d:22:e5:5a:6e:cc:91:4e:14:4f:56: d9:35:a5:57:23:a1:f2:5a:1a:eb:b0:13:75:bd:9b: ef:3c:4c:a5:47:51:e7:b7:0b:5f:f5:19:ab:f5:46: 0c:01:93:55:9d:68:1f:33:02:66:1d:9d:5b:d6:a6: 20:3a:6e:ad:fb:92:2c:47:26:61:79:9d:5f:dd:c5: 7a:3c:59:0a:c3:4d:ec:f9:3c:8c:93:21:09:04:2b: 17:bb:4a:30:e6:ad:d1:b3:14:3f:fe:e4:83:6c:de: 5b:a5:2a:44:39:4f:96:82:69:8c:99:60:f9:61:db: 68:55:95:ad:14:65:c2:89:3e:78:d4:8b:06:31:2d: 6a:bf:8c:fc:ba:07:c2:f1:52:f7:dd:d0:b7:dd:a3: f4:57:5e:0d:5a:cd:63:63:2f:14:ff:26:14:e0:e6: a5:9f:3d:5a:e0:8f:3e:5d:61:c6:95:bd:21:39:84: d3:c6:db:c7:03:3a:e7:75:f8:ef:4f:98:ee:11:e6: d6:67:62:5a:8c:f1:cf:32:cb:13:f5:eb:e9:fc:2b: bc:fc:3c:00:21:8e:6e:dc:81:aa:4d:bc:78:80:b4: f5:a1:10:08:75:15:aa:7c:67:f8:2d:35:94:81:20: 0f:09:35:10:58:2e:7a:03:c4:4e:9b:90:d2:26:fd: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EF:02:CF:3A:12:A6:F7:58:76:57:B4:64:77:04:85:E4:84:04:F7 X509v3 Authority Key Identifier: keyid:46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:55:29:8d:be:5c:97:62:22:ca:ba:7f:f2:f6:6d:d8:c1:1a: 4d:eb:5d:d8:8a:00:85:7d:3a:7d:83:bd:27:90:7e:a4:b5:5a: 37:bb:1f:93:a3:00:d1:be:51:f5:b2:b9:32:8f:f1:8a:0d:e7: 19:59:49:ea:d5:8a:eb:2e:b0:7b:2b:7f:96:a3:48:6d:5d:02: 93:09:41:8a:e9:ef:ae:96:6e:9e:37:ca:52:4a:75:91:c9:32: 04:c5:d0:31:57:45:80:0c:79:a4:7f:56:e9:47:db:24:22:df: 8d:b8:d3:a2:10:9f:87:eb:28:9b:59:9a:e5:8f:41:fc:c9:5f: 55:99:e5:70:ad:5a:27:49:23:fa:97:4e:bb:df:93:c9:9a:c4: d3:67:e5:75:c0:53:94:27:2e:2a:e8:ac:5a:e3:87:38:39:be: 3c:bb:8c:92:1b:b3:fa:f2:1f:67:ba:cb:67:0c:35:53:c3:f3: 8d:4d:c1:22:c6:2a:f3:95:4d:5d:d9:6b:0e:04:57:4b:f4:a3: 9f:98:7b:7f:c6:5f:df:62:4c:3c:57:fe:5f:21:67:f2:2b:c4: 74:3a:d6:e6:a7:ef:2d:b4:fe:6e:da:11:64:17:54:86:b1:43: 77:39:1b:e3:de:91:3d:61:5a:1c:cf:85:b7:f8:9f:7f:e5:4f: 0a:72:e4:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwODYxMTAvBgNVBAUTKDQ2MUE2RjMxRTgyRUQwMEY0Q0VFNzlBNzAyNDhBMzhF M0Y5MjZGN0UwHhcNMjQwNTA0MjM0MTE0WhcNMjQwNTExMjM0MTE0WjAYMRYwFAYD VQQDEw02NjM2Yzc5YS00MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU5STSLlWm7MkU4UT1bZNaVXI6HyWhrrsBN1vZvvPEylR1Hntwtf9Rmr9UYM AZNVnWgfMwJmHZ1b1qYgOm6t+5IsRyZheZ1f3cV6PFkKw03s+TyMkyEJBCsXu0ow 5q3RsxQ//uSDbN5bpSpEOU+WgmmMmWD5YdtoVZWtFGXCiT541IsGMS1qv4z8ugfC 8VL33dC33aP0V14NWs1jYy8U/yYU4Oalnz1a4I8+XWHGlb0hOYTTxtvHAzrndfjv T5juEebWZ2JajPHPMssT9evp/Cu8/DwAIY5u3IGqTbx4gLT1oRAIdRWqfGf4LTWU gSAPCTUQWC56A8ROm5DSJv1ChwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfvAs86 Eqb3WHZXtGR3BIXkhAT3MB8GA1UdIwQYMBaAFEYabzHoLtAPTO55pwJIo44/km9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjA4Ni9BMEFFNUJENDJG Q0QxMUVCQTVBNkEzMkRDNEY5QUUwMi9SaHB2TWVndTBBOU03bm1uQWtpampqLVNi MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JocHZNZWd1MEE5TTdubW5Ba2lqamotU2IzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjA4Ni9BMEFFNUJENDJGQ0QxMUVCQTVBNkEzMkRDNEY5QUUwMi9SaHB2TWVndTBB OU03bm1uQWtpampqLVNiMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUVSmNvlyXYiLKun/y9m3YwRpN613YigCFfTp9g70nkH6ktVo3ux+T owDRvlH1srkyj/GKDecZWUnq1YrrLrB7K3+Wo0htXQKTCUGK6e+ulm6eN8pSSnWR yTIExdAxV0WADHmkf1bpR9skIt+NuNOiEJ+H6yibWZrlj0H8yV9VmeVwrVonSSP6 l06735PJmsTTZ+V1wFOUJy4q6Kxa44c4Ob48u4ySG7P68h9nustnDDVTw/ONTcEi xirzlU1d2WsOBFdL9KOfmHt/xl/fYkw8V/5fIWfyK8R0Otbmp+8ttP5u2hFkF1SG sUN3ORvj3pE9YVocz4W3+J9/5U8KcuSi -----END CERTIFICATE-----Generated at Sun May 5 00:12:21 2024 by rpki-client on console-fra.rpki-client.org