$ rpki-client -vvf rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft File: RdhhD84X2f9OjJ4teiU9pcL4f5s.mft (raw, json) Hash identifier: ool/p3kJbAiTLjtDct7Nt5R54MVLMNG4w7GFOvUFOqk= Subject key identifier: 2F:D9:B8:CC:A1:0E:46:AD:AC:F9:B2:12:1B:B9:69:B2:90:6A:6D:62 Authority key identifier: 45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B Certificate issuer: /CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft Manifest number: 08EA Signing time: Mon 22 Apr 2024 21:32:40 +0000 Manifest this update: Mon 22 Apr 2024 21:32:39 +0000 Manifest next update: Mon 29 Apr 2024 21:32:39 +0000 Files and hashes: 1: RdhhD84X2f9OjJ4teiU9pcL4f5s.crl (hash: 9pw7IOWbGULA1uNglmHNNuTUVuRTCQFnlG4KVMYbgQw=) 2: 033AD246931B11EA974F0D67C4F9AE02.roa (hash: A05hXlPyDyCmrrB//fofeb9End0V/GDz0BxXzSOGPfc=) 3: 01CD0726931B11EA974F0D67C4F9AE02.roa (hash: 8rUvu6Zm9mS07ZXUdbkRAFT1ufjglbtScs1T7Sy1+Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 21:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B Validity Not Before: Apr 22 21:32:39 2024 GMT Not After : Apr 29 21:32:39 2024 GMT Subject: CN=6626d777-e651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:bd:b4:c8:1e:41:5e:b9:fa:3e:99:37:00: 8d:ef:dd:42:64:36:ac:d9:53:d1:12:15:11:75:86: 19:a1:e8:c4:39:be:1e:b8:45:8d:bc:c4:06:92:15: 36:f3:e4:fa:20:c0:9b:55:1a:60:6a:43:37:c1:fe: 25:6f:4d:b7:41:61:30:75:d3:60:59:01:7e:22:fb: 0a:ed:55:80:87:ba:2b:63:5a:26:11:ac:59:fd:49: 62:61:29:14:9e:9d:e6:e2:af:d4:3d:43:4f:9f:c7: 5a:99:ed:68:65:93:dc:cb:0c:9b:e3:ad:ab:88:f3: 6a:fa:c7:96:ec:75:e3:d2:7f:32:57:cb:05:b4:6c: da:20:98:75:cf:60:ba:20:1b:7d:ff:de:ca:c8:2b: 9e:25:e5:57:e1:ba:a2:05:1c:6b:31:b1:f9:2f:55: 8d:26:47:b6:d2:32:13:cf:f4:18:50:0c:25:8d:bb: 15:ba:b4:61:e6:cb:60:ef:0a:6e:dc:3a:54:cf:4e: c7:ee:8e:c2:27:6d:ea:8e:b9:c0:2b:27:68:32:43: e7:e2:65:77:31:88:e8:52:8d:02:86:3a:07:69:eb: 94:8b:eb:3d:ac:3a:a0:99:db:d6:d0:80:cc:32:c2: 4c:b4:3d:02:45:e1:ab:d1:e4:fa:4f:be:0e:a4:b3: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D9:B8:CC:A1:0E:46:AD:AC:F9:B2:12:1B:B9:69:B2:90:6A:6D:62 X509v3 Authority Key Identifier: keyid:45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:89:d9:fc:df:62:b1:14:80:75:9a:7f:7a:9a:d5:b3:3c: 59:d9:bc:5c:82:38:9a:0e:89:32:1f:18:91:ae:0c:37:93:a4: 98:68:57:98:c0:69:93:2b:1a:26:8f:60:bc:d9:81:6d:b4:af: 0e:04:6a:fd:ca:cb:46:c7:d2:ce:6c:de:53:e9:06:15:e1:ec: 9c:e5:a0:80:fd:85:9c:79:7b:c7:a1:ae:f2:44:68:ea:23:d3: 91:a8:ad:43:3e:5f:b8:30:08:ed:f4:5c:ee:3f:f1:61:8a:1a: 1d:78:3d:58:2b:6a:53:0c:20:85:fc:08:8b:76:67:c5:93:9d: e9:d6:90:ee:43:6b:ec:48:b1:0d:fc:0b:b8:41:2a:6b:82:82: b2:7f:f4:5d:60:1f:18:f5:1a:d3:5b:c1:65:51:cd:ae:b9:43: d8:89:6d:fe:1b:b6:cb:48:39:b5:2a:12:d8:61:08:6b:fa:c8: 97:e6:cf:53:6a:15:d7:24:77:55:d0:0e:55:8c:8d:1a:45:97: 05:2a:a3:6d:6b:03:c8:0d:da:46:58:5c:c9:45:17:12:df:8f: ab:81:8b:01:34:9b:fb:b1:58:53:71:ea:7b:94:63:94:02:e3: 6b:e7:b5:5a:bc:18:ba:6c:84:7a:e4:50:e4:93:83:3c:5c:83: 4f:f8:21:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ1RjUxMTAvBgNVBAUTKDQ1RDg2MTBGQ0UxN0Q5RkY0RThDOUUyRDdBMjUzREE1 QzJGODdGOUIwHhcNMjQwNDIyMjEzMjM5WhcNMjQwNDI5MjEzMjM5WjAYMRYwFAYD VQQDEw02NjI2ZDc3Ny1lNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNG9tMgeQV65+j6ZNwCN791CZDas2VPREhURdYYZoejEOb4euEWNvMQGkhU2 8+T6IMCbVRpgakM3wf4lb023QWEwddNgWQF+IvsK7VWAh7orY1omEaxZ/UliYSkU np3m4q/UPUNPn8dame1oZZPcywyb462riPNq+seW7HXj0n8yV8sFtGzaIJh1z2C6 IBt9/97KyCueJeVX4bqiBRxrMbH5L1WNJke20jITz/QYUAwljbsVurRh5stg7wpu 3DpUz07H7o7CJ23qjrnAKydoMkPn4mV3MYjoUo0ChjoHaeuUi+s9rDqgmdvW0IDM MsJMtD0CReGr0eT6T74OpLP2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/ZuMyh DkatrPmyEhu5abKQam1iMB8GA1UdIwQYMBaAFEXYYQ/OF9n/ToyeLXolPaXC+H+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDVGNS85QjE4QjQzMDg4 RjIxMUVBODk5RUJFNjdDNEY5QUUwMi9SZGhoRDg0WDJmOU9qSjR0ZWlVOXBjTDRm NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JkaGhEODRYMmY5T2pKNHRlaVU5cGNMNGY1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDVGNS85QjE4QjQzMDg4RjIxMUVBODk5RUJFNjdDNEY5QUUwMi9SZGhoRDg0WDJm OU9qSjR0ZWlVOXBjTDRmNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqInZ/N9isRSAdZp/eprVszxZ2bxcgjiaDokyHxiRrgw3k6SYaFeY wGmTKxomj2C82YFttK8OBGr9ystGx9LObN5T6QYV4eyc5aCA/YWceXvHoa7yRGjq I9ORqK1DPl+4MAjt9FzuP/FhihodeD1YK2pTDCCF/AiLdmfFk53p1pDuQ2vsSLEN /Au4QSprgoKyf/RdYB8Y9RrTW8FlUc2uuUPYiW3+G7bLSDm1KhLYYQhr+siX5s9T ahXXJHdV0A5VjI0aRZcFKqNtawPIDdpGWFzJRRcS34+rgYsBNJv7sVhTcep7lGOU AuNr57VavBi6bIR65FDkk4M8XINP+CFS -----END CERTIFICATE-----Generated at Tue Apr 23 18:42:43 2024 by rpki-client on console-ams.rpki-client.org