$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: hIatFr8pBe3iIqPAroiJeK/OHXLYYo1HJ9yEWMarFk0= Subject key identifier: 5C:B0:3D:2A:28:EE:AC:2C:C6:CC:23:25:54:24:18:7C:FA:9F:39:3E Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0717 Signing time: Fri 26 Apr 2024 22:31:21 +0000 Manifest this update: Fri 26 Apr 2024 22:31:20 +0000 Manifest next update: Fri 03 May 2024 22:31:20 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: mTUoAsP5gzpNiitFbCmmx+C06kglsFFfaMsFjl41lWA=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: BiQSNx2uJwK+gVBDwZS3YyPicwWmesPdfJrIA1iCWBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Apr 26 22:31:20 2024 GMT Not After : May 3 22:31:20 2024 GMT Subject: CN=662c2b38-b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:e5:c9:bd:c4:29:1f:0c:82:9c:0f:33:58: a6:00:f8:c0:20:39:a0:3c:58:71:b1:71:78:4a:fb: b5:ae:62:56:84:10:19:49:b2:df:f7:b4:6f:7f:9a: 6d:80:bc:b8:6e:c9:ed:3d:d7:ca:bb:09:53:6f:ff: a5:30:62:03:31:1d:e7:28:47:9c:32:11:1c:26:f7: 50:86:37:d3:89:db:71:f8:22:84:29:c7:9e:e5:16: 49:14:95:93:f2:04:41:7b:f4:b6:9f:ce:d3:7f:96: 4d:84:0c:c6:9b:fe:5a:3c:52:a5:6a:42:95:e8:0f: 68:d4:8e:b1:e4:a4:11:d4:87:6c:5f:4a:b4:62:5f: c6:12:b1:2d:ae:5b:57:94:c1:47:df:9c:1a:00:2b: 66:76:6f:08:3a:81:28:6f:dd:18:fd:2e:3b:bc:b9: 3f:0d:58:bc:d6:40:18:29:7f:50:4b:b6:83:43:00: 0f:dd:2e:76:40:80:40:cc:dc:85:45:bb:b2:22:e2: 38:25:ef:26:60:09:a3:88:64:b4:73:cc:4b:e7:32: b3:91:22:81:77:b5:25:ca:d8:c0:f6:d5:60:f2:d6: 47:93:d7:a1:48:ed:bf:c0:54:b1:e3:1f:99:37:f7: a4:ae:2a:a4:6c:f6:21:f8:d9:5c:a0:ee:d7:05:0e: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:3D:2A:28:EE:AC:2C:C6:CC:23:25:54:24:18:7C:FA:9F:39:3E X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:96:5d:63:1d:ab:8f:2d:ef:b1:d8:1b:1b:04:54:85:fd:6f: 83:72:a9:0a:50:e5:f0:c9:36:97:cd:0e:63:1e:30:be:22:fd: 0c:71:ae:b9:47:6c:7c:07:83:97:e1:10:fe:4d:09:f3:d6:f5: 09:90:f1:09:68:37:03:a4:23:6d:cd:ab:60:fe:19:1e:fd:22: 7a:59:dc:47:19:55:d9:69:f8:ef:74:50:28:08:ce:4e:95:8b: 66:19:dc:3b:ce:41:89:f8:a9:48:fb:26:9d:b3:c0:c2:74:1d: 2b:79:15:89:c2:5a:25:d9:7a:9c:c3:22:54:85:2b:8d:ab:82: e4:41:93:46:9c:6e:17:20:cb:ec:49:01:58:22:e1:d6:1c:3d: 63:a0:69:31:ae:f2:82:d2:a0:50:f8:ce:16:d1:6d:6a:6f:36: 8f:c5:35:28:72:0c:95:f4:88:92:be:80:d4:1c:b2:ae:12:c5: 18:32:25:62:bf:96:92:0b:43:ce:ed:61:da:be:12:6a:13:44: f8:58:27:b3:38:23:7e:3f:14:33:69:9c:8f:0f:1c:e9:d7:0b: 71:bf:29:9c:55:5c:4d:04:6c:4d:fa:86:e9:13:58:de:da:97: d0:05:bd:bf:12:e3:a3:80:0f:4f:78:ad:75:2f:7f:e6:25:48: 3f:51:e5:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjQwNDI2MjIzMTIwWhcNMjQwNTAzMjIzMTIwWjAYMRYwFAYD VQQDEw02NjJjMmIzOC1iNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9flyb3EKR8MgpwPM1imAPjAIDmgPFhxsXF4Svu1rmJWhBAZSbLf97Rvf5pt gLy4bsntPdfKuwlTb/+lMGIDMR3nKEecMhEcJvdQhjfTidtx+CKEKcee5RZJFJWT 8gRBe/S2n87Tf5ZNhAzGm/5aPFKlakKV6A9o1I6x5KQR1IdsX0q0Yl/GErEtrltX lMFH35waACtmdm8IOoEob90Y/S47vLk/DVi81kAYKX9QS7aDQwAP3S52QIBAzNyF RbuyIuI4Je8mYAmjiGS0c8xL5zKzkSKBd7UlytjA9tVg8tZHk9ehSO2/wFSx4x+Z N/ekriqkbPYh+NlcoO7XBQ5LlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFywPSoo 7qwsxswjJVQkGHz6nzk+MB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0ll1jHauPLe+x2BsbBFSF/W+DcqkKUOXwyTaXzQ5jHjC+Iv0Mca65 R2x8B4OX4RD+TQnz1vUJkPEJaDcDpCNtzatg/hke/SJ6WdxHGVXZafjvdFAoCM5O lYtmGdw7zkGJ+KlI+yads8DCdB0reRWJwlol2XqcwyJUhSuNq4LkQZNGnG4XIMvs SQFYIuHWHD1joGkxrvKC0qBQ+M4W0W1qbzaPxTUocgyV9IiSvoDUHLKuEsUYMiVi v5aSC0PO7WHavhJqE0T4WCezOCN+PxQzaZyPDxzp1wtxvymcVVxNBGxN+obpE1je 2pfQBb2/EuOjgA9PeK11L3/mJUg/UeUr -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:11 2024 by rpki-client on console-ams.rpki-client.org