$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft File: mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft (raw, json) Hash identifier: fxb6xcNR9FgRCdKxv/7ZilxdZ0ts7d7JXoVX85xoFB0= Subject key identifier: 19:4D:BF:94:CD:F7:73:FD:F8:0D:05:7F:0F:83:82:7F:7E:2C:BD:FE Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF Certificate issuer: /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft Manifest number: 06A9 Signing time: Sat 04 May 2024 23:20:26 +0000 Manifest this update: Sat 04 May 2024 23:20:26 +0000 Manifest next update: Sat 11 May 2024 23:20:26 +0000 Files and hashes: 1: mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl (hash: aafVub66w90NkFmvsNEbImEooF7d2WWKIebcKZ7EySQ=) 2: 0F785ED8171F11EB9D7AD884C4F9AE02.roa (hash: XjGl6szoCEp2QY5fhdXG4icraLDWSjGHGsKQbx05UXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Validity Not Before: May 4 23:20:26 2024 GMT Not After : May 11 23:20:26 2024 GMT Subject: CN=6636c2ba-f2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:ba:a3:60:c4:4b:60:db:59:84:fe:f6:b4: a3:c0:57:33:10:2c:d2:05:64:f0:f9:b8:fd:89:dc: 33:40:bb:dc:97:70:70:61:76:dc:f8:06:80:63:af: de:29:5c:64:9f:15:b9:19:2d:f8:27:d5:34:14:4f: dd:a0:49:5d:d5:25:b3:0b:51:e9:a8:a8:59:1b:2c: 9b:41:0f:62:8d:4c:19:5e:c3:f5:43:88:bd:27:d4: 2f:ca:61:a9:1d:33:34:67:ce:95:34:65:b2:3c:40: 9c:fb:6b:5c:8b:b3:1b:d9:d4:53:df:a9:af:99:9d: 47:cd:18:10:39:8d:45:f4:7c:39:30:eb:5b:f2:3d: 68:b7:b2:f9:8a:28:fd:3b:51:bb:63:49:fc:15:5d: 88:75:9e:a0:ce:82:a2:74:3c:ff:1d:69:fb:2d:d2: 74:e4:56:ec:37:66:73:38:a0:0e:1f:ac:53:fd:5d: 11:2a:38:3a:e3:aa:cc:88:3d:1a:dd:f8:1e:db:dd: a1:27:2a:3c:95:fe:27:fe:15:06:8f:1c:fe:69:91: ec:36:27:08:57:20:f9:ad:85:92:bf:ba:a1:1a:f4: e6:82:30:f8:e4:fe:26:de:a6:a5:c3:d3:cf:3e:dd: af:51:3f:5d:84:59:0d:17:b0:1b:64:ce:d9:c3:d7: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4D:BF:94:CD:F7:73:FD:F8:0D:05:7F:0F:83:82:7F:7E:2C:BD:FE X509v3 Authority Key Identifier: keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5e:bf:4c:df:59:b9:0c:74:1d:9b:e4:e6:ef:d7:b1:11:40: 52:f3:fa:e1:c9:af:5f:92:b9:2f:b7:a7:fb:64:6c:ac:da:16: 69:ae:6d:21:db:3f:cf:14:b7:4c:5b:5d:61:45:70:94:d0:a8: c6:c6:9c:ec:ee:ce:5c:85:b0:b3:b8:48:23:29:69:e8:c6:d9: 20:f0:5f:2c:8e:cb:b8:38:ec:ee:eb:32:c8:01:65:9e:17:53: 52:71:49:03:de:6f:ab:aa:6e:4b:15:46:74:68:35:6d:3c:d0: fd:8e:a2:c5:86:be:7c:cb:a0:3e:4e:70:17:b2:5b:00:35:23: fd:13:e0:bd:02:ba:e5:51:c1:61:f0:f0:0c:2e:08:7b:ef:55: c7:c1:ec:6e:ef:03:c6:d2:5c:56:9f:f2:0f:56:24:eb:11:b2: 27:29:ed:f2:83:a0:4c:e6:44:e2:6f:29:22:75:d0:0d:98:0f: 82:17:fb:98:73:63:de:ac:75:36:eb:eb:d4:d5:78:30:6a:15: 34:ae:e7:ea:55:f0:1d:7f:75:68:af:d0:b1:1c:c7:0b:7a:d1: 76:8a:b9:f7:68:ba:21:f9:20:bd:76:71:60:fe:2b:88:ff:36: db:91:3c:46:b3:d8:e7:c6:63:88:b4:c5:56:3b:f9:f1:51:ea: f4:81:93:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMTIxMTAvBgNVBAUTKDk4NzRFNkQ2MUE2MEQ4ODQ0QzMwMUQ4MUYzMzc3Q0JG MzRGMEQ4QkYwHhcNMjQwNTA0MjMyMDI2WhcNMjQwNTExMjMyMDI2WjAYMRYwFAYD VQQDEw02NjM2YzJiYS1mMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWC6o2DES2DbWYT+9rSjwFczECzSBWTw+bj9idwzQLvcl3BwYXbc+AaAY6/e KVxknxW5GS34J9U0FE/doEld1SWzC1HpqKhZGyybQQ9ijUwZXsP1Q4i9J9QvymGp HTM0Z86VNGWyPECc+2tci7Mb2dRT36mvmZ1HzRgQOY1F9Hw5MOtb8j1ot7L5iij9 O1G7Y0n8FV2IdZ6gzoKidDz/HWn7LdJ05FbsN2ZzOKAOH6xT/V0RKjg646rMiD0a 3fge292hJyo8lf4n/hUGjxz+aZHsNicIVyD5rYWSv7qhGvTmgjD45P4m3qalw9PP Pt2vUT9dhFkNF7AbZM7Zw9cyWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlNv5TN 93P9+A0Ffw+Dgn9+LL3+MB8GA1UdIwQYMBaAFJh05tYaYNiETDAdgfM3fL808Ni/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIxMi8yNkQzNjI3ODE3 MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJUk1NQjJCOHpkOHZ6VHcy TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21IVG0xaHBnMklSTU1CMkI4emQ4dnpUdzJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIxMi8yNkQzNjI3ODE3MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJ Uk1NQjJCOHpkOHZ6VHcyTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVXr9M31m5DHQdm+Tm79exEUBS8/rhya9fkrkvt6f7ZGys2hZprm0h 2z/PFLdMW11hRXCU0KjGxpzs7s5chbCzuEgjKWnoxtkg8F8sjsu4OOzu6zLIAWWe F1NScUkD3m+rqm5LFUZ0aDVtPND9jqLFhr58y6A+TnAXslsANSP9E+C9ArrlUcFh 8PAMLgh771XHwexu7wPG0lxWn/IPViTrEbInKe3yg6BM5kTibykiddANmA+CF/uY c2PerHU26+vU1XgwahU0rufqVfAdf3Vor9CxHMcLetF2irn3aLoh+SC9dnFg/iuI /zbbkTxGs9jnxmOItMVWO/nxUer0gZNT -----END CERTIFICATE-----Generated at Sun May 5 00:12:26 2024 by rpki-client on console-fra.rpki-client.org