$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: SPx6isdbCJpu/aIsV9DyEF7ypSqT22Nm3IFRlGh0nNc= Subject key identifier: 47:07:9E:86:BC:46:77:C2:A5:FB:AF:FA:06:7E:88:F8:B2:0B:24:75 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0537 Signing time: Sun 19 May 2024 00:56:56 +0000 Manifest this update: Sun 19 May 2024 00:56:55 +0000 Manifest next update: Sun 26 May 2024 00:56:55 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 6tUEeIGqlb2/ZmKEhydCqd8Lx10W8tmV8xfsZyAlaa4=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: czOX77QmnoYQ86gEkshKffr/lBAz+b6Ploh7ySLgMZI=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: nG8dhm1q3L++ES0WQRN6xojkz6KUmVSvlmSISAYAtqE=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: ncWmPesYGpPJogWkuFv/DK1hL+ud1swZfRktXgcskDg=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: DwrNBZp8WUAAA9IRg9207KjKNdeoDhrCJtnH7w3vl8A=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: v6vSOH0rqyYgsG7N36kdAx8zB/al41ZsKl5I1kZQlxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: May 19 00:56:55 2024 GMT Not After : May 26 00:56:55 2024 GMT Subject: CN=66494e57-4b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:2c:d3:0d:23:c9:d9:18:50:6d:63:bc:3c: ca:07:dd:d8:6c:7f:60:16:3b:de:50:99:63:49:f8: 73:78:ce:e3:be:7d:2c:bf:7e:85:0e:4b:38:ab:c1: 5b:34:8f:8f:2f:95:1e:37:9e:9b:11:bf:bc:3b:63: 1d:df:61:36:40:03:ed:b9:19:07:68:82:e6:e6:5b: 42:ea:3e:53:2b:ee:0c:f2:78:73:53:a5:3c:e4:74: 5f:61:5b:11:14:65:b1:25:a1:ac:c6:33:54:fc:2a: 49:70:03:1f:2f:3d:3f:e8:af:3f:ac:4b:b8:35:35: 60:c6:fe:ae:7f:6f:42:0c:83:7e:1d:df:81:c6:19: e0:9b:cf:bf:84:e4:e0:1d:c5:e8:d4:24:c4:9d:89: 7f:00:c0:23:1e:12:1a:8c:5e:22:f4:61:50:af:0e: 55:e5:7a:61:0d:c7:6e:f6:ab:a4:a0:dc:54:5d:db: 6e:75:e9:a7:cf:a9:ed:43:6f:33:e5:ec:9a:1f:15: 9d:d6:e7:61:7d:96:01:73:2b:bb:a0:8c:22:7f:9b: e3:dc:71:f8:48:e9:02:40:d5:1d:35:18:19:56:0b: c1:bb:59:65:82:e7:63:6b:5c:24:c6:ce:05:17:e5: f0:db:4a:fe:90:7a:1d:ca:34:0e:75:1b:03:1c:14: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:9E:86:BC:46:77:C2:A5:FB:AF:FA:06:7E:88:F8:B2:0B:24:75 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c4:14:a5:4e:cd:b7:39:1c:de:f8:0d:7c:19:6e:55:3a:90: f7:15:61:5c:4c:bc:e8:aa:fe:74:61:f4:57:e5:0a:8d:c9:a3: 76:7e:c9:7b:e2:c1:7d:83:e0:b1:46:58:59:e3:bb:76:25:fb: 28:63:00:4b:3b:0d:58:d3:90:ca:69:db:cb:f1:27:6c:38:37: 39:ae:81:c0:ab:ea:c2:99:69:c1:5d:5b:62:d7:0a:56:af:c7: df:33:94:1a:5e:df:d6:f1:71:17:90:cf:13:50:40:53:c5:44: 30:1b:e5:41:e2:6f:22:18:e7:a8:cb:90:7b:e9:68:e8:7b:0b: c1:f8:9b:63:ed:02:86:c9:c9:c4:8b:bf:ec:09:88:a4:49:c7: 29:f8:be:d4:26:8d:1d:15:b1:7f:2e:44:83:88:c3:fd:28:f4: d1:ec:1a:46:31:55:17:b9:9b:b9:84:85:04:15:ad:00:ae:7e: 5d:2a:7d:27:fd:64:2c:7e:56:e2:b1:fb:41:7c:42:3a:22:2f: a3:64:e3:9d:c9:04:29:0a:b1:38:45:51:52:4b:a9:3d:3b:57: c7:6d:3d:bb:e4:a0:5f:83:a6:a3:12:db:57:3f:53:8d:34:04: 6d:aa:57:e1:76:ca:41:d4:b9:87:62:4b:ca:1d:e8:77:3c:0e: 2a:31:52:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjQwNTE5MDA1NjU1WhcNMjQwNTI2MDA1NjU1WjAYMRYwFAYD VQQDEw02NjQ5NGU1Ny00YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCMs0w0jydkYUG1jvDzKB93YbH9gFjveUJljSfhzeM7jvn0sv36FDks4q8Fb NI+PL5UeN56bEb+8O2Md32E2QAPtuRkHaILm5ltC6j5TK+4M8nhzU6U85HRfYVsR FGWxJaGsxjNU/CpJcAMfLz0/6K8/rEu4NTVgxv6uf29CDIN+Hd+Bxhngm8+/hOTg HcXo1CTEnYl/AMAjHhIajF4i9GFQrw5V5XphDcdu9qukoNxUXdtudemnz6ntQ28z 5eyaHxWd1udhfZYBcyu7oIwif5vj3HH4SOkCQNUdNRgZVgvBu1llgudja1wkxs4F F+Xw20r+kHodyjQOdRsDHBSdNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcHnoa8 RnfCpfuv+gZ+iPiyCyR1MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxBSlTs23ORze+A18GW5VOpD3FWFcTLzoqv50YfRX5QqNyaN2fsl7 4sF9g+CxRlhZ47t2JfsoYwBLOw1Y05DKadvL8SdsODc5roHAq+rCmWnBXVti1wpW r8ffM5QaXt/W8XEXkM8TUEBTxUQwG+VB4m8iGOeoy5B76WjoewvB+Jtj7QKGycnE i7/sCYikSccp+L7UJo0dFbF/LkSDiMP9KPTR7BpGMVUXuZu5hIUEFa0Arn5dKn0n /WQsflbisftBfEI6Ii+jZOOdyQQpCrE4RVFSS6k9O1fHbT275KBfg6ajEttXP1ON NARtqlfhdspB1LmHYkvKHeh3PA4qMVLC -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org