$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: VeG16dFH0eTkQpGSbtOJfE4sGqzzenx1vkhNU1rA/vI= Subject key identifier: 9D:1A:FA:C2:AB:D2:21:77:F7:D7:A6:E5:4D:D5:ED:1A:FA:BF:9F:CF Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 10 Signing time: Sun 19 May 2024 08:51:59 +0000 Manifest this update: Sun 19 May 2024 08:51:58 +0000 Manifest next update: Sun 26 May 2024 08:51:58 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: b83CHhvwQ5mKq5YtNJcSfX/LjcSHPYnKJdCYAYbeja0=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: Rt4eUZwlknRhFuvIOriKrMO4YYk+NUQ/WBmtf/YFdPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: May 19 08:51:58 2024 GMT Not After : May 26 08:51:58 2024 GMT Subject: CN=6649bdaf-ff53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:1c:36:95:71:19:6e:8d:8d:1d:31:5e:49: 02:75:fc:9b:de:93:e8:b9:e8:1b:35:dd:f0:59:e5: 07:7f:72:66:0c:65:81:bf:e3:93:4d:43:93:5b:38: fd:6f:58:89:14:a5:d1:e8:87:4b:f3:61:33:e4:c8: 4c:bb:a4:6b:09:50:d5:eb:4e:d2:6b:fa:e4:cf:9d: aa:fe:de:96:fd:ad:c5:30:30:6e:22:ee:d4:0f:4d: 62:5a:7f:ee:cc:d3:0a:c7:21:e5:ad:2c:0c:ec:06: 50:db:ab:0b:90:93:44:d4:fc:a0:c4:e8:03:0f:05: 7a:6c:6d:c0:6d:8e:08:ba:1d:a2:df:32:fb:93:35: b3:4f:85:8d:9b:ff:ed:b9:94:31:7e:7e:e5:f2:00: a4:3c:5d:f1:da:fa:54:d0:a1:31:13:c9:6d:fb:64: 54:ec:8a:54:89:e2:33:f5:09:cc:60:f8:3f:75:5f: 08:d8:c8:a0:f0:52:11:fd:01:69:62:f5:cc:13:10: 28:fd:cf:a3:b6:34:dc:87:f0:b2:c9:4c:54:24:08: fc:e1:bf:c8:c3:f5:e8:3f:9b:c5:8a:61:50:98:0a: ae:89:b8:d9:4d:23:45:3c:a4:e3:34:85:c6:6d:b5: 5c:8f:03:a1:92:0a:a3:65:2c:8d:26:ef:2e:f3:85: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:FA:C2:AB:D2:21:77:F7:D7:A6:E5:4D:D5:ED:1A:FA:BF:9F:CF X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:67:92:4e:85:5e:b8:9e:09:40:99:94:18:84:a4:f7:4f:77: 1a:c3:5c:eb:63:62:57:7a:87:e3:dd:01:7d:17:cb:d8:f7:21: ec:88:27:c6:67:53:76:5f:be:76:94:b3:b1:be:16:07:59:a8: d0:56:c7:da:2f:15:07:27:e1:e6:9f:29:d8:4a:29:a7:57:f2: 29:f9:1b:bb:79:88:64:e8:ca:9a:67:a3:c5:95:bd:b7:c5:d9: c0:1e:9c:3e:54:69:56:05:a1:7b:3d:98:65:c2:24:04:de:0a: 50:07:88:fb:ec:51:c0:67:55:b6:3a:55:17:20:00:5a:92:15: 8d:8e:1a:69:50:1d:8a:d1:60:6c:0d:43:c5:01:ea:c7:7e:10: bf:4d:df:5c:a9:ad:99:7e:3c:c8:64:47:26:da:1e:81:27:d0: 10:bf:04:ce:d5:84:fb:10:49:1d:a2:58:89:a4:d3:72:09:35: 6e:c2:81:c0:75:64:88:a0:2e:3d:0f:e2:4a:37:83:ce:eb:f1: b6:f1:05:e4:17:95:df:1c:f2:f0:56:e9:c6:2d:3c:df:03:70: 86:cb:0d:b0:0a:db:6b:b3:20:9a:f8:c9:15:5b:0f:1b:f7:f0: 1c:2d:0a:a9:69:05:8c:8e:35:d3:e4:53:27:c3:d4:4a:3a:b4: 57:91:87:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDQTExMC8GA1UEBRMoMUM3QjMwNTc2RUIxODUwOEVGMjc3OUM0RUY1QkI1NzI0 OTJERDI5OTAeFw0yNDA1MTkwODUxNThaFw0yNDA1MjYwODUxNThaMBgxFjAUBgNV BAMTDTY2NDliZGFmLWZmNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBEhw2lXEZbo2NHTFeSQJ1/Jvek+i56Bs13fBZ5Qd/cmYMZYG/45NNQ5NbOP1v WIkUpdHoh0vzYTPkyEy7pGsJUNXrTtJr+uTPnar+3pb9rcUwMG4i7tQPTWJaf+7M 0wrHIeWtLAzsBlDbqwuQk0TU/KDE6AMPBXpsbcBtjgi6HaLfMvuTNbNPhY2b/+25 lDF+fuXyAKQ8XfHa+lTQoTETyW37ZFTsilSJ4jP1Ccxg+D91XwjYyKDwUhH9AWli 9cwTECj9z6O2NNyH8LLJTFQkCPzhv8jD9eg/m8WKYVCYCq6JuNlNI0U8pOM0hcZt tVyPA6GSCqNlLI0m7y7zhcpZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnRr6wqvS IXf316blTdXtGvq/n88wHwYDVR0jBBgwFoAUHHswV26xhQjvJ3nE71u1ckkt0pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUNBL0E2OTE1QjM0MDI0 RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSEhzd1YyNnhoUWp2SjNuRTcxdTFja2t0MHBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NUNBL0E2OTE1QjM0MDI0RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFq dkozbkU3MXUxY2trdDBway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBnkk6FXrieCUCZlBiEpPdPdxrDXOtjYld6h+PdAX0Xy9j3IeyIJ8Zn U3ZfvnaUs7G+FgdZqNBWx9ovFQcn4eafKdhKKadX8in5G7t5iGToyppno8WVvbfF 2cAenD5UaVYFoXs9mGXCJATeClAHiPvsUcBnVbY6VRcgAFqSFY2OGmlQHYrRYGwN Q8UB6sd+EL9N31yprZl+PMhkRybaHoEn0BC/BM7VhPsQSR2iWImk03IJNW7CgcB1 ZIigLj0P4ko3g87r8bbxBeQXld8c8vBW6cYtPN8DcIbLDbAK22uzIJr4yRVbDxv3 8BwtCqlpBYyONdPkUyfD1Eo6tFeRh84= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org