$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json) Hash identifier: /s4J/8hPqORIX5lHWsd6vyDtVbL6cuLqFAA9TunOsEs= Subject key identifier: E2:B3:32:39:EA:71:D0:00:60:43:55:B0:02:E4:0F:0F:DF:55:21:74 Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Certificate serial: 080E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft Manifest number: 0809 Signing time: Sat 18 May 2024 21:52:04 +0000 Manifest this update: Sat 18 May 2024 21:52:03 +0000 Manifest next update: Sat 25 May 2024 21:52:03 +0000 Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: EUq9U7sua5AaJnfKddFnapt6JNbuIA3IbLJyRuTgRFk=) 2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: 2AnHzJwonUE0Oio1jBjuypmq05cqTxtCSZ5dai/xpII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Validity Not Before: May 18 21:52:03 2024 GMT Not After : May 25 21:52:03 2024 GMT Subject: CN=66492303-bb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:df:97:83:06:ca:cd:0a:76:98:aa:c7:f2: f5:d9:42:cd:c4:a4:8d:ad:f8:5e:68:8b:d7:cc:0e: 15:d5:0f:2d:bf:ab:1d:e3:d5:6f:cc:97:b7:ff:4e: a1:2b:f9:71:5b:c5:f2:1c:bb:f8:a6:aa:b7:39:79: d0:dd:1d:b0:b6:47:f4:ef:43:3d:61:e2:45:e1:5a: a9:75:65:2d:cc:26:a2:1f:d2:68:2d:a7:56:3a:78: 04:bb:13:65:ad:3a:cc:03:3c:5f:9b:d0:1e:bc:62: a4:03:d2:a0:e3:92:bb:76:dc:39:88:b8:ea:74:28: e2:1a:ea:ce:d2:f1:55:a2:2f:e8:47:8b:e6:bb:4e: f7:8b:ef:01:ba:00:90:ff:fe:c2:88:eb:eb:7e:c3: cb:fd:5b:05:de:ac:73:20:8c:48:04:23:bd:0d:ec: ee:01:d2:d0:39:a4:a5:d7:7c:18:94:8f:38:56:f5: eb:d0:91:df:e2:df:f4:bc:51:6b:8c:fb:f0:8e:26: b0:47:79:33:b7:54:80:53:bd:6f:f7:f7:9a:26:dc: fd:79:93:0c:70:bf:24:4a:d0:2f:a2:94:58:78:80: cb:d1:ea:33:09:73:ce:61:a4:8a:50:c5:d0:90:ec: 96:03:42:31:30:4d:cc:8a:b6:6d:4f:4e:20:76:16: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B3:32:39:EA:71:D0:00:60:43:55:B0:02:E4:0F:0F:DF:55:21:74 X509v3 Authority Key Identifier: keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8c:c3:2f:1f:f4:8b:71:2d:2a:26:b7:7d:f2:19:31:e0:e0: d1:75:ab:b2:46:e4:6e:14:69:47:c2:e7:ea:76:0c:0c:2d:5f: 68:55:9e:07:4d:4a:10:e4:1b:4e:54:b8:7c:b3:4d:e7:a6:e9: 37:1a:c1:42:ea:ef:40:1e:a4:db:f6:f5:2c:13:17:36:67:e2: fc:54:34:16:f0:e6:e9:de:0d:20:f4:23:e0:7d:bd:4c:a6:23: 11:ba:dd:35:c4:dd:66:39:19:cb:e4:b2:3e:ed:0c:90:15:a9: ec:2c:10:4e:2b:f0:a8:57:d8:9d:7b:de:03:82:1c:4b:8f:0d: 24:a3:05:d2:62:b7:1e:e6:4c:25:b4:45:63:85:8e:f7:6d:75: 07:d0:d0:74:3d:c0:e8:5a:00:b6:80:ae:a2:ce:35:58:ca:e8: 81:60:7d:2f:01:e4:93:ed:74:6e:ed:0d:c1:6f:d9:17:7f:bf: d8:fc:f7:3b:bb:89:fb:a2:fd:08:40:50:cb:0d:d8:99:39:4d: df:ce:c8:04:8f:a2:34:5a:a7:5d:2e:91:84:df:01:be:7a:f5: e4:9a:f6:53:a0:5d:4b:d7:fe:c0:a3:44:8d:83:8b:3b:03:62: c0:c9:98:8d:74:11:0a:11:db:86:61:1e:13:93:f7:93:7d:6d: 34:aa:8e:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyQzYxMTAvBgNVBAUTKDFEQTAxQUZDMDg4OENBQTYxNzFFMEEwRTc0MUNGQzkw NEVEMkRGNkYwHhcNMjQwNTE4MjE1MjAzWhcNMjQwNTI1MjE1MjAzWjAYMRYwFAYD VQQDEw02NjQ5MjMwMy1iYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2ffl4MGys0Kdpiqx/L12ULNxKSNrfheaIvXzA4V1Q8tv6sd49VvzJe3/06h K/lxW8XyHLv4pqq3OXnQ3R2wtkf070M9YeJF4VqpdWUtzCaiH9JoLadWOngEuxNl rTrMAzxfm9AevGKkA9Kg45K7dtw5iLjqdCjiGurO0vFVoi/oR4vmu073i+8BugCQ //7CiOvrfsPL/VsF3qxzIIxIBCO9DezuAdLQOaSl13wYlI84VvXr0JHf4t/0vFFr jPvwjiawR3kzt1SAU71v9/eaJtz9eZMMcL8kStAvopRYeIDL0eozCXPOYaSKUMXQ kOyWA0IxME3MirZtT04gdhaIHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKzMjnq cdAAYENVsALkDw/fVSF0MB8GA1UdIwQYMBaAFB2gGvwIiMqmFx4KDnQc/JBO0t9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJDNi8xRURGRTQ5NkIx RDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlxWVhIZ29PZEJ6OGtFN1Mz MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhQWFfQWlJeXFZWEhnb09kQno4a0U3UzMyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJDNi8xRURGRTQ5NkIxRDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlx WVhIZ29PZEJ6OGtFN1MzMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAljMMvH/SLcS0qJrd98hkx4ODRdauyRuRuFGlHwufqdgwMLV9oVZ4H TUoQ5BtOVLh8s03npuk3GsFC6u9AHqTb9vUsExc2Z+L8VDQW8Obp3g0g9CPgfb1M piMRut01xN1mORnL5LI+7QyQFansLBBOK/CoV9ide94DghxLjw0kowXSYrce5kwl tEVjhY73bXUH0NB0PcDoWgC2gK6izjVYyuiBYH0vAeST7XRu7Q3Bb9kXf7/Y/Pc7 u4n7ov0IQFDLDdiZOU3fzsgEj6I0WqddLpGE3wG+evXkmvZToF1L1/7Ao0SNg4s7 A2LAyZiNdBEKEduGYR4Tk/eTfW00qo7u -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org