$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: u60OudrAd37GSETmbfQ3JPVLLEKeLR8YDf5sIL+gvAQ= Subject key identifier: 76:65:61:E9:D8:69:7B:95:C5:BA:C0:92:5A:72:E3:C0:38:49:AE:A4 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 05FB Signing time: Sat 18 May 2024 23:54:46 +0000 Manifest this update: Sat 18 May 2024 23:54:45 +0000 Manifest next update: Sat 25 May 2024 23:54:45 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: 9qvVR3driyoNKQx6oklaC4u1yhNM4L0HefINeTQdnBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: May 18 23:54:45 2024 GMT Not After : May 25 23:54:45 2024 GMT Subject: CN=66493fc6-7028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:66:8b:02:4d:b5:fb:8b:56:fb:01:88:90: cd:79:e8:e3:95:91:a4:f8:78:13:48:76:71:ef:93: 1d:83:b8:24:db:01:30:47:01:5a:e6:c9:03:f4:34: 0b:91:64:e8:04:d2:31:18:4e:49:43:fb:80:a7:95: bc:b9:73:bf:65:36:d4:5f:38:a3:0f:9e:94:61:2a: 3b:11:c8:cc:bd:a2:4c:2c:58:e9:66:d4:99:37:46: 74:a9:b0:12:c3:97:63:d2:ed:b7:a6:08:c8:c1:3a: 4b:61:23:8b:60:72:f7:5f:60:42:b4:b1:fd:d5:e2: 11:0e:63:ba:36:aa:3e:ee:1d:7a:03:c1:18:3a:9b: 10:7d:b5:27:f3:a8:e8:fc:c7:56:7b:51:96:f6:a8: c9:e3:31:c4:1d:b2:62:be:ae:df:58:f7:1d:a5:76: 3f:40:bb:2d:12:5f:1c:96:d6:7c:25:37:a6:74:9e: e4:6a:ca:b2:c0:a8:d8:01:45:a3:38:b3:0e:c0:2e: c4:ed:03:ea:df:b7:af:cd:55:20:4f:16:c8:1c:17: ab:26:0e:1c:e1:c9:49:d0:84:a7:7d:a7:27:31:81: e7:93:65:6e:84:5b:26:2f:f2:00:57:d7:35:ba:ca: 30:b7:8b:77:15:b0:0a:97:76:93:0e:9d:69:ab:07: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:65:61:E9:D8:69:7B:95:C5:BA:C0:92:5A:72:E3:C0:38:49:AE:A4 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:90:69:f1:f1:eb:96:b9:62:d7:c2:05:c2:51:7d:60:1a:d3: 38:b8:17:59:b9:7b:21:35:b6:7d:79:76:43:3b:fd:b8:3d:9a: 05:1a:93:b9:be:c8:79:dc:43:5e:7e:a4:ee:83:36:ec:70:6f: 5f:20:5f:8a:d1:36:a2:21:17:84:5d:2c:1e:ca:a1:bf:9d:fb: 77:3e:f2:63:ab:24:e2:47:f7:f9:06:8a:51:a9:d6:a0:32:6b: 3a:bf:e8:b9:b0:0d:bd:a8:d8:7d:30:fa:1b:07:a3:a1:4d:93: 0a:c9:29:6e:68:93:36:d8:1a:23:c4:01:66:e6:95:b1:9d:c9: ec:63:17:e4:74:ec:06:11:86:b1:99:17:e1:6d:6e:05:94:b2: c4:e8:c9:22:80:14:1e:01:74:2f:99:11:34:fe:bd:d8:fa:7d: da:5b:5c:d3:bb:99:1b:ac:ce:f3:12:fa:e5:61:3a:24:47:e2: a4:0f:ad:02:70:d5:5c:0e:27:ef:9b:14:35:69:a0:1b:d6:3e: eb:ba:b8:3b:bd:86:c5:9e:3a:9a:e2:df:f5:74:3b:3c:9d:fc: 24:b4:9c:3a:71:b7:be:5e:ed:93:69:15:d8:3c:83:e1:bd:21: 06:61:9c:26:3e:85:64:b9:93:9e:34:87:55:27:16:98:27:f1: 57:a8:a6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjQwNTE4MjM1NDQ1WhcNMjQwNTI1MjM1NDQ1WjAYMRYwFAYD VQQDEw02NjQ5M2ZjNi03MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhxmiwJNtfuLVvsBiJDNeejjlZGk+HgTSHZx75Mdg7gk2wEwRwFa5skD9DQL kWToBNIxGE5JQ/uAp5W8uXO/ZTbUXzijD56UYSo7EcjMvaJMLFjpZtSZN0Z0qbAS w5dj0u23pgjIwTpLYSOLYHL3X2BCtLH91eIRDmO6Nqo+7h16A8EYOpsQfbUn86jo /MdWe1GW9qjJ4zHEHbJivq7fWPcdpXY/QLstEl8cltZ8JTemdJ7kasqywKjYAUWj OLMOwC7E7QPq37evzVUgTxbIHBerJg4c4clJ0ISnfacnMYHnk2VuhFsmL/IAV9c1 usowt4t3FbAKl3aTDp1pqwfIVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZlYenY aXuVxbrAklpy48A4Sa6kMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGkGnx8euWuWLXwgXCUX1gGtM4uBdZuXshNbZ9eXZDO/24PZoFGpO5 vsh53ENefqTugzbscG9fIF+K0TaiIReEXSweyqG/nft3PvJjqyTiR/f5BopRqdag Mms6v+i5sA29qNh9MPobB6OhTZMKySluaJM22BojxAFm5pWxncnsYxfkdOwGEYax mRfhbW4FlLLE6MkigBQeAXQvmRE0/r3Y+n3aW1zTu5kbrM7zEvrlYTokR+KkD60C cNVcDifvmxQ1aaAb1j7rurg7vYbFnjqa4t/1dDs8nfwktJw6cbe+Xu2TaRXYPIPh vSEGYZwmPoVkuZOeNIdVJxaYJ/FXqKYC -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org