$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json) Hash identifier: RYG48djIrvae0pvAxv6Aq2VMqQkQRhj6jM5VCPmMRxU= Subject key identifier: 18:A8:8C:79:80:9F:0E:93:DA:1A:98:AE:1A:0A:39:D6:F4:21:90:A3 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft Manifest number: 0871 Signing time: Sat 18 May 2024 21:38:58 +0000 Manifest this update: Sat 18 May 2024 21:38:58 +0000 Manifest next update: Sat 25 May 2024 21:38:58 +0000 Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: BsVJlQSewWgMYVbO7NIrB3lvQQbhLiAfD4LFjHRLmEQ=) 2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: dacTnDo6kXwS7X9nTb4Pneo4gL1gz4Jx9A34+LKy+gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: May 18 21:38:58 2024 GMT Not After : May 25 21:38:58 2024 GMT Subject: CN=66491ff2-08af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:18:ce:56:4e:3a:b7:06:11:ce:a5:cc:dd: 91:97:86:40:d8:df:9a:75:67:b2:1e:02:3d:9e:43: 9d:a8:65:9b:7b:a3:18:4f:d4:d5:65:18:1f:1e:f9: 4e:86:08:e9:c3:9a:37:d0:4c:37:01:fd:83:d4:e2: a4:a1:d3:c0:22:98:10:bb:1f:25:9f:9e:47:83:eb: 9b:7f:5c:f4:d8:25:25:8b:1f:47:2f:11:52:88:37: b7:ab:7a:58:de:82:95:d3:fe:3e:48:82:ed:5d:e7: cb:dc:96:9d:7e:ef:f3:03:09:8f:26:b8:4c:e2:bf: 68:7e:a0:3c:5e:8e:af:eb:ea:1f:80:c8:b4:aa:3d: 6b:93:14:cb:32:11:f8:6a:a6:23:58:c3:e6:f1:4a: f3:3c:0b:48:6b:f7:16:f3:5e:50:b1:52:87:15:72: 4d:2b:58:63:da:c5:db:2b:00:9b:98:38:f0:c8:89: 9b:d2:64:fe:f1:8c:d6:10:fe:59:36:5d:17:79:20: e6:30:9e:ef:0a:37:9b:a6:de:e9:21:df:3f:87:52: f4:6f:8e:cb:1f:84:62:92:a7:63:4c:59:89:58:25: 7b:4b:0b:77:50:72:88:01:ee:40:a6:3a:0f:fa:b8: 73:58:00:33:22:8c:a3:1c:ac:29:8e:51:c7:cd:7a: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A8:8C:79:80:9F:0E:93:DA:1A:98:AE:1A:0A:39:D6:F4:21:90:A3 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:54:e5:ce:03:9f:4d:99:b0:60:65:2f:33:b3:c8:fa:20: 82:5c:0d:9f:dc:22:5a:34:f2:af:26:03:25:7a:0d:70:9e:02: 8a:25:64:32:c5:d4:8a:0e:63:8a:f8:9a:82:4e:28:0e:0b:3c: b6:56:8f:7d:96:1c:33:60:03:ba:7e:8e:9c:d4:e5:e2:59:3b: 77:e6:ac:12:ee:b8:fd:d5:e6:64:27:8e:0d:8d:71:43:f5:96: d2:ef:87:ee:e7:a7:55:45:6b:74:1e:d3:15:5d:c3:96:41:d6: 8e:63:d1:6d:b2:04:97:32:f0:4f:0a:94:a2:46:15:dc:46:20: 6d:ed:bc:ce:61:1c:3f:fa:e0:44:0d:96:11:af:ae:5f:ab:18: f5:44:c4:cf:81:52:cb:8d:73:f4:49:34:d3:2e:96:dc:90:a5: 5d:02:f6:b1:29:c7:65:6b:64:eb:75:1a:f7:13:52:25:48:e1: ae:80:31:88:3e:51:e9:74:7d:2c:71:4b:75:96:95:6b:7f:b4: 22:1f:f0:03:f2:d3:ab:84:bb:3c:3e:2c:46:66:3d:1f:3e:d0: 5e:28:9a:43:f1:a4:15:09:7c:d0:85:0f:60:1d:ec:a2:46:e1: dd:47:e9:b5:70:0b:22:7a:d7:ff:09:7f:7e:f5:0f:39:79:89: 44:11:77:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjQwNTE4MjEzODU4WhcNMjQwNTI1MjEzODU4WjAYMRYwFAYD VQQDEw02NjQ5MWZmMi0wOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo4YzlZOOrcGEc6lzN2Rl4ZA2N+adWeyHgI9nkOdqGWbe6MYT9TVZRgfHvlO hgjpw5o30Ew3Af2D1OKkodPAIpgQux8ln55Hg+ubf1z02CUlix9HLxFSiDe3q3pY 3oKV0/4+SILtXefL3Jadfu/zAwmPJrhM4r9ofqA8Xo6v6+ofgMi0qj1rkxTLMhH4 aqYjWMPm8UrzPAtIa/cW815QsVKHFXJNK1hj2sXbKwCbmDjwyImb0mT+8YzWEP5Z Nl0XeSDmMJ7vCjebpt7pId8/h1L0b47LH4RikqdjTFmJWCV7Swt3UHKIAe5ApjoP +rhzWAAzIoyjHKwpjlHHzXohCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiojHmA nw6T2hqYrhoKOdb0IZCjMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM QzZKQjBVX2F3T3hMVGtyY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB63lTlzgOfTZmwYGUvM7PI+iCCXA2f3CJaNPKvJgMleg1wngKKJWQy xdSKDmOK+JqCTigOCzy2Vo99lhwzYAO6fo6c1OXiWTt35qwS7rj91eZkJ44NjXFD 9ZbS74fu56dVRWt0HtMVXcOWQdaOY9FtsgSXMvBPCpSiRhXcRiBt7bzOYRw/+uBE DZYRr65fqxj1RMTPgVLLjXP0STTTLpbckKVdAvaxKcdla2TrdRr3E1IlSOGugDGI PlHpdH0scUt1lpVrf7QiH/AD8tOrhLs8PixGZj0fPtBeKJpD8aQVCXzQhQ9gHeyi RuHdR+m1cAsietf/CX9+9Q85eYlEEXcV -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org