$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: lktn8oMZCltU8GS7j28Q+FtCa3njQY9LNZEkqiDN9QU= Subject key identifier: E3:BB:53:A8:09:B1:B9:66:47:A7:8B:46:2B:54:B5:14:CF:33:6F:B4 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0275 Signing time: Sun 19 May 2024 03:43:34 +0000 Manifest this update: Sun 19 May 2024 03:43:33 +0000 Manifest next update: Sun 26 May 2024 03:43:33 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: +BfzN/FkdI26+8TR81aiTSv+yKUfSuQA99hF/7fXDDA=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: G4vvrktaZfOz1V5LhPJSIysH0tmha2kHpiAausnL61c=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: hsJxUzgaAGMB4Oe20hgaHYFKns15QSlrqUmxPzzyAb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: May 19 03:43:33 2024 GMT Not After : May 26 03:43:33 2024 GMT Subject: CN=66497566-f914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:10:95:93:ce:e8:c1:a3:ba:c4:4b:f3:ab: be:55:83:6d:b9:7e:f5:f6:31:a4:ea:7b:2c:5a:c6: 69:14:af:75:39:74:e9:39:0a:ef:85:e8:4e:b0:e0: 4a:39:fe:62:0d:b2:45:ec:cc:d9:b6:a3:4f:d2:da: dd:69:84:38:6e:24:d5:9f:81:c4:c3:3f:b3:80:1e: c8:aa:59:cb:11:d0:d2:49:e2:d8:02:4c:f5:1c:43: 14:5c:c3:5f:70:54:d7:97:c5:58:51:b4:b9:4e:ab: 5c:e5:4c:7c:d6:60:71:2c:09:31:d4:16:1e:dd:5a: 8f:2b:cf:fd:a4:83:f2:0e:d0:0f:3a:ed:a0:8b:37: ce:b5:2c:2d:66:4e:d7:c0:61:39:45:2e:f9:cd:2f: ff:a8:fb:37:c9:86:b7:59:fc:75:c4:dc:fd:23:84: fc:b1:43:3e:1d:40:3d:e9:66:bc:77:5f:74:a7:60: 1c:be:c2:46:fd:54:4c:a2:f7:ab:7d:d4:d3:45:31: 08:45:c7:a2:a5:ea:51:c8:e7:40:47:e6:c8:a9:03: 0c:2e:db:40:4c:8e:e2:8a:36:a5:3e:ab:18:ac:12: 12:b5:c8:a3:f7:76:36:dd:00:fc:32:90:ab:d4:93: 6f:4d:bb:77:13:31:d7:0c:b5:20:c6:32:5d:94:04: ff:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:53:A8:09:B1:B9:66:47:A7:8B:46:2B:54:B5:14:CF:33:6F:B4 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4e:8d:ae:45:ba:9d:df:44:e3:6e:35:43:89:b1:a0:6e:ed: f6:5e:a7:e9:f9:23:57:f1:fa:83:c4:3b:27:dd:b5:27:4c:96: 2b:16:40:4b:44:d8:23:7f:f8:d8:de:e6:6b:4b:e8:2f:13:57: ba:9c:19:c8:22:f5:d7:2d:65:b9:f6:24:e3:4b:c8:bb:ae:e4: 5b:9c:b9:a3:77:5e:8f:fb:a4:ff:f9:fc:9b:9f:00:10:89:b2: ce:dc:cb:59:7d:6e:72:db:2e:5e:a4:e2:f5:30:e4:9c:5f:df: a1:cd:7d:39:45:9d:ad:02:74:c0:62:b5:02:a8:ec:41:e9:b7: f3:7a:40:66:cb:f5:ec:94:70:43:0b:6e:54:ca:9a:3f:52:bb: 1a:6b:50:7a:fa:83:e5:c3:ae:23:24:b4:c3:8d:01:5d:01:a3: ec:5d:bb:c2:44:5d:5c:e9:02:3e:8f:90:24:ad:78:6d:91:31: 7b:0c:a9:2e:b6:d2:c7:cd:5d:63:28:01:a6:e9:fb:55:e0:3c: 66:44:92:d2:28:ed:9d:0a:1a:c6:84:a3:02:0c:ff:89:13:02: 31:42:90:fe:cb:f8:aa:ff:d0:47:a7:55:f5:51:5c:68:d6:9d: ee:68:14:a5:55:6a:d7:86:6a:a5:8f:45:f9:55:79:20:ff:87: 2e:f6:0b:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjQwNTE5MDM0MzMzWhcNMjQwNTI2MDM0MzMzWjAYMRYwFAYD VQQDEw02NjQ5NzU2Ni1mOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfQQlZPO6MGjusRL86u+VYNtuX719jGk6nssWsZpFK91OXTpOQrvhehOsOBK Of5iDbJF7MzZtqNP0trdaYQ4biTVn4HEwz+zgB7IqlnLEdDSSeLYAkz1HEMUXMNf cFTXl8VYUbS5Tqtc5Ux81mBxLAkx1BYe3VqPK8/9pIPyDtAPOu2gizfOtSwtZk7X wGE5RS75zS//qPs3yYa3Wfx1xNz9I4T8sUM+HUA96Wa8d190p2AcvsJG/VRMover fdTTRTEIRceipepRyOdAR+bIqQMMLttATI7iijalPqsYrBIStcij93Y23QD8MpCr 1JNvTbt3EzHXDLUgxjJdlAT/xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO7U6gJ sblmR6eLRitUtRTPM2+0MB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABTo2uRbqd30TjbjVDibGgbu32Xqfp+SNX8fqDxDsn3bUnTJYrFkBL RNgjf/jY3uZrS+gvE1e6nBnIIvXXLWW59iTjS8i7ruRbnLmjd16P+6T/+fybnwAQ ibLO3MtZfW5y2y5epOL1MOScX9+hzX05RZ2tAnTAYrUCqOxB6bfzekBmy/XslHBD C25Uypo/Ursaa1B6+oPlw64jJLTDjQFdAaPsXbvCRF1c6QI+j5AkrXhtkTF7DKku ttLHzV1jKAGm6ftV4DxmRJLSKO2dChrGhKMCDP+JEwIxQpD+y/iq/9BHp1X1UVxo 1p3uaBSlVWrXhmqlj0X5VXkg/4cu9gub -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org