$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft File: Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json) Hash identifier: BP/l0FBGG8hkhGuSGsIALpkSlEr/OCE5wfdXCPsgPfQ= Subject key identifier: 59:77:17:32:D5:99:AF:DC:81:3C:8F:D5:E4:21:70:4F:18:09:8C:6A Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 Certificate issuer: /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft Manifest number: 09F3 Signing time: Sat 18 May 2024 20:39:19 +0000 Manifest this update: Sat 18 May 2024 20:39:18 +0000 Manifest next update: Sat 25 May 2024 20:39:18 +0000 Files and hashes: 1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: Q28KmjVQ+f5ayODuTJd87p46VCtDli5AeIqxnvzaYKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Validity Not Before: May 18 20:39:18 2024 GMT Not After : May 25 20:39:18 2024 GMT Subject: CN=664911f6-c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:57:82:21:41:bd:7b:01:8c:b4:49:cf:cb: 96:ac:13:ec:fa:f0:43:bc:6a:ad:cd:fc:eb:8d:3c: 07:d3:6e:c9:31:57:0b:11:82:69:92:9d:c9:0d:50: 06:b8:11:d5:ac:a1:a0:0d:8f:0b:7b:32:38:7f:82: 0a:48:cc:3f:be:89:a2:48:9a:59:fc:46:5d:c5:26: 60:74:33:11:06:4b:10:e9:96:c7:d7:97:3e:30:c0: 77:2e:15:85:fb:fb:42:4d:a1:24:36:3c:cd:72:a1: 4d:f3:a4:e1:1f:7f:9c:02:b3:ae:40:a2:db:d7:93: e9:9b:61:bb:aa:11:61:d1:df:1d:3c:98:7f:a9:f8: 42:06:0b:bd:a9:fa:4d:96:f9:e2:de:dc:5b:c4:91: 05:c0:fe:0f:67:5c:1a:a2:82:76:00:d6:52:c4:50: 56:d5:e8:30:40:65:00:2f:bc:4d:f3:2c:17:64:34: 67:ed:9c:67:e0:5d:b2:23:50:e2:00:aa:a5:fd:90: 99:06:4f:6b:c4:32:3d:2b:ee:d5:83:08:d1:81:f0: 43:c0:86:6b:6c:57:f5:3f:36:1d:e6:86:ff:b6:cf: 41:bd:7f:99:48:49:82:24:2c:76:5e:6a:bf:b3:0c: 2f:20:55:72:af:30:d3:18:ba:02:c2:73:7d:88:50: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:77:17:32:D5:99:AF:DC:81:3C:8F:D5:E4:21:70:4F:18:09:8C:6A X509v3 Authority Key Identifier: keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:77:15:53:f1:8e:e8:fe:af:6d:65:ff:7c:70:43:48:26:e7: 28:cb:91:e8:f7:00:e4:c8:d4:e4:f7:32:c0:b4:b2:9e:8a:c9: ad:35:d1:fa:e3:cc:bc:54:10:a9:aa:c0:a1:73:98:46:37:9e: f6:e9:f4:9a:75:11:0f:ba:e0:db:67:c6:1f:c0:47:d0:47:87: 70:27:40:f5:bb:7a:35:4c:c4:51:d7:8c:af:2e:f4:89:29:40: d0:56:54:17:ce:9c:c7:05:6f:37:3e:85:e4:c4:f3:1f:e6:ef: 12:b1:ee:b9:50:2c:ae:14:71:1a:a3:02:27:9f:34:18:6d:bc: 0f:d3:7d:9b:51:14:b1:df:59:a8:4c:90:35:83:6f:86:fe:b6: de:d2:ea:a5:23:93:5a:c3:0f:c1:20:5d:18:13:0a:66:38:fa: 88:fc:18:a5:1c:8e:8b:08:aa:54:b6:bc:29:9b:7e:81:3e:a4: c8:a6:d4:b4:b6:9b:ce:82:56:d7:ce:6c:c4:f7:28:80:7c:4f: 81:08:a0:e8:be:a0:89:72:74:4b:05:eb:fc:bc:fe:25:a6:d0: c8:5a:85:c8:40:31:59:5e:fe:d8:84:6f:26:5c:4c:c2:9c:c1: 76:27:06:4b:b1:b3:59:69:09:5d:f6:b1:e9:42:5b:89:eb:dc: fd:84:f8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxMUUxMTAvBgNVBAUTKDQ2MUMyRkUyNzdBMjhCQzg5N0YwRkNDQTRGN0M5MTA4 REQ5NzQ5MDMwHhcNMjQwNTE4MjAzOTE4WhcNMjQwNTI1MjAzOTE4WjAYMRYwFAYD VQQDEw02NjQ5MTFmNi1jM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu49XgiFBvXsBjLRJz8uWrBPs+vBDvGqtzfzrjTwH027JMVcLEYJpkp3JDVAG uBHVrKGgDY8LezI4f4IKSMw/vomiSJpZ/EZdxSZgdDMRBksQ6ZbH15c+MMB3LhWF +/tCTaEkNjzNcqFN86ThH3+cArOuQKLb15Ppm2G7qhFh0d8dPJh/qfhCBgu9qfpN lvni3txbxJEFwP4PZ1waooJ2ANZSxFBW1egwQGUAL7xN8ywXZDRn7Zxn4F2yI1Di AKql/ZCZBk9rxDI9K+7VgwjRgfBDwIZrbFf1PzYd5ob/ts9BvX+ZSEmCJCx2Xmq/ swwvIFVyrzDTGLoCwnN9iFAPGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl3FzLV ma/cgTyP1eQhcE8YCYxqMB8GA1UdIwQYMBaAFEYcL+J3oovIl/D8yk98kQjdl0kD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzExRS8wQjU4NEM3ODUx MzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4aVg4UHpLVDN5UkNOMlhT UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jod3Y0bmVpaThpWDhQektUM3lSQ04yWFNRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzExRS8wQjU4NEM3ODUxMzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4 aVg4UHpLVDN5UkNOMlhTUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArdxVT8Y7o/q9tZf98cENIJucoy5Ho9wDkyNTk9zLAtLKeismtNdH6 48y8VBCpqsChc5hGN5726fSadREPuuDbZ8YfwEfQR4dwJ0D1u3o1TMRR14yvLvSJ KUDQVlQXzpzHBW83PoXkxPMf5u8Sse65UCyuFHEaowInnzQYbbwP032bURSx31mo TJA1g2+G/rbe0uqlI5Naww/BIF0YEwpmOPqI/BilHI6LCKpUtrwpm36BPqTIptS0 tpvOglbXzmzE9yiAfE+BCKDovqCJcnRLBev8vP4lptDIWoXIQDFZXv7YhG8mXEzC nMF2JwZLsbNZaQld9rHpQluJ69z9hPjb -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org