$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft File: HUWbQ2csaQaJajtlEExG6zmBnb0.mft (raw, json) Hash identifier: 84LeRqdr3s/uYz0CigeD+Q44e0lhV05bO2zfUm5wLOY= Subject key identifier: 36:60:EA:44:E0:5C:C9:D8:B2:CA:C3:0A:7B:33:86:1A:94:95:D3:F9 Authority key identifier: 1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD Certificate issuer: /CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD Certificate serial: 1260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft Manifest number: 125F Signing time: Sat 18 May 2024 17:39:08 +0000 Manifest this update: Sat 18 May 2024 17:39:08 +0000 Manifest next update: Sat 25 May 2024 17:39:08 +0000 Files and hashes: 1: HUWbQ2csaQaJajtlEExG6zmBnb0.crl (hash: vigOLR4/+n+Jbh6Uf8i+w1GeTLE7yVgGSUfd5MmSaxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.crl rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4704 (0x1260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD Validity Not Before: May 18 17:39:08 2024 GMT Not After : May 25 17:39:08 2024 GMT Subject: CN=6648e7bc-250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:74:33:11:0c:7b:22:0b:17:04:1f:15:f2: 10:56:0d:b9:da:60:a9:81:8a:0f:26:4a:7a:fa:bf: 6e:6b:67:b6:de:86:41:a7:46:f0:4b:d2:ed:74:90: 39:2b:57:84:ad:f1:a9:fc:d2:18:5d:3b:67:9e:66: 70:9a:62:47:67:87:34:11:72:7e:5a:39:0a:d6:5d: 32:b8:65:4e:8a:ab:69:a6:a7:2f:5c:f8:38:75:5b: 6a:75:8e:1e:5c:87:dd:5a:fd:1d:a7:69:21:92:6c: f4:70:f6:30:64:63:57:e2:0e:80:d1:ea:8a:c1:2a: 75:70:57:36:2c:03:23:89:e3:2f:4c:4c:b6:5e:35: 23:6c:49:ab:ef:5a:ac:ae:26:b8:66:b8:1c:19:24: 71:a9:1d:ec:c3:1e:d0:8c:03:15:03:cc:e0:fa:38: 96:8d:0a:2a:ab:b1:10:3c:8f:5b:b1:cf:bb:cb:b3: af:2c:a3:df:e3:f0:1d:3f:d5:ef:a8:e1:a7:de:45: fa:2c:1b:d8:6b:5a:66:e4:f2:8e:f3:2e:1d:fc:c3: 44:91:08:06:d6:ca:59:af:88:92:50:e4:7e:cb:72: ee:45:a9:cc:9e:3f:f8:0d:fe:d6:12:33:6e:bb:7b: d3:20:6e:92:8f:fc:bc:63:44:54:54:a9:a2:3b:72: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:EA:44:E0:5C:C9:D8:B2:CA:C3:0A:7B:33:86:1A:94:95:D3:F9 X509v3 Authority Key Identifier: keyid:1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:ee:89:cd:2f:31:ce:17:22:48:ec:e6:f2:49:fb:60:d4:49: 85:a3:b8:d3:f0:8b:e7:33:68:ee:d7:4f:d7:e4:2b:a0:f0:cb: 4e:a0:98:ba:f5:78:d8:e4:dc:3f:25:23:d8:af:a4:11:31:f0: 68:f2:d9:74:11:81:86:d1:a4:d6:e3:94:2c:98:42:af:5c:57: 1f:19:ac:ad:3b:e3:9b:01:18:a4:a5:6d:b1:f2:9e:a0:04:9c: 9e:03:0c:f2:66:88:ee:47:34:19:07:0f:be:90:01:41:40:d1: 6b:ba:b7:9a:91:2e:61:c4:81:e4:a6:3e:0c:89:2b:7d:06:cc: e1:3d:83:1f:25:de:0f:af:18:60:bd:d5:8f:15:cf:ac:1d:02: bf:65:11:a4:f8:3a:04:a4:aa:08:c7:47:1f:44:db:8d:8d:b3: 0a:ef:83:75:b8:c7:3d:95:a8:0b:5c:d2:7a:51:48:53:52:ff: 58:e7:8c:69:fa:ab:25:35:b5:38:10:40:ed:9d:2e:07:ee:bc: f8:87:e7:0b:06:94:68:20:97:f4:9d:0e:d9:de:7c:27:0d:b6: 7a:5b:01:f0:b3:68:ba:34:2b:22:eb:45:1e:6e:a0:ba:33:fe: 46:b7:59:07:d9:54:57:9f:2f:87:01:f6:4e:06:e3:25:39:f9: 9a:b2:2f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEREYxMTAvBgNVBAUTKDFENDU5QjQzNjcyQzY5MDY4OTZBM0I2NTEwNEM0NkVC Mzk4MTlEQkQwHhcNMjQwNTE4MTczOTA4WhcNMjQwNTI1MTczOTA4WjAYMRYwFAYD VQQDEw02NjQ4ZTdiYy0yNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLR0MxEMeyILFwQfFfIQVg252mCpgYoPJkp6+r9ua2e23oZBp0bwS9LtdJA5 K1eErfGp/NIYXTtnnmZwmmJHZ4c0EXJ+WjkK1l0yuGVOiqtppqcvXPg4dVtqdY4e XIfdWv0dp2khkmz0cPYwZGNX4g6A0eqKwSp1cFc2LAMjieMvTEy2XjUjbEmr71qs ria4ZrgcGSRxqR3swx7QjAMVA8zg+jiWjQoqq7EQPI9bsc+7y7OvLKPf4/AdP9Xv qOGn3kX6LBvYa1pm5PKO8y4d/MNEkQgG1spZr4iSUOR+y3LuRanMnj/4Df7WEjNu u3vTIG6Sj/y8Y0RUVKmiO3L9RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZg6kTg XMnYssrDCnszhhqUldP5MB8GA1UdIwQYMBaAFB1Fm0NnLGkGiWo7ZRBMRus5gZ29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRERi9ERTE0NDZBOEFB MDcxMUU4QjI1QUZGMzBDNEY5QUUwMi9IVVdiUTJjc2FRYUphanRsRUV4RzZ6bUJu YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVV2JRMmNzYVFhSmFqdGxFRXhHNnptQm5iMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRERi9ERTE0NDZBOEFBMDcxMUU4QjI1QUZGMzBDNEY5QUUwMi9IVVdiUTJjc2FR YUphanRsRUV4RzZ6bUJuYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR7onNLzHOFyJI7ObySftg1EmFo7jT8IvnM2ju10/X5Cug8MtOoJi6 9XjY5Nw/JSPYr6QRMfBo8tl0EYGG0aTW45QsmEKvXFcfGaytO+ObARikpW2x8p6g BJyeAwzyZojuRzQZBw++kAFBQNFrureakS5hxIHkpj4MiSt9BszhPYMfJd4Prxhg vdWPFc+sHQK/ZRGk+DoEpKoIx0cfRNuNjbMK74N1uMc9lagLXNJ6UUhTUv9Y54xp +qslNbU4EEDtnS4H7rz4h+cLBpRoIJf0nQ7Z3nwnDbZ6WwHws2i6NCsi60UebqC6 M/5Gt1kH2VRXny+HAfZOBuMlOfmasi/C -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org