$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: 2LLPuDzwj/zUo6JaiXOkf2BzxsJrpho6+TH3x0/R71M= Subject key identifier: B7:68:C2:18:67:6E:C2:26:71:8A:CA:13:D5:05:B9:A2:08:F0:A5:DC Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 1716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 1716 Signing time: Sat 18 May 2024 17:03:53 +0000 Manifest this update: Sat 18 May 2024 17:03:52 +0000 Manifest next update: Sat 25 May 2024 17:03:52 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: D6B6DMV79Gms5xbZYcwc3R/PIT7lgGEKUXjpS8+BpzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5910 (0x1716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: May 18 17:03:52 2024 GMT Not After : May 25 17:03:52 2024 GMT Subject: CN=6648df78-7e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:9f:5f:2a:c7:8e:50:19:aa:46:5d:46:a4: 2b:fe:12:e9:cd:3c:0c:e2:21:55:ed:41:b0:89:23: 0b:74:26:f3:ad:c8:0d:c9:b6:64:24:c7:b7:64:34: 62:20:83:59:60:80:72:9c:cf:a4:a8:99:dd:d1:86: 3a:a1:2c:1a:ec:8e:33:90:57:7e:4b:b6:7e:c1:bb: f9:b7:0b:2e:ed:95:cf:02:63:43:d3:8f:7b:62:ff: b6:a1:d3:81:66:78:00:76:72:24:84:cd:77:64:a3: 1b:df:81:43:64:12:00:b7:c7:19:7c:4e:08:50:0f: c7:7b:16:cc:92:58:1a:6c:c4:f9:fb:3b:b6:95:ce: cf:95:1e:61:64:3b:10:cd:0a:1b:20:08:bf:03:2f: 7e:f9:44:2b:1c:21:f5:f4:1c:09:5d:f7:a9:a4:e2: 18:47:f8:f1:c7:9b:c5:20:69:a1:b5:5f:d0:75:08: bf:30:f5:39:79:84:9f:b7:92:93:fb:d9:9e:f3:47: 1e:61:4f:d8:b8:27:be:3c:38:44:a2:24:a2:8c:67: 8c:ad:40:34:35:48:f7:f3:b8:f5:9d:9f:7f:79:66: d3:0d:c9:f0:af:bc:95:6f:5e:84:7f:32:dc:be:d9: 8a:92:2e:7d:35:86:be:5e:4b:ed:2b:05:e1:9b:be: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:C2:18:67:6E:C2:26:71:8A:CA:13:D5:05:B9:A2:08:F0:A5:DC X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:81:27:ce:2b:b1:93:e9:82:06:be:96:15:87:03:06:d6:3b: ab:53:ad:20:4d:f3:30:3c:97:78:7f:f6:86:e4:7d:61:9d:a0: fa:f3:29:4c:55:21:9d:8c:6c:4a:d2:c8:93:52:f5:a5:f0:71: cb:0c:94:e5:24:57:4e:e0:13:97:4b:8e:39:e9:b2:45:0e:4c: 41:6f:15:00:c6:b2:f0:d7:20:1d:59:76:1f:e3:d4:c7:a4:dd: 6b:4b:03:0a:26:69:3d:8d:f7:66:b7:90:a0:aa:08:c9:dc:16: 1b:59:61:90:10:2e:69:75:60:bf:17:e1:69:ab:ca:38:d1:87: b6:25:8a:31:c4:11:2c:50:f7:0d:c1:a9:49:b4:77:ce:86:7b: 37:6f:a1:c6:13:bb:b7:8b:a0:f9:27:99:0a:f0:f3:29:70:a0: f5:e6:52:c3:1d:b4:25:3c:cd:1d:5c:61:2f:e2:77:43:97:62: 30:fc:2c:04:d5:47:c8:4b:12:2b:0c:cd:ec:d3:f4:6d:28:ba: a6:f9:35:42:6c:50:96:1b:cc:90:c5:cd:21:4a:2d:b5:18:9c: 56:cb:20:a6:66:cd:e7:19:69:3a:7f:cd:14:f3:67:f2:50:25: 26:f7:4a:b7:b2:17:9d:28:97:8f:03:10:79:09:e9:a2:57:49: 45:8f:7c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjQwNTE4MTcwMzUyWhcNMjQwNTI1MTcwMzUyWjAYMRYwFAYD VQQDEw02NjQ4ZGY3OC03ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOCfXyrHjlAZqkZdRqQr/hLpzTwM4iFV7UGwiSMLdCbzrcgNybZkJMe3ZDRi IINZYIBynM+kqJnd0YY6oSwa7I4zkFd+S7Z+wbv5twsu7ZXPAmND0497Yv+2odOB ZngAdnIkhM13ZKMb34FDZBIAt8cZfE4IUA/HexbMklgabMT5+zu2lc7PlR5hZDsQ zQobIAi/Ay9++UQrHCH19BwJXfeppOIYR/jxx5vFIGmhtV/QdQi/MPU5eYSft5KT +9me80ceYU/YuCe+PDhEoiSijGeMrUA0NUj387j1nZ9/eWbTDcnwr7yVb16EfzLc vtmKki59NYa+XkvtKwXhm764SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdowhhn bsImcYrKE9UFuaII8KXcMB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWgSfOK7GT6YIGvpYVhwMG1jurU60gTfMwPJd4f/aG5H1hnaD68ylM VSGdjGxK0siTUvWl8HHLDJTlJFdO4BOXS4456bJFDkxBbxUAxrLw1yAdWXYf49TH pN1rSwMKJmk9jfdmt5CgqgjJ3BYbWWGQEC5pdWC/F+Fpq8o40Ye2JYoxxBEsUPcN walJtHfOhns3b6HGE7u3i6D5J5kK8PMpcKD15lLDHbQlPM0dXGEv4ndDl2Iw/CwE 1UfISxIrDM3s0/RtKLqm+TVCbFCWG8yQxc0hSi21GJxWyyCmZs3nGWk6f80U82fy UCUm90q3shedKJePAxB5CemiV0lFj3wZ -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org