$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: m5/Vx3vaEw0D6KfC1GTqvyr2uNGgm474sCuEgxvIC5s= Subject key identifier: C1:05:68:B9:52:FF:F4:84:D8:AA:0B:84:64:FE:A3:62:69:C2:68:9B Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 2F Signing time: Sun 19 May 2024 08:26:54 +0000 Manifest this update: Sun 19 May 2024 08:26:53 +0000 Manifest next update: Sun 26 May 2024 08:26:53 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 3LXKEWijFNrXidENoQ3i5JUXt58+w/yZepPsoz+qZNo=) 2: 6D2E4280D4D711EE89EF955BC4F9AE02.roa (hash: 7a4zJTtUNaVChBwfNvXJUvEKrqEA15NjZfo+j3NZeYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: May 19 08:26:53 2024 GMT Not After : May 26 08:26:53 2024 GMT Subject: CN=6649b7ce-ec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:d1:c6:5a:89:ef:a6:50:3c:a1:e7:2b:f9: af:2d:96:84:66:48:57:26:73:bd:1f:f0:45:55:9f: 6e:be:3a:e0:69:94:0f:e3:a7:23:65:cc:a6:5a:f4: 98:c6:94:80:bd:35:51:b4:9c:a5:52:6b:64:5f:7c: 49:b7:d5:48:a5:95:e6:f9:37:60:0e:45:b4:a9:24: b0:ea:2b:3d:4b:4a:a7:62:67:8d:b2:19:6d:66:11: b7:24:44:ce:8d:87:97:60:57:8a:cb:65:1c:1a:67: 9e:e1:63:64:e0:d1:fe:52:24:dc:7e:93:be:dd:2e: 6e:3a:25:f1:8f:11:fa:7e:7a:9a:3f:6c:19:fe:e3: 13:ee:ed:83:56:fa:9a:11:12:f3:b8:33:8b:00:2f: 38:c9:c3:08:1f:03:19:79:66:81:d6:5a:79:05:f8: 63:b0:7c:32:5a:d3:28:42:ea:84:17:d4:3a:74:44: e6:51:95:3d:67:8a:a5:58:28:a8:30:b1:30:f9:b7: a0:ae:cc:40:dc:76:3d:6f:ae:7d:a0:62:07:39:65: 51:5c:c0:e1:8d:90:f0:9b:16:04:4a:0e:6d:4b:3a: 1b:a6:c7:2d:60:dd:19:b5:99:6e:de:65:a8:fb:89: 9b:07:f4:95:18:9c:bf:f6:02:cc:f6:4c:3e:c3:50: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:05:68:B9:52:FF:F4:84:D8:AA:0B:84:64:FE:A3:62:69:C2:68:9B X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:76:c5:ce:4f:d2:11:08:5b:ac:27:e3:d6:54:b6:69:23:9e: ea:75:d1:e5:fd:a0:cb:2d:fd:d4:cb:86:ba:89:15:12:f2:de: d9:c8:4f:09:e4:c0:e3:9e:02:a6:27:5e:ea:46:07:00:74:aa: f2:0a:13:af:cf:13:32:f5:17:f2:02:cf:f7:a4:ac:d1:28:f5: fc:2d:11:a4:92:01:83:7e:af:20:fe:6d:31:e7:cf:79:c2:e7: 96:49:43:51:4b:72:88:b7:94:51:69:03:88:37:df:2e:58:42: 00:97:d4:5d:3f:0e:2e:10:8a:ae:8f:ad:26:f2:d0:81:c7:7f: 81:98:dc:61:fc:00:78:39:f6:8f:96:e7:6a:c0:8b:8a:22:83: 18:81:b5:8a:bb:56:1b:d2:83:41:9b:9b:b8:f7:d9:84:1d:ae: 70:b0:9e:f2:66:67:c0:eb:8d:df:ef:51:5a:23:82:a8:83:90: e1:89:24:8c:0f:77:42:ba:bf:6f:41:87:f8:f2:99:8e:ac:3f: 0b:6b:16:cb:64:ca:c9:e2:31:09:a2:4d:45:cd:8c:df:aa:1e: b9:27:4b:fe:20:0b:65:a1:01:42:92:95:64:72:b3:8a:53:69: b1:46:42:a4:bc:a0:bd:c0:aa:8d:1e:64:ab:44:a3:87:dc:95: dc:6e:cf:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEQ3MjExMC8GA1UEBRMoMUVCOUFFOEJGNTk1OUZFOEJGMkVCODJCOTIzQjcxN0VG RjMxMDZDNTAeFw0yNDA1MTkwODI2NTNaFw0yNDA1MjYwODI2NTNaMBgxFjAUBgNV BAMTDTY2NDliN2NlLWVjOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBwNHGWonvplA8oecr+a8tloRmSFcmc70f8EVVn26+OuBplA/jpyNlzKZa9JjG lIC9NVG0nKVSa2RffEm31Uilleb5N2AORbSpJLDqKz1LSqdiZ42yGW1mEbckRM6N h5dgV4rLZRwaZ57hY2Tg0f5SJNx+k77dLm46JfGPEfp+epo/bBn+4xPu7YNW+poR EvO4M4sALzjJwwgfAxl5ZoHWWnkF+GOwfDJa0yhC6oQX1Dp0ROZRlT1niqVYKKgw sTD5t6CuzEDcdj1vrn2gYgc5ZVFcwOGNkPCbFgRKDm1LOhumxy1g3Rm1mW7eZaj7 iZsH9JUYnL/2Asz2TD7DUAzJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwQVouVL/ 9ITYqguEZP6jYmnCaJswHwYDVR0jBBgwFoAUHrmui/WVn+i/Lrgrkjtxfv8xBsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRDcyLzhCMjVBRDA0RDIy QjExRUVCQzE0NTM0M0M0RjlBRTAyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHJtdWlfV1ZuLWlfTHJncmtqdHhmdjh4QnNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw RDcyLzhCMjVBRDA0RDIyQjExRUVCQzE0NTM0M0M0RjlBRTAyL0hybXVpX1dWbi1p X0xyZ3JranR4ZnY4eEJzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALd2xc5P0hEIW6wn49ZUtmkjnup10eX9oMst/dTLhrqJFRLy3tnITwnk wOOeAqYnXupGBwB0qvIKE6/PEzL1F/ICz/ekrNEo9fwtEaSSAYN+ryD+bTHnz3nC 55ZJQ1FLcoi3lFFpA4g33y5YQgCX1F0/Di4Qiq6PrSby0IHHf4GY3GH8AHg59o+W 52rAi4oigxiBtYq7VhvSg0Gbm7j32YQdrnCwnvJmZ8Drjd/vUVojgqiDkOGJJIwP d0K6v29Bh/jymY6sPwtrFstkysniMQmiTUXNjN+qHrknS/4gC2WhAUKSlWRys4pT abFGQqS8oL3Aqo0eZKtEo4fcldxuz7s= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org