$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: cp5zSiU3fdeucw6mX7/hpe9xC0OEQJG2XJ2vB/JnE8k= Subject key identifier: E3:38:31:3C:EA:9A:FB:16:3D:0D:9B:DA:3A:62:FE:AA:81:94:5B:43 Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0689 Signing time: Sat 18 May 2024 23:21:54 +0000 Manifest this update: Sat 18 May 2024 23:21:54 +0000 Manifest next update: Sat 25 May 2024 23:21:54 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: Z7KNKHxPpxozEuWOafv1KVhFRVFI7yPaobb9pYiGoTY=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 0sPE2HMnGEt5pe4Qz8R1PIpfMDsMsd+LZ7qv+kK16e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: May 18 23:21:54 2024 GMT Not After : May 25 23:21:54 2024 GMT Subject: CN=66493812-fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:75:47:e3:4f:af:29:47:19:2c:91:55:c5: 6b:c3:93:c1:39:b9:c7:9c:57:3a:9f:72:b2:15:3e: 70:c2:04:9e:b3:b5:dc:a8:e1:20:03:a9:e7:5c:1d: aa:d5:68:cf:67:e0:10:c9:a8:11:e1:a2:b6:01:9f: f4:36:d6:8b:cc:e1:11:34:7c:85:1e:c0:95:17:0e: 75:95:ff:44:0b:66:db:f0:7c:60:2a:d4:22:fd:a4: ba:59:44:48:92:eb:62:8e:3c:49:24:a7:c1:69:cc: fb:3d:e0:65:a3:9a:25:f2:80:f6:43:13:3b:98:6e: 16:cf:8d:85:b8:7d:3b:0d:68:98:f7:99:34:3e:1a: 08:05:9c:f8:8f:ab:88:2d:e9:87:6c:62:2a:8f:67: 1b:01:40:ea:1e:69:2b:d8:8a:44:2b:23:bd:58:6c: c0:64:43:72:c0:ed:df:91:e8:df:4f:0e:8e:71:56: a7:4e:70:3c:5d:42:8c:23:64:4d:8f:f0:e1:57:1a: c7:58:89:9d:80:a9:39:97:85:31:ed:16:31:a6:07: 17:34:7a:09:d8:28:28:b4:0e:1f:c0:4d:9d:ad:b7: f4:7f:71:99:94:89:ea:d3:5f:22:9f:ec:85:ef:94: 75:00:58:00:b5:16:62:ac:0f:b2:87:92:64:b9:86: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:38:31:3C:EA:9A:FB:16:3D:0D:9B:DA:3A:62:FE:AA:81:94:5B:43 X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ae:92:d5:01:8f:6a:23:34:d3:92:6e:22:87:55:f4:fc:19: 89:d9:a0:83:f6:10:a4:ba:b5:ad:33:19:7c:83:a1:ba:58:59: 17:27:7d:6b:a7:22:c7:d9:5a:a0:65:83:1a:2e:26:5d:25:87: 72:67:04:da:a1:9e:5d:32:70:47:49:f9:11:92:73:a3:77:e3: 3f:60:39:1b:75:bd:1b:16:19:14:7c:df:09:ec:3c:b7:09:d8: b3:7d:80:d1:72:b8:0c:5b:fa:2b:7f:60:22:1c:73:d7:4d:ff: 23:eb:89:3c:5c:de:c3:db:aa:0c:ff:dd:3b:0d:48:6e:96:5c: 8e:04:43:82:f2:59:29:bc:b3:d4:ea:5a:6a:9a:ae:6e:44:da: 08:4a:ac:96:eb:75:67:fe:3e:1f:2f:0c:89:86:77:e8:56:25: c5:17:0b:1b:88:de:11:ba:62:4e:f4:40:6a:e7:06:64:29:4d: 2a:0f:00:6a:c1:96:90:c3:bc:cb:8b:52:06:da:f8:b7:7a:62: 39:e7:a5:60:56:04:ff:e3:7e:b1:93:1c:e6:d2:d3:38:90:dd: 37:5f:67:30:ce:26:7f:8d:f0:30:66:ae:a3:17:7e:c1:29:27: a1:0e:4d:80:ce:0f:aa:59:98:f0:5d:8d:d0:e8:ff:04:32:9c: 21:70:f2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjQwNTE4MjMyMTU0WhcNMjQwNTI1MjMyMTU0WjAYMRYwFAYD VQQDEw02NjQ5MzgxMi1mY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeV1R+NPrylHGSyRVcVrw5PBObnHnFc6n3KyFT5wwgSes7XcqOEgA6nnXB2q 1WjPZ+AQyagR4aK2AZ/0NtaLzOERNHyFHsCVFw51lf9EC2bb8HxgKtQi/aS6WURI kutijjxJJKfBacz7PeBlo5ol8oD2QxM7mG4Wz42FuH07DWiY95k0PhoIBZz4j6uI LemHbGIqj2cbAUDqHmkr2IpEKyO9WGzAZENywO3fkejfTw6OcVanTnA8XUKMI2RN j/DhVxrHWImdgKk5l4Ux7RYxpgcXNHoJ2CgotA4fwE2drbf0f3GZlInq018in+yF 75R1AFgAtRZirA+yh5JkuYZb6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM4MTzq mvsWPQ2b2jpi/qqBlFtDMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7rpLVAY9qIzTTkm4ih1X0/BmJ2aCD9hCkurWtMxl8g6G6WFkXJ31r pyLH2VqgZYMaLiZdJYdyZwTaoZ5dMnBHSfkRknOjd+M/YDkbdb0bFhkUfN8J7Dy3 CdizfYDRcrgMW/orf2AiHHPXTf8j64k8XN7D26oM/907DUhullyOBEOC8lkpvLPU 6lpqmq5uRNoISqyW63Vn/j4fLwyJhnfoViXFFwsbiN4RumJO9EBq5wZkKU0qDwBq wZaQw7zLi1IG2vi3emI556VgVgT/436xkxzm0tM4kN03X2cwziZ/jfAwZq6jF37B KSehDk2Azg+qWZjwXY3Q6P8EMpwhcPKd -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org