$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: mL0xxurCkgO0PBdyfYGAkXy958wFzNMlTgI5YHt7vkM= Subject key identifier: EA:1E:BB:CC:58:A0:80:58:B6:1F:95:B9:B1:43:53:78:45:29:26:9C Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0260 Signing time: Fri 31 May 2024 04:27:15 +0000 Manifest this update: Fri 31 May 2024 04:27:14 +0000 Manifest next update: Fri 07 Jun 2024 04:27:14 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: JblgJmGh8FIo7LKNOcgGmIyMY47aFvUUmoinxg0YHmA=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: bvhljrW7JyoPbpspTQPlbRcWJePp44bixxuUIkf1ppo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: May 31 04:27:14 2024 GMT Not After : Jun 7 04:27:14 2024 GMT Subject: CN=665951a3-e442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:0f:b1:b7:b6:2d:53:f2:aa:63:05:4b:ec: 04:58:00:f2:51:5c:20:98:83:71:ed:eb:a5:89:14: 5d:02:87:94:f1:68:2e:fe:c5:47:f2:14:1b:2d:1f: 54:bc:fa:28:fa:67:81:a9:a1:22:61:75:3e:11:3d: 1b:cd:cf:e1:63:4c:9c:99:b7:98:39:68:45:4f:35: b1:4d:03:35:a4:73:e3:f8:3a:2b:17:6b:3d:ca:ff: 70:79:76:34:f6:fd:c8:2f:d6:ac:4e:68:6a:e2:d6: 1d:fd:98:3c:c0:86:62:85:cb:4c:f8:37:21:4c:de: 53:db:09:de:e6:c4:fd:19:aa:87:77:ab:d1:bc:7f: b2:3b:90:b1:7c:08:01:44:6c:62:99:31:59:d6:65: 5b:98:ee:8f:ec:4d:10:d5:22:2a:0c:cf:ab:a1:6f: e4:72:ba:5a:30:8f:d9:f1:ce:af:5f:4a:8d:23:9c: 59:9a:a4:73:bb:3c:8c:d1:68:ab:5f:16:24:d1:b2: e6:53:26:25:ac:88:05:0e:9d:22:6f:c8:16:e3:f6: c9:2a:fb:ba:1d:58:48:8e:4c:86:37:c7:17:7d:c4: d1:a4:ca:f5:81:ae:96:53:1e:e1:93:78:e8:fe:70: ea:49:57:34:8d:f2:1d:c5:c5:9f:b4:9c:24:fd:28: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1E:BB:CC:58:A0:80:58:B6:1F:95:B9:B1:43:53:78:45:29:26:9C X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:77:a7:51:06:5d:81:b8:1b:39:32:28:d4:66:ba:4e:85:97: e8:0f:d2:3c:65:39:dd:14:ef:f1:15:74:ef:b7:6a:81:d2:4c: 68:d5:33:ea:70:9b:ef:bb:ea:d8:5b:61:3c:92:cb:9e:82:2a: ee:18:af:de:40:52:d2:78:72:84:94:8f:65:04:05:4f:ec:db: dd:95:83:b4:c5:cf:ab:4d:4c:c7:4d:a9:41:4e:6f:15:b4:68: df:9e:9a:38:f3:c6:1f:e3:4d:b2:b6:ed:14:69:e4:c0:53:41: e0:f5:23:e3:ca:37:fb:e0:0a:e5:6c:d7:a6:c3:db:a0:98:09: 15:78:9a:f2:2a:19:e5:b6:53:cb:ec:04:af:d1:b4:42:ac:5e: 96:2c:e8:b5:60:34:f7:04:56:d7:91:cb:3c:11:9d:e3:6c:c1: 83:bd:ca:25:43:f2:79:67:f2:c0:03:a2:e6:6d:12:30:00:b1: ce:4c:6a:61:df:8b:a2:ac:49:3b:87:11:f1:d3:b6:f8:16:18: 96:a0:d9:b2:1e:d1:0d:47:ce:9c:b4:31:a0:21:3c:5f:8c:a1: d4:6e:a9:1f:72:61:c6:a4:7d:97:2e:9b:40:c5:cd:fa:34:75: ac:39:10:e0:09:8f:29:0c:5f:98:de:a0:cf:ce:68:c4:b9:7b: d3:56:0f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjQwNTMxMDQyNzE0WhcNMjQwNjA3MDQyNzE0WjAYMRYwFAYD VQQDEw02NjU5NTFhMy1lNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWgPsbe2LVPyqmMFS+wEWADyUVwgmINx7euliRRdAoeU8Wgu/sVH8hQbLR9U vPoo+meBqaEiYXU+ET0bzc/hY0ycmbeYOWhFTzWxTQM1pHPj+DorF2s9yv9weXY0 9v3IL9asTmhq4tYd/Zg8wIZihctM+DchTN5T2wne5sT9GaqHd6vRvH+yO5CxfAgB RGximTFZ1mVbmO6P7E0Q1SIqDM+roW/kcrpaMI/Z8c6vX0qNI5xZmqRzuzyM0Wir XxYk0bLmUyYlrIgFDp0ib8gW4/bJKvu6HVhIjkyGN8cXfcTRpMr1ga6WUx7hk3jo /nDqSVc0jfIdxcWftJwk/ShVXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoeu8xY oIBYth+VubFDU3hFKSacMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzd6dRBl2BuBs5MijUZrpOhZfoD9I8ZTndFO/xFXTvt2qB0kxo1TPq cJvvu+rYW2E8ksuegiruGK/eQFLSeHKElI9lBAVP7NvdlYO0xc+rTUzHTalBTm8V tGjfnpo488Yf402ytu0UaeTAU0Hg9SPjyjf74ArlbNemw9ugmAkVeJryKhnltlPL 7ASv0bRCrF6WLOi1YDT3BFbXkcs8EZ3jbMGDvcolQ/J5Z/LAA6LmbRIwALHOTGph 34uirEk7hxHx07b4FhiWoNmyHtENR86ctDGgITxfjKHUbqkfcmHGpH2XLptAxc36 NHWsORDgCY8pDF+Y3qDPzmjEuXvTVg/B -----END CERTIFICATE-----Generated at Fri May 31 05:53:52 2024 by rpki-client on console-fra.rpki-client.org