$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: 1DaVgfV92hFQaIZTmeA++qmr0pI3gjIk5kwz/D+LM+Y= Subject key identifier: 9E:93:D3:63:C0:F6:83:01:37:19:FE:14:CE:6E:D1:84:A6:61:6F:52 Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 0FA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 0F9E Signing time: Sat 18 May 2024 18:05:08 +0000 Manifest this update: Sat 18 May 2024 18:05:07 +0000 Manifest next update: Sat 25 May 2024 18:05:07 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: 1M4wIMt42Lyi4a/wIioRffk4pbNVJWQQohJpUI+jL88=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: J13YXMbpb9DmPsFXcQePqhqj7Wu1xBAXD7neNPMUSJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4004 (0xfa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: May 18 18:05:07 2024 GMT Not After : May 25 18:05:07 2024 GMT Subject: CN=6648edd4-7533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:3f:5f:23:24:a7:db:3c:36:8f:d4:67:52: 2c:c6:41:8c:8b:0c:5e:02:7a:9c:97:18:ef:cd:ad: 3e:78:4d:ae:64:27:c5:f8:da:4e:55:39:8c:b1:e9: e3:e0:80:e3:8c:c2:bf:f2:b5:d7:4c:f7:30:5b:b6: 30:9a:48:e1:08:4c:02:b1:ed:02:ea:1b:4c:98:f5: cc:bb:85:1f:49:79:67:44:d6:67:67:4e:38:03:31: c2:57:aa:77:db:5a:ff:2f:1d:83:d4:73:17:9c:d4: 96:fe:a3:f5:4d:23:60:46:55:64:aa:a0:3f:8f:55: e9:79:bc:6c:77:46:03:1f:4c:2f:ad:fd:09:34:c0: 61:ac:e9:fe:e8:ad:4d:5e:70:a7:2b:af:76:9b:dc: e4:25:88:b0:31:99:38:d2:c9:d1:24:b9:1d:9f:10: e0:d4:d2:d7:9e:92:47:66:50:5b:f5:9a:2a:78:5b: da:c6:d2:37:34:fc:58:3c:a5:fa:42:e2:db:1f:10: 51:b7:7b:af:99:88:9b:9f:87:2d:39:91:ef:95:09: d1:42:d5:22:8f:a3:26:a2:6f:e4:a9:60:45:57:32: f8:4e:b7:c6:be:83:ab:f8:87:04:0d:e6:6c:42:69: e4:59:57:9d:4f:db:6d:da:79:32:4a:45:b7:29:86: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:D3:63:C0:F6:83:01:37:19:FE:14:CE:6E:D1:84:A6:61:6F:52 X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:52:ea:a6:a2:df:56:8f:81:16:0e:f0:b0:c5:21:0b:e3:19: 0e:b3:37:9c:6d:7d:95:47:98:7e:d4:38:6b:6b:6d:f0:0e:4d: 74:54:77:85:9d:d6:30:a6:c4:40:2c:a7:f8:1a:30:f0:57:01: e2:78:65:93:2e:05:94:10:d5:3f:9f:fd:b6:94:6d:e6:8f:c5: b2:e8:ea:6d:e4:dc:9f:bb:6c:d1:32:97:b9:36:5c:27:31:8f: ec:57:c2:02:30:40:a0:1c:a4:bf:5c:c5:f4:2e:61:67:2e:e5: 21:e5:ab:6d:04:61:97:3b:7e:97:ac:98:d9:73:81:99:12:80: 0c:6e:1d:54:0d:99:5f:8b:69:19:db:e7:5a:68:aa:46:a8:14: 0c:e0:0d:ea:8c:17:37:ba:82:4a:6e:e7:40:23:59:b4:33:b7: 76:b1:67:d1:69:f0:84:bb:9c:4f:25:53:b8:c3:d5:7c:b1:22: 1b:5a:e6:26:bc:81:be:8d:02:e3:4b:3a:02:f2:bd:ad:e4:0c: 9f:59:c6:64:43:4e:a4:3c:51:68:80:14:73:7a:3e:f5:00:5b: 1c:aa:e9:a8:ef:ad:d0:66:62:c2:d8:d9:17:78:04:c6:98:9e: 08:1c:bf:df:ed:19:30:d8:81:48:16:c6:a2:df:f3:d1:36:f5: 49:a2:c1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjQwNTE4MTgwNTA3WhcNMjQwNTI1MTgwNTA3WjAYMRYwFAYD VQQDEw02NjQ4ZWRkNC03NTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GI/XyMkp9s8No/UZ1IsxkGMiwxeAnqclxjvza0+eE2uZCfF+NpOVTmMsenj 4IDjjMK/8rXXTPcwW7YwmkjhCEwCse0C6htMmPXMu4UfSXlnRNZnZ044AzHCV6p3 21r/Lx2D1HMXnNSW/qP1TSNgRlVkqqA/j1Xpebxsd0YDH0wvrf0JNMBhrOn+6K1N XnCnK692m9zkJYiwMZk40snRJLkdnxDg1NLXnpJHZlBb9ZoqeFvaxtI3NPxYPKX6 QuLbHxBRt3uvmYibn4ctOZHvlQnRQtUij6Mmom/kqWBFVzL4TrfGvoOr+IcEDeZs QmnkWVedT9tt2nkySkW3KYbMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6T02PA 9oMBNxn+FM5u0YSmYW9SMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRUuqmot9Wj4EWDvCwxSEL4xkOszecbX2VR5h+1Dhra23wDk10VHeF ndYwpsRALKf4GjDwVwHieGWTLgWUENU/n/22lG3mj8Wy6Opt5Nyfu2zRMpe5Nlwn MY/sV8ICMECgHKS/XMX0LmFnLuUh5attBGGXO36XrJjZc4GZEoAMbh1UDZlfi2kZ 2+daaKpGqBQM4A3qjBc3uoJKbudAI1m0M7d2sWfRafCEu5xPJVO4w9V8sSIbWuYm vIG+jQLjSzoC8r2t5AyfWcZkQ06kPFFogBRzej71AFscqumo763QZmLC2NkXeATG mJ4IHL/f7Rkw2IFIFsai3/PRNvVJosF7 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org