$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: YFXE0OSHd6u9ur6NlULXvQy7t/s7XOK6KIVtTYWOz/o= Subject key identifier: 77:E7:89:19:B2:EB:21:AF:3E:33:F2:E9:55:BE:33:69:6A:CF:2E:5D Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0B80 Signing time: Sat 18 May 2024 19:26:48 +0000 Manifest this update: Sat 18 May 2024 19:26:47 +0000 Manifest next update: Sat 25 May 2024 19:26:47 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: xAowofjYx4NxFVjkolL8iZhYkPm15PoX+HeXWlM0BjM=) 2: 418D45209C8211EC86AE3D68C4F9AE02.roa (hash: eSbQcGhw0ukTZJ0/wZICc6CuamExZ02/K90pQlli4GA=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: IiIc5xUTZ8oRwlcSaPJOjkHqtV0dE6cfiu/UrEZUXsY=) 4: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 227U+Y7IsViWC5xL5UQ7nk+j/lM05o1xqA9lAXBDVrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: May 18 19:26:47 2024 GMT Not After : May 25 19:26:47 2024 GMT Subject: CN=664900f7-6409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:85:fc:e3:78:9e:0d:60:1f:e1:50:ee:d4: ee:13:e7:15:3a:2b:2a:2e:f3:66:8a:13:0a:0a:62: de:89:dc:37:d8:bf:6e:54:09:77:40:f4:d7:09:0b: 02:2f:df:ff:81:0d:24:6f:51:c8:a1:04:30:a7:a5: 28:95:43:f0:b8:4a:0e:94:d7:d4:2f:e0:07:bc:bf: 61:46:57:31:30:90:a2:ce:1b:0b:e0:df:13:23:4b: 9a:d3:e8:8c:5d:22:e8:a9:50:7b:cd:32:98:7d:3b: 6b:fd:20:83:36:f7:00:b5:41:7e:6b:e5:b8:ce:a5: 2b:a0:33:15:cb:e9:a1:94:4c:07:5d:bb:ab:cf:48: 46:2d:b3:a1:ca:19:b6:8e:f8:8c:db:6c:12:d4:66: e7:b6:6a:ec:d9:f5:9e:fa:fd:6d:e2:b8:8c:15:83: 3f:b2:c4:98:69:e2:b5:78:74:cb:1f:1d:58:da:12: 92:fe:13:2b:4c:b3:e0:c9:a7:03:1a:c8:6e:4b:f1: d9:f3:55:c8:ae:cc:d6:cd:1a:ef:6c:0d:7a:c8:77: 40:09:c8:01:14:7a:07:42:f6:ed:3d:4e:fd:22:04: 8c:ee:e7:17:21:b6:05:83:20:1f:21:75:c9:ee:3a: aa:db:b4:0c:9a:ea:8e:69:f6:3e:43:4a:8d:91:ef: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E7:89:19:B2:EB:21:AF:3E:33:F2:E9:55:BE:33:69:6A:CF:2E:5D X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:6e:42:a1:f6:96:7c:0e:3a:3a:fa:86:d6:53:ce:63:59: 73:b8:22:ae:63:46:61:e7:69:44:29:12:0b:ee:ad:4c:6f:0d: 75:b8:1d:a7:47:73:2d:22:a1:c2:db:48:d9:7a:1d:4c:e3:31: 4e:33:9d:2e:d7:a8:81:ac:b0:d4:12:29:56:2f:36:92:ed:c8: c4:86:fb:d3:4b:ad:bb:2c:11:5c:8b:e6:b0:c3:21:e0:ee:92: 8e:92:53:06:35:8e:ec:29:dd:2a:ef:10:9b:dd:96:3f:df:92: 61:2f:f2:47:09:18:47:ca:bc:50:de:da:36:43:7c:5a:c1:4c: f7:22:fb:59:5c:d2:fb:76:09:ba:7f:eb:a8:3d:0c:24:01:8a: 8d:51:8e:f6:e0:66:d7:2d:d8:4f:ac:a9:40:40:af:c1:25:db: d0:a9:50:fc:1f:66:9c:b0:e2:8a:2b:06:98:ac:77:54:ab:82: dc:41:25:29:13:c3:0f:44:06:d1:1f:4f:ec:08:4f:db:4f:9c: 6c:9a:4c:bd:46:8c:2f:ea:96:1e:4d:50:ff:5c:2f:80:f5:d7: 0b:0a:8e:8c:40:65:c0:92:11:72:47:a2:7e:19:c3:ea:79:18: 0d:d8:8b:fb:83:27:c5:d5:4e:02:f2:24:e8:c3:45:67:3c:cd: a8:ec:14:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjQwNTE4MTkyNjQ3WhcNMjQwNTI1MTkyNjQ3WjAYMRYwFAYD VQQDEw02NjQ5MDBmNy02NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2eF/ON4ng1gH+FQ7tTuE+cVOisqLvNmihMKCmLeidw32L9uVAl3QPTXCQsC L9//gQ0kb1HIoQQwp6UolUPwuEoOlNfUL+AHvL9hRlcxMJCizhsL4N8TI0ua0+iM XSLoqVB7zTKYfTtr/SCDNvcAtUF+a+W4zqUroDMVy+mhlEwHXburz0hGLbOhyhm2 jviM22wS1Gbntmrs2fWe+v1t4riMFYM/ssSYaeK1eHTLHx1Y2hKS/hMrTLPgyacD GshuS/HZ81XIrszWzRrvbA16yHdACcgBFHoHQvbtPU79IgSM7ucXIbYFgyAfIXXJ 7jqq27QMmuqOafY+Q0qNke9QgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfniRmy 6yGvPjPy6VW+M2lqzy5dMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vm5CofaWfA46OvqG1lPOY1lzuCKuY0Zh52lEKRIL7q1Mbw11uB2n R3MtIqHC20jZeh1M4zFOM50u16iBrLDUEilWLzaS7cjEhvvTS627LBFci+awwyHg 7pKOklMGNY7sKd0q7xCb3ZY/35JhL/JHCRhHyrxQ3to2Q3xawUz3IvtZXNL7dgm6 f+uoPQwkAYqNUY724GbXLdhPrKlAQK/BJdvQqVD8H2acsOKKKwaYrHdUq4LcQSUp E8MPRAbRH0/sCE/bT5xsmky9Rowv6pYeTVD/XC+A9dcLCo6MQGXAkhFyR6J+GcPq eRgN2Iv7gyfF1U4C8iTow0VnPM2o7BR5 -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org