$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.mft File: Hw-Zlpd6eu-EtU89rTuWRh7knN4.mft (raw, json) Hash identifier: Qea81JU5fBM5dDu/vp6HKcDvqKBPyNPQQ56DADGbt2o= Subject key identifier: 1F:7B:A8:A4:98:66:D8:80:AB:E4:1E:79:D9:D8:7D:A5:57:46:84:57 Authority key identifier: 1F:0F:99:96:97:7A:7A:EF:84:B5:4F:3D:AD:3B:96:46:1E:E4:9C:DE Certificate issuer: /CN=A91B46B5/serialNumber=1F0F9996977A7AEF84B54F3DAD3B96461EE49CDE Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hw-Zlpd6eu-EtU89rTuWRh7knN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.mft Manifest number: 06C4 Signing time: Sat 18 May 2024 23:32:51 +0000 Manifest this update: Sat 18 May 2024 23:32:50 +0000 Manifest next update: Sat 25 May 2024 23:32:50 +0000 Files and hashes: 1: Hw-Zlpd6eu-EtU89rTuWRh7knN4.crl (hash: V6G7OOJ+5pBdp5iZbh3PVgRxVedYys6NYd9GjIPNUbY=) 2: C965A302123C11EF90E60C34C4F9AE02.roa (hash: qwg6d5lDJdwTYFUp1iorIxpHWvCC7ZxguZNJjaV4a7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.crl rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hw-Zlpd6eu-EtU89rTuWRh7knN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46B5/serialNumber=1F0F9996977A7AEF84B54F3DAD3B96461EE49CDE Validity Not Before: May 18 23:32:50 2024 GMT Not After : May 25 23:32:50 2024 GMT Subject: CN=66493aa3-a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:94:54:36:5e:b1:84:e3:4c:d9:82:f7:ac: 46:65:da:a0:7a:1d:9c:27:10:24:99:ea:16:88:21: d1:f1:d9:77:49:73:8c:bc:68:74:71:b1:a4:50:3f: a3:96:d8:9d:85:27:66:b4:24:8a:9f:be:0c:a6:a6: 2d:f2:ec:da:ac:86:61:43:57:fd:aa:80:19:4a:b6: eb:de:d6:4b:a0:c2:95:e4:c1:90:32:bf:3b:f6:80: f5:d5:61:d9:40:74:1e:53:37:89:b0:e9:85:5f:7d: d6:44:bd:e4:3a:a6:39:65:e1:f0:29:7e:8b:34:d8: c9:dc:47:2c:20:b3:bf:cd:db:8b:0f:67:69:db:86: c8:d1:83:f5:3d:16:8b:df:db:fa:87:a5:7d:e2:e4: 2f:b6:4e:b9:6d:27:07:19:c3:b5:ba:aa:0b:cd:5c: 72:a0:90:72:ca:a2:93:a5:1c:05:18:74:5c:7d:8c: cd:cd:67:40:38:80:d9:7d:5a:68:53:37:00:dd:3c: 60:ba:1d:82:4b:7e:c8:2e:a1:f0:a3:b9:a7:68:7e: cf:23:46:20:03:19:7f:c7:62:1a:11:fc:a2:a2:d7: e6:10:17:fc:6c:34:d5:27:aa:b8:b9:3c:e2:67:cb: ef:4c:7d:f1:9c:22:b7:40:cf:2d:a8:4a:c7:13:51: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:A8:A4:98:66:D8:80:AB:E4:1E:79:D9:D8:7D:A5:57:46:84:57 X509v3 Authority Key Identifier: keyid:1F:0F:99:96:97:7A:7A:EF:84:B5:4F:3D:AD:3B:96:46:1E:E4:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hw-Zlpd6eu-EtU89rTuWRh7knN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3c:64:5f:0c:d7:f6:b2:da:c6:95:9d:5b:07:95:73:2a:39: 63:94:d9:4f:93:c9:65:46:d3:52:d6:bf:78:91:7f:c0:57:2d: a2:a1:04:c8:31:d2:ba:24:db:4b:84:4b:46:69:e7:1f:76:f9: 31:90:cb:18:44:a0:59:cf:96:d5:ae:76:8b:64:d8:c4:8c:ac: 83:57:42:96:1b:d3:fd:c0:14:c8:2e:99:6b:65:21:bb:e3:71: a1:1f:81:ac:07:91:be:0c:68:2b:58:8d:0d:cd:3c:1b:4c:b5: 3f:53:d8:6a:a9:06:a9:b4:a7:2c:cf:fe:06:f1:7b:17:e0:e5: 64:24:5a:08:52:9c:b8:12:83:23:aa:bc:ed:4a:8d:11:95:98: 1b:cc:c7:6d:b9:44:a9:a4:18:f4:5a:50:05:5c:12:5d:fb:85: 7d:61:80:54:44:21:c2:c7:5e:a9:e1:55:0e:29:b8:aa:e2:0b: 14:72:f1:ff:b9:70:76:1f:d9:e6:e5:80:48:81:24:73:48:8a: a9:83:06:46:5b:33:03:2a:af:19:06:48:65:46:90:58:b0:3d: 69:c8:66:78:b8:32:50:de:a9:d9:f0:8b:f0:82:63:87:28:3d: b9:7b:b2:f0:67:e7:35:66:21:c1:7c:dc:96:5a:f2:4c:ba:04: 75:12:b9:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ2QjUxMTAvBgNVBAUTKDFGMEY5OTk2OTc3QTdBRUY4NEI1NEYzREFEM0I5NjQ2 MUVFNDlDREUwHhcNMjQwNTE4MjMzMjUwWhcNMjQwNTI1MjMzMjUwWjAYMRYwFAYD VQQDEw02NjQ5M2FhMy1hODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9SUVDZesYTjTNmC96xGZdqgeh2cJxAkmeoWiCHR8dl3SXOMvGh0cbGkUD+j ltidhSdmtCSKn74MpqYt8uzarIZhQ1f9qoAZSrbr3tZLoMKV5MGQMr879oD11WHZ QHQeUzeJsOmFX33WRL3kOqY5ZeHwKX6LNNjJ3EcsILO/zduLD2dp24bI0YP1PRaL 39v6h6V94uQvtk65bScHGcO1uqoLzVxyoJByyqKTpRwFGHRcfYzNzWdAOIDZfVpo UzcA3Txguh2CS37ILqHwo7mnaH7PI0YgAxl/x2IaEfyiotfmEBf8bDTVJ6q4uTzi Z8vvTH3xnCK3QM8tqErHE1F5swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB97qKSY ZtiAq+QeednYfaVXRoRXMB8GA1UdIwQYMBaAFB8PmZaXenrvhLVPPa07lkYe5Jze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDZCNS9EOEE1MjVFQTE4 RDUxMUVCODFCNkU0NDFDNEY5QUUwMi9Idy1abHBkNmV1LUV0VTg5clR1V1JoN2tu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3LVpscGQ2ZXUtRXRVODlyVHVXUmg3a25ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDZCNS9EOEE1MjVFQTE4RDUxMUVCODFCNkU0NDFDNEY5QUUwMi9Idy1abHBkNmV1 LUV0VTg5clR1V1JoN2tuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgPGRfDNf2strGlZ1bB5VzKjljlNlPk8llRtNS1r94kX/AVy2ioQTI MdK6JNtLhEtGaecfdvkxkMsYRKBZz5bVrnaLZNjEjKyDV0KWG9P9wBTILplrZSG7 43GhH4GsB5G+DGgrWI0NzTwbTLU/U9hqqQaptKcsz/4G8XsX4OVkJFoIUpy4EoMj qrztSo0RlZgbzMdtuUSppBj0WlAFXBJd+4V9YYBURCHCx16p4VUOKbiq4gsUcvH/ uXB2H9nm5YBIgSRzSIqpgwZGWzMDKq8ZBkhlRpBYsD1pyGZ4uDJQ3qnZ8IvwgmOH KD25e7LwZ+c1ZiHBfNyWWvJMugR1ErkV -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org