$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: LR4qQ2PdHZOTwILUVospjyRI/LTrxp4uyh//1QaAPaM= Subject key identifier: F8:52:FD:6A:FD:33:FB:FA:A9:84:58:C6:43:1E:AB:03:1B:D6:83:13 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: 16 Signing time: Fri 31 May 2024 04:17:53 +0000 Manifest this update: Fri 31 May 2024 04:17:53 +0000 Manifest next update: Fri 07 Jun 2024 04:17:53 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: uw3J/ZlxZfZXV/g5cA9YpES2m4sIFaGwOWpziu0WtRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: May 31 04:17:53 2024 GMT Not After : Jun 7 04:17:53 2024 GMT Subject: CN=66594f71-b930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:14:3c:89:fa:5f:0f:c5:42:2a:ed:5c:b9: 55:fb:25:b0:5d:9c:2c:c6:a3:6e:4d:96:a9:c6:00: 10:fa:c7:c7:e6:2b:3d:22:5f:3b:32:54:f2:e7:94: 89:6f:9b:ae:cd:b0:ea:3c:c3:a2:c4:ff:c4:8e:89: eb:fe:3f:2c:a9:d4:b0:5a:cb:ab:a9:71:83:84:02: 31:52:fe:d9:df:01:0f:28:08:02:dd:32:c1:b5:26: 6b:18:60:1b:a2:80:8e:68:cf:1e:a0:42:4f:65:77: 0f:30:21:5d:b9:59:05:d0:93:ac:ab:11:83:87:73: d4:15:97:8e:00:b1:25:d3:71:d2:02:7d:8f:9d:42: 3c:4a:58:28:1b:9f:ba:62:c1:ea:05:54:93:c5:0e: fb:99:15:b8:17:df:e9:25:25:40:45:7b:93:ce:e2: 72:ec:3f:8e:77:60:d0:e4:07:06:9d:44:35:78:87: 8e:41:8b:5e:dd:64:15:f5:1c:97:64:97:eb:f1:76: 41:05:cc:50:09:4b:ee:73:98:1b:b0:4a:d7:50:c1: c9:3f:84:2e:5e:79:fe:ed:de:e7:47:56:7d:68:e3: 3a:28:e0:1f:52:a4:e6:45:e0:08:3f:15:c3:f1:ea: c8:e8:ab:c0:1d:4a:5c:f4:35:df:7d:c0:95:bf:9a: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:52:FD:6A:FD:33:FB:FA:A9:84:58:C6:43:1E:AB:03:1B:D6:83:13 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d5:4c:1a:08:b4:65:ba:05:b9:ec:5a:32:6f:10:cd:99:05: e5:3b:51:19:3c:19:f4:9a:fc:3c:a3:51:f2:92:3f:93:09:fc: 96:e6:73:25:aa:d1:1a:90:19:23:5c:a0:2d:9e:8a:5d:6b:69: 17:4e:39:ab:96:43:ba:ce:61:73:b4:99:02:27:98:3a:be:31: f7:fb:7a:90:6b:76:b7:f8:4b:fb:ae:3f:7e:e9:a4:4b:14:62: 19:42:17:f2:9d:8b:1e:f3:c8:e8:0f:d7:9e:a8:d5:94:47:d1: a4:f9:98:80:11:43:37:9a:0e:83:99:42:a1:ba:75:c2:c7:9d: c2:0a:4d:74:9a:fa:c6:50:3b:db:0b:be:c9:4e:53:b1:35:17: 6c:6b:71:8e:28:8f:1c:9c:19:2b:ed:b6:a8:1e:e7:4b:59:9b: da:06:66:9d:8d:06:77:f4:fe:dd:d3:53:4d:07:9f:b9:70:84: 70:0b:30:4c:e3:32:80:b6:69:18:17:ac:4a:9e:1e:f2:a9:73: 82:00:7b:38:3c:8e:10:f2:d2:42:5f:c9:17:cb:74:c4:37:91: 3d:62:3f:0f:57:b7:99:63:43:ae:56:6d:64:70:c3:45:d7:c1: ef:b1:83:45:4a:ec:b8:4a:f4:bc:01:e7:4f:19:c7:ea:4a:fd: e0:f5:60:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzA0NjExMC8GA1UEBRMoMUVGRTgyOUYxNjAwNzhDMDZDOUExNTY5NjU0MjU3OTY4 NzQ1MEI3NDAeFw0yNDA1MzEwNDE3NTNaFw0yNDA2MDcwNDE3NTNaMBgxFjAUBgNV BAMTDTY2NTk0ZjcxLWI5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoTxQ8ifpfD8VCKu1cuVX7JbBdnCzGo25NlqnGABD6x8fmKz0iXzsyVPLnlIlv m67NsOo8w6LE/8SOiev+Pyyp1LBay6upcYOEAjFS/tnfAQ8oCALdMsG1JmsYYBui gI5ozx6gQk9ldw8wIV25WQXQk6yrEYOHc9QVl44AsSXTcdICfY+dQjxKWCgbn7pi weoFVJPFDvuZFbgX3+klJUBFe5PO4nLsP453YNDkBwadRDV4h45Bi17dZBX1HJdk l+vxdkEFzFAJS+5zmBuwStdQwck/hC5eef7t3udHVn1o4zoo4B9SpOZF4Ag/FcPx 6sjoq8AdSlz0Nd99wJW/mlWLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+FL9av0z +/qphFjGQx6rAxvWgxMwHwYDVR0jBBgwFoAUHv6CnxYAeMBsmhVpZUJXlodFC3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MDQ2L0EyMjAwM0QyRkRG QjExRUVBOTEwRDc4N0M0RjlBRTAyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHY2Q254WUFlTUJzbWhWcFpVSlhsb2RGQzNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MDQ2L0EyMjAwM0QyRkRGQjExRUVBOTEwRDc4N0M0RjlBRTAyL0h2NkNueFlBZU1C c21oVnBaVUpYbG9kRkMzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTVTBoItGW6BbnsWjJvEM2ZBeU7URk8GfSa/DyjUfKSP5MJ/JbmcyWq 0RqQGSNcoC2eil1raRdOOauWQ7rOYXO0mQInmDq+Mff7epBrdrf4S/uuP37ppEsU YhlCF/Kdix7zyOgP156o1ZRH0aT5mIARQzeaDoOZQqG6dcLHncIKTXSa+sZQO9sL vslOU7E1F2xrcY4ojxycGSvttqge50tZm9oGZp2NBnf0/t3TU00Hn7lwhHALMEzj MoC2aRgXrEqeHvKpc4IAezg8jhDy0kJfyRfLdMQ3kT1iPw9Xt5ljQ65WbWRww0XX we+xg0VK7LhK9LwB508Zx+pK/eD1YLI= -----END CERTIFICATE-----Generated at Fri May 31 04:54:01 2024 by rpki-client on console-fra.rpki-client.org