$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: jW15Ntth15iWuee6FgTjMTOfYuXM9NhhDww5BS5QIQo= Subject key identifier: 87:3E:57:E8:D6:10:4E:A8:7B:34:01:B1:CD:B1:37:5C:DD:EC:F3:5F Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 10CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 10B8 Signing time: Sat 18 May 2024 17:55:23 +0000 Manifest this update: Sat 18 May 2024 17:55:22 +0000 Manifest next update: Sat 25 May 2024 17:55:22 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 7jX1vJ/+lMiXJbTMSjlkqXGTmYv9YyxR9D99NsYIC8k=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: C4mKsLu4av6lDwi9z2POYETSEDAk50weN2HJGZRxJyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4300 (0x10cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: May 18 17:55:22 2024 GMT Not After : May 25 17:55:22 2024 GMT Subject: CN=6648eb8b-4634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:7e:be:5f:d9:22:a9:45:f1:f4:58:0b:1d: 42:05:be:03:a2:f0:32:9c:42:23:52:4d:a3:12:93: 37:f6:24:e5:e2:73:2b:f5:3e:76:ab:85:57:b7:c2: 6b:d9:66:4e:37:db:ae:73:4d:6e:30:46:b0:9b:34: 5b:b2:ed:4f:d1:d9:f7:ef:65:05:22:6d:41:22:86: f1:69:1e:69:91:e8:ff:b0:30:28:4e:a9:0d:5f:dd: bd:8d:bc:57:b5:26:05:a1:d4:6f:28:78:5a:bc:da: 44:1a:2b:77:1d:84:7c:28:84:8a:01:0f:bc:71:2b: c7:ae:5b:f5:76:bd:91:13:b6:0a:ab:d6:07:2d:83: f4:2f:b1:28:60:82:1f:bc:b4:73:b4:7b:d9:65:c1: bc:ce:e2:75:39:aa:61:4c:53:17:25:0e:9e:eb:c7: a8:d1:3f:04:0f:a7:d0:61:77:62:d2:a9:e1:39:ae: e9:1f:75:d1:25:63:c5:4f:77:f9:56:d3:a7:64:54: 01:b0:3a:17:f3:67:9a:dc:37:44:3c:a5:27:d8:1e: 32:28:b0:5e:3a:eb:7e:95:47:9c:44:7e:03:14:84: ef:b4:e1:df:6b:23:c4:84:bb:31:5a:b2:bb:17:79: 6c:d0:f3:87:34:f3:f4:54:43:b4:94:55:eb:bd:e1: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:57:E8:D6:10:4E:A8:7B:34:01:B1:CD:B1:37:5C:DD:EC:F3:5F X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2f:90:a8:50:42:30:6d:9a:8f:d6:1b:fa:35:3a:dd:9a:0b: b5:c9:12:cf:6e:47:92:db:43:50:04:31:59:f6:31:62:b9:fd: a2:49:c8:9a:68:c9:91:0b:c5:75:a4:fd:4f:4a:ab:df:60:cf: 0b:2f:9b:f3:8c:1d:6d:27:67:49:90:e1:f1:42:23:0a:72:44: 05:78:29:f3:34:f6:b8:cf:d3:77:9e:b1:88:80:f5:04:70:83: 8f:a1:23:67:e5:e6:89:a5:b7:86:ae:46:81:0c:50:00:9d:a0: 44:5d:e8:e6:57:2f:88:e0:a1:54:e6:f8:7f:51:79:e1:c3:ba: c0:75:21:5d:9b:d1:20:72:59:b3:06:72:40:fa:41:ba:2a:11: 79:41:e7:32:f0:d0:ff:b5:00:c2:73:80:f9:9c:28:65:c5:04: ee:1f:c2:99:a7:43:55:3d:fb:34:ae:ee:23:8d:38:07:21:62: 2c:bf:ac:eb:d8:67:d6:ba:8f:50:37:d5:2c:62:2d:c6:fc:91: 74:a7:05:6f:c0:2d:08:3c:45:82:94:1f:bc:32:06:f0:25:10: 48:7c:d6:16:0a:f2:09:fc:d5:21:a7:75:df:1e:fb:91:66:44: 32:54:0b:2e:08:c5:09:78:e9:e6:ea:27:97:08:6b:9f:9b:5f: 83:7d:16:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjQwNTE4MTc1NTIyWhcNMjQwNTI1MTc1NTIyWjAYMRYwFAYD VQQDEw02NjQ4ZWI4Yi00NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCp+vl/ZIqlF8fRYCx1CBb4DovAynEIjUk2jEpM39iTl4nMr9T52q4VXt8Jr 2WZON9uuc01uMEawmzRbsu1P0dn372UFIm1BIobxaR5pkej/sDAoTqkNX929jbxX tSYFodRvKHhavNpEGit3HYR8KISKAQ+8cSvHrlv1dr2RE7YKq9YHLYP0L7EoYIIf vLRztHvZZcG8zuJ1OaphTFMXJQ6e68eo0T8ED6fQYXdi0qnhOa7pH3XRJWPFT3f5 VtOnZFQBsDoX82ea3DdEPKUn2B4yKLBeOut+lUecRH4DFITvtOHfayPEhLsxWrK7 F3ls0POHNPP0VEO0lFXrveFm0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIc+V+jW EE6oezQBsc2xN1zd7PNfMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2L5CoUEIwbZqP1hv6NTrdmgu1yRLPbkeS20NQBDFZ9jFiuf2iScia aMmRC8V1pP1PSqvfYM8LL5vzjB1tJ2dJkOHxQiMKckQFeCnzNPa4z9N3nrGIgPUE cIOPoSNn5eaJpbeGrkaBDFAAnaBEXejmVy+I4KFU5vh/UXnhw7rAdSFdm9Egclmz BnJA+kG6KhF5Qecy8ND/tQDCc4D5nChlxQTuH8KZp0NVPfs0ru4jjTgHIWIsv6zr 2GfWuo9QN9UsYi3G/JF0pwVvwC0IPEWClB+8MgbwJRBIfNYWCvIJ/NUhp3XfHvuR ZkQyVAsuCMUJeOnm6ieXCGufm1+DfRbo -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org