$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: 2duGUazlUsNi+a9aVAcAXxecyt/zt949S9fdoP4Sfw8= Subject key identifier: 0C:45:62:99:C6:93:FE:F6:3D:84:47:1E:2D:6F:95:0F:C1:37:07:E9 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 020E Signing time: Sat 11 May 2024 04:40:01 +0000 Manifest this update: Sat 11 May 2024 04:40:00 +0000 Manifest next update: Sat 18 May 2024 04:40:00 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: iVa5526hehF2dqgOS4/wy0k9VwygkH3T8QgfP95fm7Y=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: F81C2716967311EDB9F09712C4F9AE02.roa (hash: V+izG9xcHd7MUw/Na1D5GprpOT0RnD+8CGEreWecHXQ=) 4: BF54F1F0FB4511EEA4E4B262C4F9AE02.roa (hash: 8+4hO1vRAxsQ5ndUzYEKWFKunXSQtQyhMovg7VqPY1A=) 5: F8AEE984967311EDB9F09712C4F9AE02.roa (hash: B8D1/mRZ+VkUXsrtPntrSbD4JKiqfo2WlP2hQKzSMMY=) 6: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) 7: 550A6608F0A311EC8FE9181CC4F9AE02.roa (hash: rHdTsIGP7FxEniLztKwexx/WpUaQWzysoUaN10SxFjk=) 8: 95F8FAF82D6611EDA13CDE35C4F9AE02.roa (hash: 1xMEbqV8UMPAnVUVhGClgG2SsRF0Zf0cjjbHzCwlpZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: May 11 04:40:00 2024 GMT Not After : May 18 04:40:00 2024 GMT Subject: CN=663ef6a0-4a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:a2:b4:24:a6:0f:02:d3:89:6f:28:21:8c: 98:fa:91:35:eb:28:7f:4e:a4:92:dd:ea:e5:1c:05: 28:da:75:c7:fa:b1:19:31:8e:3f:a0:9a:36:33:c4: f0:30:1a:bf:a6:9d:15:1c:39:10:0c:0b:a6:60:0d: 76:47:25:be:fe:f1:2d:3a:2f:bc:51:66:d8:ef:ae: 0a:e6:14:7f:c2:5a:1b:7a:9e:ec:30:ac:b1:1f:48: 60:d3:3f:10:d2:40:ee:96:1d:27:fc:1f:93:6a:d1: 8f:88:21:9e:7c:e4:70:16:df:79:70:f4:33:7f:ff: 80:ea:16:90:91:5e:32:61:5b:4a:8d:1c:63:e8:cf: 3e:d4:d8:9b:5a:d9:a0:3a:56:53:a4:1e:2f:a0:31: 5f:9b:59:56:d1:40:24:70:0d:de:33:33:a0:3e:3a: 5f:98:ba:07:12:da:72:58:4c:39:3f:55:19:89:3b: c4:39:58:92:55:06:11:1b:85:52:9e:dc:0c:fc:d6: 28:3f:aa:e3:42:18:46:a6:d2:d7:94:26:93:18:48: 3b:12:70:1f:be:c5:ff:0e:15:56:0f:bd:53:dc:20: 0b:9b:ea:26:df:a1:6a:82:ae:4c:49:12:74:eb:7d: 32:f8:5f:ac:72:8d:67:ce:60:5a:fd:96:8c:42:cd: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:45:62:99:C6:93:FE:F6:3D:84:47:1E:2D:6F:95:0F:C1:37:07:E9 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:62:31:d3:6b:06:60:09:6a:9c:97:e0:66:31:fd:5c:d2: 2f:46:50:87:17:d5:27:e6:72:45:db:72:50:12:3f:79:3b:4a: 12:5f:95:e0:fb:0c:b7:28:df:4b:23:fa:76:b4:2b:a1:01:c8: fa:c7:08:35:87:b0:3b:52:66:de:bb:5f:a2:8c:53:e7:58:57: 3b:cc:f8:e2:6b:c2:b0:1d:73:7e:3c:2e:92:40:f1:55:07:9e: eb:42:d1:78:b6:8b:9a:71:55:9c:ed:c3:d8:57:24:88:00:a0: 1f:ad:65:94:d1:e7:b6:c6:58:1e:23:0d:d9:6d:a5:7e:db:49: 93:4a:cb:49:d6:af:8f:f6:c6:14:f4:0c:94:3e:c1:81:55:91: 91:b4:dd:32:97:ed:47:23:9f:41:01:f8:23:73:70:32:64:e7: da:3b:48:bb:a5:fc:70:71:0a:e2:d7:43:05:85:86:0d:77:45: b2:c9:44:d8:fd:12:6f:b2:6a:19:68:21:4c:c8:7e:a7:26:3d: f0:f5:fe:00:02:69:c9:86:ef:f1:0c:8e:eb:b0:f8:be:16:be: ff:e4:13:a7:26:a7:3e:07:f7:3e:6b:3b:a2:0c:cb:8c:56:88: 75:78:32:b4:d4:3d:87:af:56:d8:a2:72:08:da:b6:4b:e2:24: 39:14:1c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjQwNTExMDQ0MDAwWhcNMjQwNTE4MDQ0MDAwWjAYMRYwFAYD VQQDEw02NjNlZjZhMC00YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoaitCSmDwLTiW8oIYyY+pE16yh/TqSS3erlHAUo2nXH+rEZMY4/oJo2M8Tw MBq/pp0VHDkQDAumYA12RyW+/vEtOi+8UWbY764K5hR/wlobep7sMKyxH0hg0z8Q 0kDulh0n/B+TatGPiCGefORwFt95cPQzf/+A6haQkV4yYVtKjRxj6M8+1NibWtmg OlZTpB4voDFfm1lW0UAkcA3eMzOgPjpfmLoHEtpyWEw5P1UZiTvEOViSVQYRG4VS ntwM/NYoP6rjQhhGptLXlCaTGEg7EnAfvsX/DhVWD71T3CALm+om36Fqgq5MSRJ0 630y+F+sco1nzmBa/ZaMQs0RPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxFYpnG k/72PYRHHi1vlQ/BNwfpMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHwGIx02sGYAlqnJfgZjH9XNIvRlCHF9Un5nJF23JQEj95O0oSX5Xg +wy3KN9LI/p2tCuhAcj6xwg1h7A7Umbeu1+ijFPnWFc7zPjia8KwHXN+PC6SQPFV B57rQtF4touacVWc7cPYVySIAKAfrWWU0ee2xlgeIw3ZbaV+20mTSstJ1q+P9sYU 9AyUPsGBVZGRtN0yl+1HI59BAfgjc3AyZOfaO0i7pfxwcQri10MFhYYNd0WyyUTY /RJvsmoZaCFMyH6nJj3w9f4AAmnJhu/xDI7rsPi+Fr7/5BOnJqc+B/c+azuiDMuM Voh1eDK01D2Hr1bYonII2rZL4iQ5FBz3 -----END CERTIFICATE-----Generated at Sat May 11 05:40:26 2024 by rpki-client on console-ams.rpki-client.org