$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft File: -P-HgJbLhByDdgq1VerbvXBSUwo.mft (raw, json) Hash identifier: G9dY/IifmAL6GQ7kdcDSyaz5ySsb/nQ+WvCDtKO9z8U= Subject key identifier: 8B:36:E8:35:B3:8B:5B:97:D9:3D:89:0B:6A:E9:11:26:32:7B:2C:5E Authority key identifier: F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A Certificate issuer: /CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft Manifest number: 0593 Signing time: Sat 18 May 2024 14:43:37 +0000 Manifest this update: Sat 18 May 2024 14:43:37 +0000 Manifest next update: Sat 25 May 2024 14:43:37 +0000 Files and hashes: 1: -P-HgJbLhByDdgq1VerbvXBSUwo.crl (hash: LChz3ohlmeATZChMMXCLMpr8nd/W9jl+iWkPigdoySQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.crl rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A Validity Not Before: May 18 14:43:37 2024 GMT Not After : May 25 14:43:37 2024 GMT Subject: CN=6648be99-b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:a3:40:82:a8:ce:a2:41:ce:d5:68:bf:0f: a3:11:e6:d8:3e:0a:53:01:61:35:8f:a9:b7:40:6a: fd:4b:63:16:9c:95:17:7f:cb:b7:f1:dc:ee:e2:9c: 39:71:cf:c4:47:d3:ff:cd:ae:8c:ee:53:cf:36:07: 1f:7a:26:80:f5:96:7b:9a:ae:56:9a:23:98:d5:f8: 86:d1:53:ac:f1:6c:c6:94:e9:78:4e:0d:24:9f:a1: 33:97:55:87:57:9d:32:72:5d:ba:59:ca:b1:1d:3f: c9:79:c2:ef:95:91:5f:36:08:4f:d7:69:d6:89:a4: eb:78:bc:40:33:cf:a2:cd:75:25:7a:aa:6d:b7:05: 8d:29:a7:e8:6c:e6:eb:a1:49:4d:63:d5:b5:69:9d: fb:69:37:87:53:cb:ee:24:07:9b:08:e1:42:bb:55: 54:88:57:51:4e:d7:9e:9b:f9:b3:d6:ca:11:14:60: 0e:75:5e:5c:ff:5b:38:85:5b:2c:62:5d:2c:68:7b: b0:75:d1:16:0e:13:38:80:44:73:33:24:8e:15:ef: cc:9a:a2:bf:3a:c7:f3:4e:b5:30:bc:ac:39:db:ed: f6:2b:48:5f:33:2b:13:69:1e:c9:70:19:c1:61:f5: 6c:c6:af:4c:cc:d7:1e:70:02:6b:6d:b2:13:2f:4d: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:E8:35:B3:8B:5B:97:D9:3D:89:0B:6A:E9:11:26:32:7B:2C:5E X509v3 Authority Key Identifier: keyid:F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:00:98:b1:fa:2c:d4:83:38:b9:5f:fd:35:ec:86:f9:b7:dc: 6a:af:10:19:30:fb:20:3d:74:b2:d0:18:7a:c6:f8:df:2c:e3: ec:03:de:f2:f9:0e:97:81:cc:6d:8a:b3:d9:e0:82:cf:bb:4c: 12:e3:44:ac:29:7e:81:ff:79:5b:66:b1:3a:4f:f8:35:39:72: fd:1b:b4:9e:30:fa:d6:bc:d6:a2:2e:74:35:ed:50:98:33:3f: 4e:45:97:79:fb:35:19:b9:b8:2d:4a:d8:f2:a4:96:13:f6:80: 4f:4f:90:9f:00:cf:e2:e9:53:50:a7:a8:c1:cb:f1:09:23:b3: e9:38:6b:96:c6:c8:4c:be:b9:00:2a:c5:4a:c7:cf:f6:15:42: e9:91:d2:10:86:81:77:13:7d:b8:96:34:a8:d0:3d:6c:33:92: 7d:62:aa:74:19:9e:87:38:0c:54:ed:0b:49:cb:ec:ca:8c:16: 44:7b:e9:19:34:59:25:41:ee:ab:e5:d5:35:00:a5:89:8c:47: d1:5b:ec:be:7e:df:f1:63:a4:7c:fa:bc:cc:b6:d3:26:dd:86: b7:4b:15:85:fb:67:91:ef:61:25:35:36:bb:36:ad:3f:e8:82: 0d:b2:0d:23:19:ac:c6:e7:24:e4:6e:29:91:b9:0f:f4:3f:a4: 89:1a:02:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RjYxMTAvBgNVBAUTKEY4RkY4NzgwOTZDQjg0MUM4Mzc2MEFCNTU1RUFEQkJE NzA1MjUzMEEwHhcNMjQwNTE4MTQ0MzM3WhcNMjQwNTI1MTQ0MzM3WjAYMRYwFAYD VQQDEw02NjQ4YmU5OS1iOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrqjQIKozqJBztVovw+jEebYPgpTAWE1j6m3QGr9S2MWnJUXf8u38dzu4pw5 cc/ER9P/za6M7lPPNgcfeiaA9ZZ7mq5WmiOY1fiG0VOs8WzGlOl4Tg0kn6Ezl1WH V50ycl26WcqxHT/JecLvlZFfNghP12nWiaTreLxAM8+izXUleqpttwWNKafobObr oUlNY9W1aZ37aTeHU8vuJAebCOFCu1VUiFdRTteem/mz1soRFGAOdV5c/1s4hVss Yl0saHuwddEWDhM4gERzMySOFe/MmqK/OsfzTrUwvKw52+32K0hfMysTaR7JcBnB YfVsxq9MzNcecAJrbbITL022QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIs26DWz i1uX2T2JC2rpESYyeyxeMB8GA1UdIwQYMBaAFPj/h4CWy4Qcg3YKtVXq271wUlMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhGNi9GRUYzNDQ2QzhE NzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhCeURkZ3ExVmVyYnZYQlNV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1QLUhnSmJMaEJ5RGRncTFWZXJidlhCU1V3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhGNi9GRUYzNDQ2QzhENzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhC eURkZ3ExVmVyYnZYQlNVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAJix+izUgzi5X/017Ib5t9xqrxAZMPsgPXSy0Bh6xvjfLOPsA97y +Q6XgcxtirPZ4ILPu0wS40SsKX6B/3lbZrE6T/g1OXL9G7SeMPrWvNaiLnQ17VCY Mz9ORZd5+zUZubgtStjypJYT9oBPT5CfAM/i6VNQp6jBy/EJI7PpOGuWxshMvrkA KsVKx8/2FULpkdIQhoF3E324ljSo0D1sM5J9Yqp0GZ6HOAxU7QtJy+zKjBZEe+kZ NFklQe6r5dU1AKWJjEfRW+y+ft/xY6R8+rzMttMm3Ya3SxWF+2eR72ElNTa7Nq0/ 6IINsg0jGazG5yTkbimRuQ/0P6SJGgLF -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org