$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json) Hash identifier: rGH3WSF7eqIStY2zeRMxv6AHq/jBc/GESx+cRtZesHM= Subject key identifier: D9:B5:FD:E9:C5:13:70:62:08:1E:5D:C8:7B:B3:16:D4:A4:46:0D:79 Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft Manifest number: 0600 Signing time: Sat 18 May 2024 23:58:18 +0000 Manifest this update: Sat 18 May 2024 23:58:18 +0000 Manifest next update: Sat 25 May 2024 23:58:17 +0000 Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: o4ahC7pt7VrXehgLdu0w2hrPSMt9gOn4VwnbmpVeVAs=) 2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: DKHDOAj7+AXAvfjvZlh+voUSgeSh4L2VBg+pbuzzE70=) 3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: HPFeGwKq86ZcwbWrB7sqcvfz9Xbe89k8mMFhGyrTd2o=) 4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: OSo59yjptase6UYWjPMVEsoK3BFfSOe7jd8A1zwV3Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Validity Not Before: May 18 23:58:18 2024 GMT Not After : May 25 23:58:17 2024 GMT Subject: CN=6649409a-4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:ab:c8:0b:93:64:96:bd:f3:93:92:fb:94: e9:11:d2:28:4a:d0:fc:ef:82:36:0a:43:fe:4a:99: e6:51:c9:cc:09:d8:75:df:b6:67:ac:21:04:97:16: f1:1a:67:26:cd:1d:cd:c1:ab:b9:fd:51:f2:e2:ce: 73:3e:b0:5d:34:dc:55:6b:4c:03:e3:75:12:70:d8: c1:6d:1a:0d:48:45:04:d4:ee:01:99:14:27:c3:d5: 51:14:20:24:19:48:1e:6f:74:ab:e5:43:6a:4c:0a: d5:ff:51:18:c4:77:27:05:d7:4d:b1:61:90:ef:e9: ed:c5:3a:76:90:53:47:dd:f0:02:85:87:d4:ef:1f: 9b:92:eb:13:6f:6e:0a:2e:05:ca:93:67:0f:14:6f: 95:4a:26:9c:17:1e:c8:ab:56:8f:86:40:56:df:64: 1c:fb:ce:eb:6a:01:f8:18:fe:ca:0b:e8:a7:30:ef: 74:a5:6c:75:73:ba:9d:b5:e8:65:96:02:43:0a:4e: 74:73:b2:38:7e:b6:21:8f:6a:34:62:bd:f4:f2:c7: f3:1a:97:1e:d0:11:6a:c7:72:b7:d6:47:18:51:91: f6:15:30:f1:84:e6:2f:1a:65:fe:6c:fa:52:f4:8e: 91:a9:4e:e6:b5:ec:7f:81:5d:48:4b:a8:0c:af:ad: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:FD:E9:C5:13:70:62:08:1E:5D:C8:7B:B3:16:D4:A4:46:0D:79 X509v3 Authority Key Identifier: keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:3b:1b:61:b3:1c:6e:50:bf:c8:2f:f1:81:4a:84:3b:a6:4c: fa:a9:bf:a6:3c:29:4f:49:ce:4b:33:bf:a7:03:36:69:f8:9e: eb:03:af:63:41:99:52:32:58:5f:e9:23:43:cc:e3:8d:d3:1f: 49:99:89:5e:07:ec:8c:97:84:8d:bd:c5:e3:b9:c4:25:4c:01: b8:7d:14:c5:c7:7e:e1:9e:59:65:e0:42:3d:a4:e0:10:4f:11: 16:46:2e:0e:ac:d1:c4:c5:9d:89:41:27:f0:1a:15:6b:e8:04: 09:eb:c0:0c:9e:c1:95:48:34:eb:ff:aa:96:b7:d7:c3:4a:f0: 45:25:73:06:62:f6:fe:17:c5:54:7f:a6:29:16:aa:03:75:2f: 1f:62:4c:2b:65:dd:60:10:79:ef:3f:34:ab:b7:b5:a4:3f:04: c1:70:95:b6:8e:a1:7a:0c:75:d4:07:c0:ec:59:9b:6c:39:40: 4b:df:dd:ba:5d:73:97:4a:d7:9c:0f:93:d8:b8:14:2c:b9:b7: aa:a2:cd:aa:f7:e0:c2:17:92:07:73:38:66:f4:5f:e5:e7:9e: cd:ef:b9:84:cf:5c:3c:63:63:78:e5:54:eb:e1:ee:0b:43:17: 76:30:00:7c:2a:58:24:af:5e:6f:76:37:b5:f0:01:1c:e0:39: 34:2c:38:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw N0I1NEM4NkMwHhcNMjQwNTE4MjM1ODE4WhcNMjQwNTI1MjM1ODE3WjAYMRYwFAYD VQQDEw02NjQ5NDA5YS00ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvziryAuTZJa985OS+5TpEdIoStD874I2CkP+SpnmUcnMCdh137ZnrCEElxbx GmcmzR3Nwau5/VHy4s5zPrBdNNxVa0wD43UScNjBbRoNSEUE1O4BmRQnw9VRFCAk GUgeb3Sr5UNqTArV/1EYxHcnBddNsWGQ7+ntxTp2kFNH3fAChYfU7x+bkusTb24K LgXKk2cPFG+VSiacFx7Iq1aPhkBW32Qc+87ragH4GP7KC+inMO90pWx1c7qdtehl lgJDCk50c7I4frYhj2o0Yr308sfzGpce0BFqx3K31kcYUZH2FTDxhOYvGmX+bPpS 9I6RqU7mtex/gV1IS6gMr61BFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm1/enF E3BiCB5dyHuzFtSkRg15MB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Qzk3OS9FRDYzM0U4NjVGRDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJ dUU5cGdZOFdvZmNIdFV5R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeOxthsxxuUL/IL/GBSoQ7pkz6qb+mPClPSc5LM7+nAzZp+J7rA69j QZlSMlhf6SNDzOON0x9JmYleB+yMl4SNvcXjucQlTAG4fRTFx37hnlll4EI9pOAQ TxEWRi4OrNHExZ2JQSfwGhVr6AQJ68AMnsGVSDTr/6qWt9fDSvBFJXMGYvb+F8VU f6YpFqoDdS8fYkwrZd1gEHnvPzSrt7WkPwTBcJW2jqF6DHXUB8DsWZtsOUBL3926 XXOXStecD5PYuBQsubeqos2q9+DCF5IHczhm9F/l557N77mEz1w8Y2N45VTr4e4L Qxd2MAB8Klgkr15vdje18AEc4Dk0LDjo -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org