$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json) Hash identifier: 2zIfGdGTMIYRPdP1d59/JzqTv5oE/6P/V155mMRr1c8= Subject key identifier: DF:0B:F8:86:44:93:58:33:59:42:EA:BA:41:D0:86:2C:2D:7B:72:0A Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Certificate serial: 0D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft Manifest number: 0FD7 Signing time: Sat 18 May 2024 18:33:18 +0000 Manifest this update: Sat 18 May 2024 18:33:17 +0000 Manifest next update: Sat 25 May 2024 18:33:17 +0000 Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: iYS7PTO2DXOQC4mQVH2kP2ustySpH3LeCy1FXDgiB4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Validity Not Before: May 18 18:33:17 2024 GMT Not After : May 25 18:33:17 2024 GMT Subject: CN=6648f46d-4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:d0:5a:db:66:8a:53:7b:8a:71:f4:e0:cb: 54:33:24:a7:b4:cc:7f:8f:6d:e1:5d:78:bf:26:68: 9a:e3:88:f0:9e:95:91:b4:1b:0e:78:7e:7f:31:e3: 7a:17:40:56:bb:25:87:0c:91:a6:eb:c5:50:b1:5f: 0e:74:9b:73:db:ea:3f:84:06:c3:5e:3f:83:a5:30: 86:3b:b6:1f:ed:1a:d2:b5:93:50:86:f5:a8:0c:a6: 8a:d1:f1:3c:1e:2b:fc:9c:5e:8a:0c:4c:2e:42:50: 93:0d:26:3d:1c:86:5d:28:5f:af:ab:c4:ee:c7:3a: 34:c2:1d:09:09:6e:cc:1e:93:ee:f9:e0:8d:c9:f3: 16:f8:62:51:5b:32:3d:09:7b:94:94:eb:c0:41:44: f9:c8:7c:f2:ee:42:82:f2:e8:90:c9:79:b1:d9:bb: fe:43:34:75:1a:c8:2b:22:f3:30:de:70:90:61:ae: 73:e8:59:e9:bf:85:4a:3b:8f:a9:9c:27:e0:3c:ee: 1f:b8:e9:a1:34:1a:c7:2c:11:c4:5b:7e:7f:5d:d1: 5e:9b:78:92:8a:e4:0b:d9:90:58:63:6b:9a:e7:bb: 92:7c:94:ef:de:7c:5d:64:8c:54:c9:40:f8:2a:eb: 31:2e:dc:20:a2:74:89:a9:6a:d2:c0:4c:5c:4b:f3: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:F8:86:44:93:58:33:59:42:EA:BA:41:D0:86:2C:2D:7B:72:0A X509v3 Authority Key Identifier: keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:58:ad:8b:d4:45:9d:82:c4:71:fe:31:0f:48:ac:78:d0:53: b5:d8:09:ef:52:55:58:12:f7:5a:98:b1:f9:46:8b:89:38:fc: a3:f2:c4:8d:1f:11:f9:78:2c:21:18:e5:b4:bf:c0:08:2f:e3: 4d:74:87:d6:09:6a:d6:85:22:ea:ff:d1:48:70:e7:f7:86:46: 95:26:7c:26:90:7a:b1:84:f5:d4:ad:f1:90:fb:d0:0b:da:05: c8:d0:e3:90:ac:f2:8b:e7:d7:95:06:94:ec:05:75:f8:29:ef: 45:db:9c:5d:8b:00:42:80:96:e3:76:b3:23:1a:24:d8:fb:5d: f2:dc:dc:8f:42:16:cc:51:0f:f7:07:46:70:68:f7:a8:9d:38: 78:0f:ef:db:01:46:29:e2:02:b9:5f:0d:68:a5:56:07:a0:e5: ba:dc:f9:a6:65:e4:db:05:11:e0:c3:ab:75:33:5d:be:a1:14: 6f:f3:90:86:f7:27:d9:7a:2b:4d:4d:0c:72:7f:73:fa:4a:b4: 98:50:d6:8a:f9:d4:91:be:36:a2:a7:ef:4c:8c:c1:a9:87:ce: f8:02:59:05:42:c6:95:82:6c:7c:89:53:e5:15:18:46:55:e0: 01:cc:63:f5:16:1b:7e:6e:ae:59:1f:dc:53:9c:e5:01:c3:f8: 99:f0:7e:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEREQxMTAvBgNVBAUTKDg3Q0Q3MTgyNzc2MzFFMEJEREI2QjRGM0EyREYxRUIz MTEyMkEzODEwHhcNMjQwNTE4MTgzMzE3WhcNMjQwNTI1MTgzMzE3WjAYMRYwFAYD VQQDEw02NjQ4ZjQ2ZC00YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFTQWttmilN7inH04MtUMySntMx/j23hXXi/Jmia44jwnpWRtBsOeH5/MeN6 F0BWuyWHDJGm68VQsV8OdJtz2+o/hAbDXj+DpTCGO7Yf7RrStZNQhvWoDKaK0fE8 Hiv8nF6KDEwuQlCTDSY9HIZdKF+vq8Tuxzo0wh0JCW7MHpPu+eCNyfMW+GJRWzI9 CXuUlOvAQUT5yHzy7kKC8uiQyXmx2bv+QzR1GsgrIvMw3nCQYa5z6Fnpv4VKO4+p nCfgPO4fuOmhNBrHLBHEW35/XdFem3iSiuQL2ZBYY2ua57uSfJTv3nxdZIxUyUD4 KusxLtwgonSJqWrSwExcS/MfiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8L+IZE k1gzWULqukHQhiwte3IKMB8GA1UdIwQYMBaAFIfNcYJ3Yx4L3ba086LfHrMRIqOB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhndmR0clR6b3Q4ZXN4RWlv NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4MXhnbmRqSGd2ZHRyVHpvdDhlc3hFaW80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhn dmR0clR6b3Q4ZXN4RWlvNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHWK2L1EWdgsRx/jEPSKx40FO12AnvUlVYEvdamLH5RouJOPyj8sSN HxH5eCwhGOW0v8AIL+NNdIfWCWrWhSLq/9FIcOf3hkaVJnwmkHqxhPXUrfGQ+9AL 2gXI0OOQrPKL59eVBpTsBXX4Ke9F25xdiwBCgJbjdrMjGiTY+13y3NyPQhbMUQ/3 B0ZwaPeonTh4D+/bAUYp4gK5Xw1opVYHoOW63PmmZeTbBRHgw6t1M12+oRRv85CG 9yfZeitNTQxyf3P6SrSYUNaK+dSRvjaip+9MjMGph874AlkFQsaVgmx8iVPlFRhG VeABzGP1Fht+bq5ZH9xTnOUBw/iZ8H4v -----END CERTIFICATE-----Generated at Sat May 18 19:15:27 2024 by rpki-client on console-ams.rpki-client.org