$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: Ik6tasvEsJi6m+yA2Z5dz/KIcZw4gRGUwjyc00turqs= Subject key identifier: 19:60:59:4B:21:85:CD:32:4C:32:33:3F:53:60:BE:F5:F0:9E:DA:6F Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0F1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0F16 Signing time: Sat 18 May 2024 18:13:53 +0000 Manifest this update: Sat 18 May 2024 18:13:52 +0000 Manifest next update: Sat 25 May 2024 18:13:52 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: +BcrCkPhV239AayCttZLPt0uy5R16NCJARXNuu+6cnI=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: /iSIvvhUoXFHLziQJqcGFPcc3ui1ySSnlRKhsUVXnlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3870 (0xf1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: May 18 18:13:52 2024 GMT Not After : May 25 18:13:52 2024 GMT Subject: CN=6648efe1-77f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:4b:a4:88:9e:3c:3a:c3:24:d2:03:6c:b0: 40:ab:17:ea:55:ee:ad:0a:9b:3d:4b:cf:63:ba:a6: 71:34:f7:f6:fe:73:1a:17:ed:4d:73:56:ef:99:a6: 58:d6:a8:63:67:19:03:ab:04:4d:35:b2:7d:e0:eb: a8:b4:1f:3e:ea:83:f7:8e:d4:9f:cb:46:b3:e3:1e: 12:3c:1b:a7:6b:b1:42:e9:c6:40:d6:8b:9e:26:03: 31:2b:c0:d0:45:d8:12:ec:5d:34:86:e5:69:60:e9: 35:86:db:f8:01:42:8b:fe:f0:88:80:73:a6:9c:e1: 82:4c:9b:e0:8b:84:e0:89:36:49:d7:1d:9f:f0:95: 39:03:19:88:29:2b:bc:fb:1d:7e:eb:8c:44:61:be: a2:8b:bb:b1:94:27:f6:8f:24:c3:eb:ad:3e:b3:aa: 82:42:25:f3:c6:47:da:b2:86:e4:c4:eb:2b:60:02: e1:26:f7:28:40:42:64:7c:c5:c1:09:c8:13:81:80: 1a:06:20:4d:98:e6:25:12:e4:02:24:02:89:b8:a6: 20:d6:2a:39:96:cb:a0:f0:ac:d7:6d:d7:28:c8:fc: 28:ac:7d:73:e0:6a:51:8b:e4:35:24:9c:48:5b:3b: a8:53:31:f2:d0:a2:d8:7a:8e:a9:45:bb:6a:77:62: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:59:4B:21:85:CD:32:4C:32:33:3F:53:60:BE:F5:F0:9E:DA:6F X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a1:0b:21:dd:d0:fd:cb:0b:a1:6a:d3:05:02:01:84:28:f8: 07:3d:48:c1:00:b3:19:e8:ff:0a:04:1a:52:b9:98:e9:3d:2a: d8:fa:4d:f7:40:73:7e:dd:a0:2a:83:2f:ae:6f:a7:dc:43:0d: e3:cd:ae:14:5c:65:13:fa:ba:82:a6:11:4d:24:57:ad:00:de: d7:79:84:ae:56:ac:b5:4d:ef:92:27:cc:29:fe:fa:2e:ed:d9: a4:2b:cb:f6:41:d7:6b:a9:44:f1:7b:48:b0:4b:1f:85:20:a8: 6c:9c:f4:9c:2c:3d:ce:0d:9b:bb:07:f3:85:ef:02:63:78:d2: d7:16:0e:fe:59:f6:dc:2d:f1:dd:0b:15:9a:e4:c0:b2:67:ed: bc:1a:8e:ef:a0:06:50:71:85:58:d6:7d:f5:7c:87:57:0f:e1: 75:3e:74:5f:fb:5e:51:e3:5b:bb:0b:bf:03:e9:99:ff:e4:62: 12:c6:7c:be:2b:42:2f:35:51:b3:87:49:d0:ec:23:8f:16:97: 23:84:21:1b:7c:4e:e0:92:4a:07:f9:87:de:36:35:38:32:e2: db:66:a4:ca:6f:59:d1:11:bb:a8:62:4b:51:54:67:6e:5d:61: b0:e7:a9:34:80:24:7f:8c:8c:ff:25:3d:5d:96:e9:34:7b:04: 40:92:af:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjQwNTE4MTgxMzUyWhcNMjQwNTI1MTgxMzUyWjAYMRYwFAYD VQQDEw02NjQ4ZWZlMS03N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzVLpIiePDrDJNIDbLBAqxfqVe6tCps9S89juqZxNPf2/nMaF+1Nc1bvmaZY 1qhjZxkDqwRNNbJ94OuotB8+6oP3jtSfy0az4x4SPBuna7FC6cZA1oueJgMxK8DQ RdgS7F00huVpYOk1htv4AUKL/vCIgHOmnOGCTJvgi4TgiTZJ1x2f8JU5AxmIKSu8 +x1+64xEYb6ii7uxlCf2jyTD660+s6qCQiXzxkfasobkxOsrYALhJvcoQEJkfMXB CcgTgYAaBiBNmOYlEuQCJAKJuKYg1io5lsug8KzXbdcoyPworH1z4GpRi+Q1JJxI WzuoUzHy0KLYeo6pRbtqd2IPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlgWUsh hc0yTDIzP1NgvvXwntpvMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMoQsh3dD9ywuhatMFAgGEKPgHPUjBALMZ6P8KBBpSuZjpPSrY+k33 QHN+3aAqgy+ub6fcQw3jza4UXGUT+rqCphFNJFetAN7XeYSuVqy1Te+SJ8wp/vou 7dmkK8v2QddrqUTxe0iwSx+FIKhsnPScLD3ODZu7B/OF7wJjeNLXFg7+WfbcLfHd CxWa5MCyZ+28Go7voAZQcYVY1n31fIdXD+F1PnRf+15R41u7C78D6Zn/5GISxny+ K0IvNVGzh0nQ7COPFpcjhCEbfE7gkkoH+YfeNjU4MuLbZqTKb1nREbuoYktRVGdu XWGw56k0gCR/jIz/JT1dluk0ewRAkq9O -----END CERTIFICATE-----Generated at Sat May 18 18:46:47 2024 by rpki-client on console-fra.rpki-client.org