$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: RP1PvNDhmS5L00aNbgP7RwathXQztdAFfS1hkfam2SM= Subject key identifier: C6:B8:66:35:09:B7:5F:66:52:4E:C4:78:DD:B0:73:61:15:A8:55:D8 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 04C1 Signing time: Tue 03 Oct 2023 00:02:43 +0000 Manifest this update: Tue 03 Oct 2023 00:02:43 +0000 Manifest next update: Tue 10 Oct 2023 00:02:43 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: TlZe+4pxx1s1mSlkE9Cq/CV2SpJ4i0/0jsaX943JDbg=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: AfoPDj0H3Mph4EnPkMGpXJPs9g7fpUnUAZ5iI9C51+Q=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 6nrof//LsdiT4hvujp4J7aCv/Y9dWkuY2nSvLTCWkZg=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: EtR6QkcY9IRGBuYPddb+COcYXV/ikwbbyNJ3SzYyTDE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: QHE2Q0xYa0aCnHUELJ4QMWFMYlh3CMqFicZ+Tz0UniY=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: /5eQZqBtzBmP5JqaWkqBxKWg+vMEJOsNkIyfjIWZTyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Oct 2023 21:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Oct 3 00:02:43 2023 GMT Not After : Oct 10 00:02:43 2023 GMT Subject: CN=651b5a23-4ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:9c:a8:87:9c:b5:57:f1:07:8e:71:87:4f: c6:9e:14:b3:8e:ee:84:59:56:34:29:d3:24:df:9d: a2:9a:54:e6:35:35:8d:d9:0c:a3:0e:0b:aa:0b:cc: 3d:e7:8a:46:4e:aa:67:37:0a:93:aa:3a:62:92:22: 1f:bd:c1:e3:83:3b:cd:f8:ed:5e:8a:c9:07:11:bb: 67:21:39:58:27:9f:a2:ae:47:cc:85:28:28:05:fb: 65:4f:20:c4:6a:bd:a1:ab:65:7f:72:aa:b7:23:2b: f4:40:a4:fa:ee:92:b3:60:42:61:0d:55:e6:b3:da: ec:ed:4e:77:9d:18:60:86:46:57:5b:98:7d:d6:2c: 9b:6b:45:88:f8:73:92:42:1b:a1:b5:d9:c3:21:f7: d0:88:44:28:e6:8f:d8:a2:05:c8:2d:70:ac:85:ce: e2:a3:f8:80:13:c9:ec:ef:64:34:8e:e0:e9:22:dd: a5:68:34:aa:5a:12:4b:62:11:db:66:04:45:7a:c3: 98:02:d0:5f:a9:2c:f5:fb:63:fe:9d:04:46:01:ca: 9b:08:95:97:cd:05:4a:2a:2b:c5:59:64:ef:a5:3f: e2:d9:17:94:71:12:aa:7f:55:8f:6c:c2:69:86:5c: 98:28:9b:31:90:d5:68:20:39:c2:89:91:70:7b:7e: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B8:66:35:09:B7:5F:66:52:4E:C4:78:DD:B0:73:61:15:A8:55:D8 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6c:d5:06:6e:56:38:7e:9e:6f:ea:9e:08:2e:13:4e:13:2c: 22:7a:6c:85:e3:5e:33:1c:cb:fe:7a:cb:ab:48:3c:9c:c7:b2: ce:94:97:64:d0:4a:d5:83:19:be:b1:f8:a3:02:fe:b7:10:1f: 60:0e:d8:51:88:cd:b6:c6:59:47:e6:59:19:70:2e:6b:a9:63: 64:b5:af:d2:9f:f3:5c:f4:a2:d9:01:e6:3e:11:07:5a:53:5c: f9:4e:3a:71:64:ff:dd:43:35:82:49:e4:45:1f:c0:06:60:04: b4:e7:af:10:b3:13:ad:d3:55:db:df:fe:38:89:4b:eb:6d:64: 7b:8d:4b:b0:27:d2:3d:0b:f5:52:a5:d2:8f:a8:12:2d:3f:c1: 54:69:47:58:7d:05:ee:a5:74:fc:11:42:62:c2:9c:ce:e5:cd: e3:f8:d7:13:76:b8:05:37:fa:78:b7:78:c6:b1:a2:18:c9:cb: 17:25:53:39:65:ac:e5:2a:a6:1a:42:c8:3f:9b:45:db:ba:e0: f3:a4:29:15:d4:9f:0e:b8:24:e4:9d:b9:52:da:8c:3e:81:48: a2:df:cf:7f:d7:8f:a2:91:03:99:7b:39:0e:05:14:54:b2:65: 4a:d1:51:08:28:80:d5:1b:78:c3:49:17:eb:f1:6f:20:f7:a7: 31:29:49:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjMxMDAzMDAwMjQzWhcNMjMxMDEwMDAwMjQzWjAYMRYwFAYD VQQDEw02NTFiNWEyMy00ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljOcqIectVfxB45xh0/GnhSzju6EWVY0KdMk352imlTmNTWN2QyjDguqC8w9 54pGTqpnNwqTqjpikiIfvcHjgzvN+O1eiskHEbtnITlYJ5+irkfMhSgoBftlTyDE ar2hq2V/cqq3Iyv0QKT67pKzYEJhDVXms9rs7U53nRhghkZXW5h91iyba0WI+HOS QhuhtdnDIffQiEQo5o/YogXILXCshc7io/iAE8ns72Q0juDpIt2laDSqWhJLYhHb ZgRFesOYAtBfqSz1+2P+nQRGAcqbCJWXzQVKKivFWWTvpT/i2ReUcRKqf1WPbMJp hlyYKJsxkNVoIDnCiZFwe37QlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa4ZjUJ t19mUk7EeN2wc2EVqFXYMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSbNUGblY4fp5v6p4ILhNOEywiemyF414zHMv+esurSDycx7LOlJdk 0ErVgxm+sfijAv63EB9gDthRiM22xllH5lkZcC5rqWNkta/Sn/Nc9KLZAeY+EQda U1z5TjpxZP/dQzWCSeRFH8AGYAS0568QsxOt01Xb3/44iUvrbWR7jUuwJ9I9C/VS pdKPqBItP8FUaUdYfQXupXT8EUJiwpzO5c3j+NcTdrgFN/p4t3jGsaIYycsXJVM5 ZazlKqYaQsg/m0XbuuDzpCkV1J8OuCTknblS2ow+gUii389/14+ikQOZezkOBRRU smVK0VEIKIDVG3jDSRfr8W8g96cxKUnZ -----END CERTIFICATE-----Generated at Tue Oct 3 00:31:43 2023 by rpki-client on console-fra.rpki-client.org