$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: HNVKXL/ZpXmIHZ+h4fZYncKceRUiFhDmb5Gpvd/CvEs= Subject key identifier: 79:93:8A:9F:43:2D:40:5B:26:22:99:02:40:44:B4:AC:72:78:FA:3A Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 5E Signing time: Sun 19 May 2024 07:44:44 +0000 Manifest this update: Sun 19 May 2024 07:44:44 +0000 Manifest next update: Sun 26 May 2024 07:44:44 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: q1CEvt1paWLtSfVagZuKn2TPkfCkfh7rijbkVy29Ljg=) 2: A3F7EA248C3811EEB3B35061C4F9AE02.roa (hash: 0XTdav9TVDkyjgzAJ3nve2FCy4YqzyvU1miDJoxWVJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: May 19 07:44:44 2024 GMT Not After : May 26 07:44:44 2024 GMT Subject: CN=6649adec-f857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:fd:f1:ab:bb:e8:1d:23:33:33:05:bc:85: bd:fd:29:fe:08:82:7e:68:6b:f5:1d:ed:ab:14:37: 7a:cc:79:5e:6b:10:e0:95:d8:77:93:ec:52:40:ba: 0b:6a:7b:15:70:43:9a:1b:bc:c1:09:8a:a1:3b:65: 19:1f:aa:02:52:25:8e:68:41:86:c2:05:e1:3c:1e: 9f:96:8a:d4:1b:3e:11:1c:52:3c:91:0c:8e:f3:dc: ca:0d:b2:dc:a4:28:f9:8d:d7:a4:b5:a1:04:31:8e: 61:38:b7:56:58:ec:c8:99:2b:c3:ab:cf:9f:b7:08: 5c:50:3f:53:fa:d8:e3:d7:46:2c:c5:6a:bc:0d:5d: bd:74:0b:7e:ad:55:da:d9:76:98:52:99:56:57:82: be:44:ee:bf:94:6d:79:37:85:ee:68:ac:90:3b:43: f4:cd:74:ff:74:e5:3d:63:16:9d:3f:41:56:ba:da: ff:03:09:eb:32:94:dc:3e:0b:7c:81:e1:6e:b3:e6: 1a:68:21:bb:2c:a1:a9:7b:96:b9:75:f0:f5:25:00: b8:3f:33:72:76:53:4b:72:d9:26:d6:7b:24:46:1b: 26:a3:d5:55:dd:82:a2:ed:14:9a:39:41:3e:69:e1: 56:d5:2b:b6:11:42:df:73:e2:a0:89:62:f7:30:c7: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:93:8A:9F:43:2D:40:5B:26:22:99:02:40:44:B4:AC:72:78:FA:3A X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:48:18:36:f4:43:75:23:76:a3:46:7d:ca:fc:b2:1f:75:d3: 39:be:6d:69:65:dc:4f:c5:20:0d:92:c7:7a:8c:68:4b:53:57: f5:c3:0f:09:06:a2:0f:18:02:f4:22:5f:de:66:b8:90:b9:c5: ae:04:43:3b:4c:59:bf:3b:42:97:20:d7:52:5c:e7:c0:db:74: cd:c5:3d:d6:44:7e:79:e9:33:7c:9c:b4:1b:0c:0a:26:55:fa: a7:87:b3:26:7e:58:8d:a9:dc:fc:17:af:9f:f8:56:7e:87:72: 12:90:03:e0:69:c8:c1:da:60:c4:56:1d:00:35:1d:e4:ae:8d: f7:e1:b3:8e:cb:93:a6:05:fa:0e:19:f6:27:cc:4e:55:3d:5d: 39:c5:50:c0:cb:fd:d1:17:6e:49:88:f8:13:02:01:78:13:b5: 59:46:b2:de:54:5f:33:54:90:65:fc:0e:1c:33:10:56:37:12: 00:8b:7f:d1:ea:b9:c3:30:15:1e:46:cc:c4:75:2a:e0:83:2c: 7d:54:93:e5:ad:1d:7a:01:25:65:3f:76:4b:1c:3d:90:76:3e: d2:b9:84:f7:d1:01:41:1f:df:10:27:6f:98:42:a2:3c:12:33: 47:b1:c1:8f:66:0b:b5:cf:84:72:88:69:93:db:90:3b:cb:28: ac:4c:45:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NBNDExMC8GA1UEBRMoMEM3QzRENkJFODZENTVCRTQ0Q0I0QUQ5NjY2NkMxNTM1 MTkzRjc3MjAeFw0yNDA1MTkwNzQ0NDRaFw0yNDA1MjYwNzQ0NDRaMBgxFjAUBgNV BAMTDTY2NDlhZGVjLWY4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg+f3xq7voHSMzMwW8hb39Kf4Ign5oa/Ud7asUN3rMeV5rEOCV2HeT7FJAugtq exVwQ5obvMEJiqE7ZRkfqgJSJY5oQYbCBeE8Hp+WitQbPhEcUjyRDI7z3MoNstyk KPmN16S1oQQxjmE4t1ZY7MiZK8Orz5+3CFxQP1P62OPXRizFarwNXb10C36tVdrZ dphSmVZXgr5E7r+UbXk3he5orJA7Q/TNdP905T1jFp0/QVa62v8DCesylNw+C3yB 4W6z5hpoIbssoal7lrl18PUlALg/M3J2U0ty2SbWeyRGGyaj1VXdgqLtFJo5QT5p 4VbVK7YRQt9z4qCJYvcwxzo1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeZOKn0Mt QFsmIpkCQES0rHJ4+jowHwYDVR0jBBgwFoAUDHxNa+htVb5Ey0rZZmbBU1GT93Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0E0L0I3NTE2QjEwODlC NjExRUU5OTUxMkE2REM0RjlBRTAyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREh4TmEtaHRWYjVFeTByWlptYkJVMUdUOTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0E0L0I3NTE2QjEwODlCNjExRUU5OTUxMkE2REM0RjlBRTAyL0RIeE5hLWh0VmI1 RXkwclpabWJCVTFHVDkzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRIGDb0Q3UjdqNGfcr8sh910zm+bWll3E/FIA2Sx3qMaEtTV/XDDwkG og8YAvQiX95muJC5xa4EQztMWb87Qpcg11Jc58DbdM3FPdZEfnnpM3yctBsMCiZV +qeHsyZ+WI2p3PwXr5/4Vn6HchKQA+BpyMHaYMRWHQA1HeSujffhs47Lk6YF+g4Z 9ifMTlU9XTnFUMDL/dEXbkmI+BMCAXgTtVlGst5UXzNUkGX8DhwzEFY3EgCLf9Hq ucMwFR5GzMR1KuCDLH1Uk+WtHXoBJWU/dkscPZB2PtK5hPfRAUEf3xAnb5hCojwS M0exwY9mC7XPhHKIaZPbkDvLKKxMRUg= -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org