$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: +g76Ap/PxHacIx9DmlFm1PO3ydvul5lnj3SC9C8wy14= Subject key identifier: C8:1D:E1:A7:96:2A:A8:F0:80:65:3C:85:85:C3:EB:07:76:19:68:81 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 60 Signing time: Fri 17 May 2024 07:47:26 +0000 Manifest this update: Fri 17 May 2024 07:47:26 +0000 Manifest next update: Fri 24 May 2024 07:47:26 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: XQ7hkOp60/QaWO26i87aRbPnvOrXULF8o1mq8Npnp2U=) 2: A9A8FE1A83BC11EEB6C07756C4F9AE02.roa (hash: ZmlvuqiuQGpwnuAUeqJbTPK/3SghVoMsywCuvsX+JN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: May 17 07:47:26 2024 GMT Not After : May 24 07:47:26 2024 GMT Subject: CN=66470b8e-cf5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:59:34:71:5d:8b:79:a0:cb:26:09:80:3f: 43:b3:dd:ba:55:e6:b2:13:16:43:b3:92:9d:53:4c: 2b:46:ef:02:57:55:74:ce:17:27:ae:bf:0c:18:d5: 59:82:27:ef:18:92:61:c2:01:dc:35:9e:8e:c9:75: 15:3e:26:76:60:2d:13:48:07:0f:fd:23:d3:c4:1b: f7:f9:bb:a0:9e:29:4a:4a:b2:63:7b:fc:3e:b0:65: 68:50:99:85:a7:46:9e:b0:1a:5a:be:15:87:86:24: 9e:e3:7d:fd:da:4b:99:5a:6a:cc:ca:50:55:71:ea: 3f:36:65:75:ee:7c:ec:47:18:6a:65:a8:0e:7e:59: 05:13:26:02:b6:62:3c:78:37:19:2a:15:13:f8:e7: 40:bb:96:0a:39:fd:c7:d1:ec:1f:46:d2:82:87:ae: a8:11:9a:13:46:65:39:43:28:f7:78:34:21:5d:1b: a3:ee:c1:6c:7f:60:91:8f:9b:03:a6:ae:e1:71:2a: 49:e4:37:d7:a9:55:9e:6d:3d:22:03:c1:d1:26:ba: 8e:51:01:62:e4:10:b5:bd:a2:7c:31:95:fd:42:5f: 3f:46:82:9d:50:23:43:81:b5:f6:c3:7a:22:27:bd: d4:36:d1:8e:93:94:cc:43:67:8e:20:73:12:79:d5: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:E1:A7:96:2A:A8:F0:80:65:3C:85:85:C3:EB:07:76:19:68:81 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:51:56:52:5b:50:ca:89:55:ec:20:d6:07:07:13:bf:0b:a3: e0:d9:73:a6:55:bb:82:3e:45:c7:cb:6b:9a:0d:a6:18:22:50: 8d:98:87:a1:16:aa:50:37:7c:41:08:c0:85:1d:d9:60:b5:56: d8:76:58:8c:ba:5d:f2:28:1f:73:19:61:88:a4:ca:a2:f1:c9: e1:00:2e:c1:e7:be:01:b1:4e:ab:91:f7:c4:6d:97:e0:1a:9b: 55:9a:37:3c:a9:ef:30:30:07:72:01:ea:16:8b:d6:3f:86:5f: b8:fd:6b:8b:5e:9b:18:34:ed:4e:aa:3e:4d:cb:66:60:07:7f: 8d:8e:d2:f1:a1:5d:a2:81:b8:61:91:a2:b4:3c:58:fa:c0:10: 74:16:bc:60:64:c7:ae:3a:53:e7:c5:c0:91:87:50:f6:95:57: 03:44:8d:c0:3f:1b:52:03:32:3d:a9:31:2b:b7:e3:f4:d8:75: fe:45:74:49:0d:41:20:51:07:34:22:d4:a3:26:52:99:f9:ef: a6:3e:83:3a:d9:50:ae:21:5e:59:b1:85:57:41:12:45:d1:54: 2a:7a:11:76:9f:ee:54:cc:75:8d:de:c6:89:d4:8c:1a:a8:0a: 42:48:5f:97:ce:21:87:20:ba:cd:7c:4c:63:be:9e:d8:d7:4a: bf:e7:01:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjM4NzExMC8GA1UEBRMoMUQwMEMyODNDQUExQUIzQ0M0MzcxQTJBMzg0RDYyQjFD RDQ0RkJBNzAeFw0yNDA1MTcwNzQ3MjZaFw0yNDA1MjQwNzQ3MjZaMBgxFjAUBgNV BAMTDTY2NDcwYjhlLWNmNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0i1k0cV2LeaDLJgmAP0Oz3bpV5rITFkOzkp1TTCtG7wJXVXTOFyeuvwwY1VmC J+8YkmHCAdw1no7JdRU+JnZgLRNIBw/9I9PEG/f5u6CeKUpKsmN7/D6wZWhQmYWn Rp6wGlq+FYeGJJ7jff3aS5laaszKUFVx6j82ZXXufOxHGGplqA5+WQUTJgK2Yjx4 NxkqFRP450C7lgo5/cfR7B9G0oKHrqgRmhNGZTlDKPd4NCFdG6PuwWx/YJGPmwOm ruFxKknkN9epVZ5tPSIDwdEmuo5RAWLkELW9onwxlf1CXz9Ggp1QI0OBtfbDeiIn vdQ20Y6TlMxDZ44gcxJ51RTTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyB3hp5Yq qPCAZTyFhcPrB3YZaIEwHwYDVR0jBBgwFoAUHQDCg8qhqzzENxoqOE1isc1E+6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMzg3LzVGM0M4NDk2ODNB MzExRUVBMEI0MjgxQ0M0RjlBRTAyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFFEQ2c4cWhxenpFTnhvcU9FMWlzYzFFLTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Mzg3LzVGM0M4NDk2ODNBMzExRUVBMEI0MjgxQ0M0RjlBRTAyL0hRRENnOHFocXp6 RU54b3FPRTFpc2MxRS02Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9RVlJbUMqJVewg1gcHE78Lo+DZc6ZVu4I+RcfLa5oNphgiUI2Yh6EW qlA3fEEIwIUd2WC1Vth2WIy6XfIoH3MZYYikyqLxyeEALsHnvgGxTquR98Rtl+Aa m1WaNzyp7zAwB3IB6haL1j+GX7j9a4temxg07U6qPk3LZmAHf42O0vGhXaKBuGGR orQ8WPrAEHQWvGBkx646U+fFwJGHUPaVVwNEjcA/G1IDMj2pMSu34/TYdf5FdEkN QSBRBzQi1KMmUpn576Y+gzrZUK4hXlmxhVdBEkXRVCp6EXaf7lTMdY3exonUjBqo CkJIX5fOIYcgus18TGO+ntjXSr/nAf0= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org