$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: mqHTCL04Yl4lRN8xiIomcLcSMskEQBVMCMUcRY3INPs= Subject key identifier: D0:7F:D2:CD:5B:F2:4C:32:32:07:BE:41:87:E6:A7:DF:EF:AE:21:34 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 09B1 Signing time: Sat 04 May 2024 21:01:38 +0000 Manifest this update: Sat 04 May 2024 21:01:38 +0000 Manifest next update: Sat 11 May 2024 21:01:38 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: awXjqhE3lD5LoTZqLdhj8me1y0VzEIdRhstggS9ybTg=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: 0cvbxP20kbDfmHfHGVhiDmzqDHp8ThkRVUA3Ma5jp/o=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: VQgzjbt+yUKlk0a3cKkNbYjoYrGC1Q3yZRt8dWoxZtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: May 4 21:01:38 2024 GMT Not After : May 11 21:01:38 2024 GMT Subject: CN=6636a232-8391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:51:90:f7:ae:ce:34:bc:8a:3c:41:42:dc: 1d:b3:ce:d2:88:f8:38:27:58:93:cf:c7:40:91:3a: ab:85:50:b4:06:e5:8a:61:27:f2:8e:87:af:ca:62: 3a:ad:69:ae:8f:56:91:b2:a9:e0:fa:11:70:94:30: 0b:7b:3c:b3:e3:ed:84:fa:9a:b7:c1:6d:8d:70:36: 0b:57:cf:a6:80:a4:d1:73:1d:88:3a:1e:72:11:ed: aa:ab:b9:94:7d:87:c9:25:1e:6a:ac:38:9d:83:b8: f5:8e:a1:f7:98:11:94:7d:f2:de:4e:91:6e:50:8c: 5e:fe:be:d9:b3:30:6a:1b:46:7a:fa:00:63:f7:5f: e3:5e:b4:e5:d9:7c:26:13:d3:b3:61:10:7c:f7:5c: 36:e6:bf:41:83:7e:37:e4:6a:49:b6:9b:96:2b:d6: 44:7a:ea:22:c8:e5:27:66:24:4a:49:b6:71:53:08: 24:12:73:f6:d0:4d:8f:e1:2d:af:68:2b:34:68:cf: 96:c4:b2:99:32:99:94:b1:6c:49:88:e6:1c:8a:bd: 05:b3:99:ba:88:b9:c8:de:4a:64:c3:9d:10:43:c5: 58:00:02:97:01:79:74:75:d5:35:59:90:06:29:bf: 48:0d:bc:67:3f:3f:f7:cc:7c:69:0e:6e:b4:ff:68: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7F:D2:CD:5B:F2:4C:32:32:07:BE:41:87:E6:A7:DF:EF:AE:21:34 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:92:7a:12:d9:c4:5b:51:d5:60:a2:c8:41:4e:f9:31:40:fc: f0:7e:ad:9c:0c:1c:18:eb:04:70:a4:63:4f:fe:ce:6c:41:dd: b4:75:65:e1:af:7e:91:d4:89:ef:13:cd:3d:0e:90:6c:5f:d0: 00:27:b5:b1:d7:9e:7d:b2:64:70:44:31:7c:cd:7a:af:dd:a7: 94:a3:6b:87:a9:06:ab:14:11:e9:c2:e1:3c:88:30:62:e3:fc: c6:89:5c:85:00:4a:8d:65:91:27:7a:94:55:b1:c9:00:53:92: b6:f0:0d:81:5c:36:5d:cb:f8:5f:19:02:54:9f:9b:8a:8b:cd: 40:50:e2:4a:fd:a8:ea:37:d6:ce:ee:99:94:22:3d:cb:b5:ff: 82:51:03:9c:fa:b9:1d:0d:b1:85:0f:3b:3e:60:eb:18:71:19: d6:61:ff:e9:ae:5e:36:62:95:be:5d:98:8f:dc:02:e7:6b:6a: e2:c6:55:80:60:15:10:09:cd:a5:8b:72:d3:19:53:64:d6:94: cc:b6:93:1c:7d:53:58:62:ea:1d:f1:c6:4b:26:53:af:92:04: 2a:87:81:6e:5a:39:14:f5:ea:0f:78:f1:b0:8f:29:1f:af:c0: c8:23:41:d8:e7:0a:a4:3c:20:f6:a9:f3:ce:56:c7:16:0f:39: 73:d8:b3:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjQwNTA0MjEwMTM4WhcNMjQwNTExMjEwMTM4WjAYMRYwFAYD VQQDEw02NjM2YTIzMi04MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WRRkPeuzjS8ijxBQtwds87SiPg4J1iTz8dAkTqrhVC0BuWKYSfyjoevymI6 rWmuj1aRsqng+hFwlDALezyz4+2E+pq3wW2NcDYLV8+mgKTRcx2IOh5yEe2qq7mU fYfJJR5qrDidg7j1jqH3mBGUffLeTpFuUIxe/r7ZszBqG0Z6+gBj91/jXrTl2Xwm E9OzYRB891w25r9Bg3435GpJtpuWK9ZEeuoiyOUnZiRKSbZxUwgkEnP20E2P4S2v aCs0aM+WxLKZMpmUsWxJiOYcir0Fs5m6iLnI3kpkw50QQ8VYAAKXAXl0ddU1WZAG Kb9IDbxnPz/3zHxpDm60/2g8bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB/0s1b 8kwyMge+QYfmp9/vriE0MB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqknoS2cRbUdVgoshBTvkxQPzwfq2cDBwY6wRwpGNP/s5sQd20dWXh r36R1InvE809DpBsX9AAJ7Wx1559smRwRDF8zXqv3aeUo2uHqQarFBHpwuE8iDBi 4/zGiVyFAEqNZZEnepRVsckAU5K28A2BXDZdy/hfGQJUn5uKi81AUOJK/ajqN9bO 7pmUIj3Ltf+CUQOc+rkdDbGFDzs+YOsYcRnWYf/prl42YpW+XZiP3ALna2rixlWA YBUQCc2li3LTGVNk1pTMtpMcfVNYYuod8cZLJlOvkgQqh4FuWjkU9eoPePGwjykf r8DII0HY5wqkPCD2qfPOVscWDzlz2LM7 -----END CERTIFICATE-----Generated at Sat May 4 21:32:57 2024 by rpki-client on console-fra.rpki-client.org