$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: FhMePyBIVCUcOVeg3r8JfHrabi9ye1LjS7v6xNHOf1o= Subject key identifier: 57:2A:51:3A:71:6C:3E:E1:B7:DC:21:DB:AC:E4:1E:12:62:37:67:18 Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: 1F Signing time: Sun 15 Sep 2024 10:21:35 +0000 Manifest this update: Sun 15 Sep 2024 10:21:34 +0000 Manifest next update: Sun 22 Sep 2024 10:21:34 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: +pEF2BglsexrTPhGUE81JhNaKSNow53z1M5cqd6sslA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: Sep 15 10:21:34 2024 GMT Not After : Sep 22 10:21:34 2024 GMT Subject: CN=66e6b52f-a78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:15:20:d3:7c:f3:b9:a4:45:6b:d3:9f:5a:bb: d2:82:af:5e:e9:e6:dd:dd:dc:68:94:83:5d:8e:aa: ad:bd:69:26:25:54:ea:ac:10:70:45:7a:ae:f1:8f: f6:b6:7a:cb:76:06:1f:2a:ab:7b:bf:ad:85:d5:ea: ee:b7:1a:05:9c:f5:10:4f:22:b4:9d:23:28:93:85: bb:87:3e:b5:a0:e4:f9:e2:b6:e0:2c:f0:f3:92:bc: 67:7d:64:4d:70:50:99:ec:9b:c2:44:b3:0e:db:ca: 44:3d:a5:40:f2:97:79:5a:39:cf:0d:6e:cf:15:4b: ec:1e:11:ad:07:d9:53:ae:8a:80:df:47:2c:25:61: e7:e6:b3:df:5e:64:0a:d2:bc:0b:50:d0:e8:54:9a: 7c:4f:67:13:10:03:4b:fb:48:a8:e9:50:ab:22:5b: 4a:57:07:a8:48:f8:b2:ed:7a:db:d2:6d:a9:64:6b: 6b:d4:d0:ed:84:06:77:a6:c0:e5:5e:d2:41:be:37: 1c:0e:f4:97:e9:da:11:c0:9c:b5:55:1c:00:1c:03: 83:7a:d8:5c:33:d0:f4:fe:6c:da:98:2c:60:41:2c: 8e:16:70:fa:65:60:d5:c1:e8:70:cc:54:6d:9e:67: e1:d4:98:22:49:e0:ae:6e:8d:f6:ba:27:d5:3d:96: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:51:3A:71:6C:3E:E1:B7:DC:21:DB:AC:E4:1E:12:62:37:67:18 X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c5:fd:c9:de:ff:a7:61:3f:27:9a:77:b3:21:d8:7f:e4:03: c4:96:05:a8:89:5f:f5:91:3b:4b:8b:4a:44:0c:fa:4d:9a:20: 0d:10:21:e3:35:25:5d:dc:dc:d6:e7:b2:fb:4a:e1:50:58:f0: 9c:13:61:57:2b:bb:32:b2:3f:10:86:b9:58:90:29:24:d0:cc: 44:b4:ff:67:64:f7:88:a7:3f:32:7f:5e:9d:be:cd:14:ae:d1: 94:e5:58:7a:d9:53:67:d3:3d:d5:b6:6d:00:ef:ee:73:44:8b: 1d:c7:f7:01:75:38:f9:1c:3a:25:8a:78:4a:0a:ad:f6:28:51: 45:39:52:d7:a5:29:7d:51:93:7e:68:0f:93:6f:30:ce:49:9f: d1:45:84:97:76:6f:ed:66:60:82:e8:8a:2e:e0:ce:45:99:fd: a0:58:ff:8d:ef:fd:3a:c4:ae:72:05:93:67:6d:c4:7b:ab:b4: 6e:ad:9d:cb:97:41:60:de:e3:c7:00:fc:2e:f6:25:68:8e:5d: 7e:82:30:27:82:83:65:cb:af:70:6c:1d:1c:05:97:09:82:aa: db:11:a4:16:a4:b0:2b:2d:fa:05:f1:19:b6:a2:18:22:4e:e9: b6:20:d0:b0:69:81:5d:af:72:c1:f9:2f:70:05:42:a7:c6:42: d6:9c:51:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUI1RTExMC8GA1UEBRMoODU4MDQ1OTUxN0ZFMUQ3N0Q0RDM4QTQyOUYxRDIxQzZD OTJERTkzNDAeFw0yNDA5MTUxMDIxMzRaFw0yNDA5MjIxMDIxMzRaMBgxFjAUBgNV BAMTDTY2ZTZiNTJmLWE3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYFSDTfPO5pEVr059au9KCr17p5t3d3GiUg12Oqq29aSYlVOqsEHBFeq7xj/a2 est2Bh8qq3u/rYXV6u63GgWc9RBPIrSdIyiThbuHPrWg5PnituAs8POSvGd9ZE1w UJnsm8JEsw7bykQ9pUDyl3laOc8Nbs8VS+weEa0H2VOuioDfRywlYefms99eZArS vAtQ0OhUmnxPZxMQA0v7SKjpUKsiW0pXB6hI+LLtetvSbalka2vU0O2EBnemwOVe 0kG+NxwO9Jfp2hHAnLVVHAAcA4N62Fwz0PT+bNqYLGBBLI4WcPplYNXB6HDMVG2e Z+HUmCJJ4K5ujfa6J9U9lv8pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVypROnFs PuG33CHbrOQeEmI3ZxgwHwYDVR0jBBgwFoAUhYBFlRf+HXfU04pCnx0hxskt6TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjVFLzg1QkNFRTRDNDVC NTExRUZCQTRBNjIxRUM0RjlBRTAyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFlCRmxSZi1IWGZVMDRwQ254MGh4c2t0NlRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjVFLzg1QkNFRTRDNDVCNTExRUZCQTRBNjIxRUM0RjlBRTAyL2hZQkZsUmYtSFhm VTA0cENueDBoeHNrdDZUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHF/cne/6dhPyead7Mh2H/kA8SWBaiJX/WRO0uLSkQM+k2aIA0QIeM1 JV3c3NbnsvtK4VBY8JwTYVcruzKyPxCGuViQKSTQzES0/2dk94inPzJ/Xp2+zRSu 0ZTlWHrZU2fTPdW2bQDv7nNEix3H9wF1OPkcOiWKeEoKrfYoUUU5UtelKX1Rk35o D5NvMM5Jn9FFhJd2b+1mYILoii7gzkWZ/aBY/43v/TrErnIFk2dtxHurtG6tncuX QWDe48cA/C72JWiOXX6CMCeCg2XLr3BsHRwFlwmCqtsRpBaksCst+gXxGbaiGCJO 6bYg0LBpgV2vcsH5L3AFQqfGQtacUU8= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:33 2024 by rpki-client on console-ams.rpki-client.org