$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: NIXZYhverrepF35FdJcEZJdpWus4cX44mFNlqTJE0Lo= Subject key identifier: A3:F2:E7:DA:D5:F9:37:9A:E9:86:ED:97:89:B7:47:DB:AC:5B:09:9F Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 33BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 33BC Signing time: Thu 02 May 2024 14:37:59 +0000 Manifest this update: Thu 02 May 2024 14:37:59 +0000 Manifest next update: Thu 09 May 2024 14:37:59 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: xwnnevttv1sl/i4SLXHnX0hwlP/0mpd6+9JVYDe2Hbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13244 (0x33bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: May 2 14:37:59 2024 GMT Not After : May 9 14:37:59 2024 GMT Subject: CN=6633a547-dea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:b0:9b:bd:b0:68:ac:37:32:e2:38:0a:14: 27:de:95:0e:47:c7:21:0a:e3:34:34:94:41:3d:d3: 9c:46:5f:04:7e:68:33:4d:e6:31:e9:15:88:b6:b8: 34:29:37:8a:23:66:64:e0:19:38:94:ff:89:e1:cb: 09:ba:90:54:e3:18:af:55:c7:d7:d3:bb:cd:c8:25: 52:18:d4:50:5b:5b:45:de:42:22:bf:8f:e7:2e:e4: 1a:2c:7c:6b:0e:8a:30:5c:a7:78:7b:d3:54:db:7e: 6b:68:9a:0e:6b:fb:2f:ee:49:81:cd:95:e9:5d:53: c7:2c:61:13:22:ab:08:06:de:f7:00:6a:8c:25:3a: 6f:ec:a6:7e:0b:48:94:f7:78:18:25:90:b9:4b:19: 1c:40:1c:0c:d1:58:d3:e5:ea:b7:4d:0f:64:93:b3: 8c:29:dc:40:05:8e:d3:32:66:9f:81:06:63:4c:f2: b3:08:58:5c:53:e4:cf:51:f8:4a:81:fb:54:72:d8: 23:08:9d:87:15:ca:f6:49:d4:28:80:8c:9d:60:89: 7b:10:4c:0e:b6:91:53:24:fe:db:3c:f4:56:bc:2b: 93:ca:e8:28:e8:71:e0:f3:f9:a9:c1:ca:bd:78:20: 22:3a:99:bc:29:49:82:ae:b8:7a:83:1c:2b:f4:7f: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F2:E7:DA:D5:F9:37:9A:E9:86:ED:97:89:B7:47:DB:AC:5B:09:9F X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:7c:64:0c:17:f0:b5:6f:95:7e:97:da:7f:49:9f:b7:23: a1:32:67:a6:3c:71:ad:81:7a:ee:57:86:e8:ec:84:55:52:fb: 17:34:59:9d:a2:3a:86:fd:dc:30:7c:6d:95:73:9a:96:9d:83: ee:3b:f0:0a:39:8b:12:36:5b:d0:45:44:52:23:e8:41:6b:b2: 7b:9a:e5:69:69:1b:7b:96:de:13:bd:1e:85:33:9a:d2:18:97: ea:33:9b:1a:c1:d4:64:3d:1e:f8:c9:56:35:32:9c:bc:07:a7: 63:37:b1:f3:e8:3e:16:a7:7a:9f:82:b4:4b:f0:0b:0d:75:07: 82:f6:b9:fb:f2:bd:06:4c:fe:39:83:d9:d4:0e:70:3c:d3:fb: ca:80:11:72:b1:83:d3:fe:44:d0:c4:a9:8c:4b:42:b7:9c:b5: 73:df:c8:4a:e9:1d:77:25:a8:45:20:e0:0f:f0:88:94:74:af: c9:6d:dd:53:d6:99:e2:e5:fc:cd:9c:b3:ba:33:94:46:d2:24: 0e:ac:6a:81:f6:56:83:d6:23:20:48:07:e4:1f:2f:ef:18:2b: c2:ef:3e:50:de:61:01:54:99:10:93:2f:a5:f9:b1:b9:46:5b: 48:b7:12:6a:7e:2a:33:7c:71:fb:ed:be:53:cf:9a:cf:16:73: a3:1e:d3:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjQwNTAyMTQzNzU5WhcNMjQwNTA5MTQzNzU5WjAYMRYwFAYD VQQDEw02NjMzYTU0Ny1kZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5+wm72waKw3MuI4ChQn3pUOR8chCuM0NJRBPdOcRl8EfmgzTeYx6RWItrg0 KTeKI2Zk4Bk4lP+J4csJupBU4xivVcfX07vNyCVSGNRQW1tF3kIiv4/nLuQaLHxr DoowXKd4e9NU235raJoOa/sv7kmBzZXpXVPHLGETIqsIBt73AGqMJTpv7KZ+C0iU 93gYJZC5SxkcQBwM0VjT5eq3TQ9kk7OMKdxABY7TMmafgQZjTPKzCFhcU+TPUfhK gftUctgjCJ2HFcr2SdQogIydYIl7EEwOtpFTJP7bPPRWvCuTyugo6HHg8/mpwcq9 eCAiOpm8KUmCrrh6gxwr9H9PMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPy59rV +Tea6Ybtl4m3R9usWwmfMB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZHxkDBfwtW+Vfpfaf0mftyOhMmemPHGtgXruV4bo7IRVUvsXNFmd ojqG/dwwfG2Vc5qWnYPuO/AKOYsSNlvQRURSI+hBa7J7muVpaRt7lt4TvR6FM5rS GJfqM5sawdRkPR74yVY1Mpy8B6djN7Hz6D4Wp3qfgrRL8AsNdQeC9rn78r0GTP45 g9nUDnA80/vKgBFysYPT/kTQxKmMS0K3nLVz38hK6R13JahFIOAP8IiUdK/Jbd1T 1pni5fzNnLO6M5RG0iQOrGqB9laD1iMgSAfkHy/vGCvC7z5Q3mEBVJkQky+l+bG5 RltItxJqfiozfHH77b5Tz5rPFnOjHtO5 -----END CERTIFICATE-----Generated at Thu May 2 17:18:28 2024 by rpki-client on console-ams.rpki-client.org