$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft File: HID51XftxGA1IDFKF6RctqfFwWA.mft (raw, json) Hash identifier: T6XbHzTnC6tS38ixW/JF5+82I1l8UkHfndOF2YZrGqg= Subject key identifier: 8E:FE:08:B6:52:D9:6B:8A:16:8A:38:2C:8F:C3:FC:B6:BF:02:1A:22 Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 Certificate issuer: /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Certificate serial: 0C19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft Manifest number: 0C13 Signing time: Thu 02 May 2024 19:08:11 +0000 Manifest this update: Thu 02 May 2024 19:08:10 +0000 Manifest next update: Thu 09 May 2024 19:08:10 +0000 Files and hashes: 1: HID51XftxGA1IDFKF6RctqfFwWA.crl (hash: wv27uVKVs6iVh5Fsx+AAoDB8Pz8SmBEqRcR/ZiXN+3U=) 2: B174D294F50011EEB5298B64C4F9AE02.roa (hash: DmsBe/nWUMAmA56V3udTaCz0NsFVXi5Q9O4KvJmVDd0=) 3: B2531496F50011EEB5298B64C4F9AE02.roa (hash: y2QuO9udDY8DoDry5kKL3qKlCchHAD8mHA+hKGxkvw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Validity Not Before: May 2 19:08:10 2024 GMT Not After : May 9 19:08:10 2024 GMT Subject: CN=6633e49a-8e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:ea:eb:22:c9:32:86:90:5b:5b:da:73:72: f6:7b:71:7b:e4:af:61:be:97:ba:ab:27:0f:8f:7c: 6b:c6:b7:1b:c4:82:e4:26:b9:58:38:a9:a4:78:79: 8b:0f:8f:a3:fe:b5:2f:1d:b0:e6:df:e2:69:13:b0: e0:81:83:cf:10:e7:b1:a6:5e:09:9b:d9:11:28:49: 9f:d2:f4:f2:e8:ef:c5:22:b0:d4:b9:de:ab:80:a5: 20:eb:f9:68:0d:85:8e:e6:9f:66:ea:e3:b1:7e:55: 40:db:d8:bf:e9:80:1e:d9:ca:82:5d:f3:d4:1d:80: 43:40:21:f9:f6:85:5c:7d:ad:f1:bc:7a:50:55:73: 16:98:0d:90:08:c1:63:8d:c4:f7:35:f8:64:57:42: b1:cc:e3:61:51:1a:f9:7e:00:1e:8c:5a:68:7f:34: 26:f0:ee:b2:42:4d:d1:cb:fd:a9:59:ee:de:3e:df: 34:e0:24:b3:18:7f:00:a0:ed:74:b6:80:6f:14:d4: fe:ae:3c:e8:e0:fa:a4:b4:4d:b1:66:14:5b:99:3d: b5:32:df:29:4a:04:99:b8:08:e4:c2:12:84:6a:b7: 3a:8e:56:e4:3d:9b:ab:1c:3f:b3:05:74:8b:bd:9d: 71:b5:a9:44:8e:63:4e:ba:99:28:b9:2f:99:57:70: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FE:08:B6:52:D9:6B:8A:16:8A:38:2C:8F:C3:FC:B6:BF:02:1A:22 X509v3 Authority Key Identifier: keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a6:7d:ed:d7:ec:c7:14:01:b5:10:67:6f:ea:94:bb:a6:9e: 41:be:a6:87:78:ba:89:90:b9:90:07:ea:b4:04:14:8c:f0:d3: ed:36:99:99:0b:56:28:6a:c0:2c:85:60:a4:3e:5a:1a:ea:cb: 1a:65:e6:a8:f4:95:e5:2d:9e:97:96:ab:02:8e:aa:9f:24:36: 08:e5:23:b9:36:75:eb:9a:50:17:36:4d:99:72:e3:13:f7:91: c6:d8:22:1d:24:05:46:bf:f0:82:27:34:33:21:d9:90:2b:02: 3f:71:4e:6e:5e:38:c2:79:46:8e:8b:89:1f:c1:22:69:af:4f: 18:f8:62:1e:7b:cc:08:6f:39:ff:3a:47:0a:b6:6f:4d:8e:fb: 42:a1:08:2c:0d:5f:cb:c7:1e:b1:d6:dd:cb:a7:3a:b6:6a:02: a3:ce:88:84:83:de:33:e4:8d:7e:27:83:dc:a4:e3:cb:f6:d6: 02:8d:0d:f3:62:c4:1c:ac:57:f8:df:6f:90:15:2c:86:e9:9a: f7:90:01:ef:78:da:5a:3b:ee:18:a6:40:78:be:4c:32:7b:84: b2:d3:7d:ee:65:ae:e2:ed:13:a7:bb:d5:a7:17:e7:10:c4:40: ae:c9:32:c2:27:44:5c:ef:43:8a:d7:9e:65:fe:ab:e3:c9:96: 43:74:17:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyREQxMTAvBgNVBAUTKDFDODBGOUQ1NzdFREM0NjAzNTIwMzE0QTE3QTQ1Q0I2 QTdDNUMxNjAwHhcNMjQwNTAyMTkwODEwWhcNMjQwNTA5MTkwODEwWjAYMRYwFAYD VQQDEw02NjMzZTQ5YS04ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7nq6yLJMoaQW1vac3L2e3F75K9hvpe6qycPj3xrxrcbxILkJrlYOKmkeHmL D4+j/rUvHbDm3+JpE7DggYPPEOexpl4Jm9kRKEmf0vTy6O/FIrDUud6rgKUg6/lo DYWO5p9m6uOxflVA29i/6YAe2cqCXfPUHYBDQCH59oVcfa3xvHpQVXMWmA2QCMFj jcT3NfhkV0KxzONhURr5fgAejFpofzQm8O6yQk3Ry/2pWe7ePt804CSzGH8AoO10 toBvFNT+rjzo4PqktE2xZhRbmT21Mt8pSgSZuAjkwhKEarc6jlbkPZurHD+zBXSL vZ1xtalEjmNOupkouS+ZV3CjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7+CLZS 2WuKFoo4LI/D/La/AhoiMB8GA1UdIwQYMBaAFByA+dV37cRgNSAxShekXLanxcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDJERC85Mzk3OTc0NkU2 NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhHQTFJREZLRjZSY3RxZkZ3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hJRDUxWGZ0eEdBMUlERktGNlJjdHFmRndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDJERC85Mzk3OTc0NkU2NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhH QTFJREZLRjZSY3RxZkZ3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxpn3t1+zHFAG1EGdv6pS7pp5BvqaHeLqJkLmQB+q0BBSM8NPtNpmZ C1YoasAshWCkPloa6ssaZeao9JXlLZ6XlqsCjqqfJDYI5SO5NnXrmlAXNk2ZcuMT 95HG2CIdJAVGv/CCJzQzIdmQKwI/cU5uXjjCeUaOi4kfwSJpr08Y+GIee8wIbzn/ OkcKtm9NjvtCoQgsDV/Lxx6x1t3Lpzq2agKjzoiEg94z5I1+J4PcpOPL9tYCjQ3z YsQcrFf432+QFSyG6Zr3kAHveNpaO+4YpkB4vkwye4Sy033uZa7i7ROnu9WnF+cQ xECuyTLCJ0Rc70OK155l/qvjyZZDdBcq -----END CERTIFICATE-----Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org