$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: 2xrXLQdY+A6ZmJae1kB0JvGEo3cbDC4Z3E8sxbeUI3g= Subject key identifier: 9D:81:2C:AD:85:E2:EB:7C:5B:A7:AD:1B:2C:FF:CE:F7:9D:A5:54:3C Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0683 Signing time: Sat 04 May 2024 23:32:50 +0000 Manifest this update: Sat 04 May 2024 23:32:50 +0000 Manifest next update: Sat 11 May 2024 23:32:50 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: 3zMbQ3BqO2+1e/9HRzQa3OwotmFU/MYXKcNxQMmeJwE=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 0sPE2HMnGEt5pe4Qz8R1PIpfMDsMsd+LZ7qv+kK16e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: May 4 23:32:50 2024 GMT Not After : May 11 23:32:50 2024 GMT Subject: CN=6636c5a2-9a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d7:e2:9b:45:ce:02:0b:fb:94:63:bb:6c:23: 7c:cb:59:dd:8b:26:5b:9d:89:30:e0:c7:d2:28:b1: 2d:1c:c2:63:b7:65:1c:0d:d0:fe:d6:18:82:c6:be: c6:b5:69:c0:17:42:82:cc:65:a8:5c:4a:ae:12:db: 3d:2e:0f:6e:01:bc:16:56:45:5f:a2:f8:a5:9d:d4: 18:3b:0c:65:c7:7a:a4:6e:57:27:46:97:ad:ba:cb: f9:df:b1:ee:eb:c1:6b:25:a7:3c:96:5e:06:f1:33: 50:40:67:5e:20:3a:fb:28:0d:b5:98:b8:59:2f:b5: ec:9f:94:bc:b5:23:3f:52:db:7f:c2:1d:d8:1b:3f: cb:1c:3c:6e:af:30:c5:e6:c6:d2:cd:30:c5:7c:e3: 46:26:57:10:a8:4c:fa:9f:56:07:ee:5b:d9:90:b6: a5:30:50:ee:a4:9a:27:ac:0b:00:62:b9:11:6c:e5: bf:cd:6f:27:b5:0f:d1:b8:ed:39:a7:9c:f5:fa:9b: b2:2c:0c:d6:3b:e6:d2:8e:1f:d1:20:86:e9:85:28: ff:44:f9:df:a8:58:ad:13:0e:e0:2e:27:d2:bf:e5: db:fa:66:f0:36:35:87:d9:13:7d:d2:51:88:cb:50: 85:2d:6b:f2:d5:95:f2:8d:71:d1:30:7c:fe:3d:66: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:2C:AD:85:E2:EB:7C:5B:A7:AD:1B:2C:FF:CE:F7:9D:A5:54:3C X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c6:de:1f:9c:18:89:02:d9:16:a9:94:ff:11:14:95:05:8e: 1f:bc:54:6c:29:f4:65:a5:ea:ac:e6:70:f3:0b:4f:ea:06:7c: 60:cf:4c:a5:da:76:8e:1d:96:52:1c:51:4f:01:af:d3:40:b6: bd:03:55:08:e3:6f:06:b5:3c:aa:bc:15:0d:fa:84:b5:27:55: de:9c:5d:45:b4:af:58:7d:9a:65:bc:1a:30:78:4f:ec:7f:cb: b9:56:45:42:d8:1f:43:a6:60:5d:54:9a:3b:0f:3b:d9:45:f1: f4:43:76:cb:f6:29:9d:e2:88:69:27:87:be:b4:49:6b:d5:ad: 15:b2:fc:f5:b0:eb:a7:50:53:b8:c7:49:03:34:eb:70:47:f3: b7:c1:6a:70:80:78:a0:9f:66:e0:e8:82:a2:00:0a:3f:3b:db: e9:fd:cb:d1:33:bb:22:5f:81:8e:31:62:83:52:5d:6d:28:e1: e4:b0:0d:6e:78:9f:6e:15:8a:cc:a3:40:b2:df:56:de:84:e9: 4f:63:47:e1:67:87:d7:8b:71:49:ce:bf:d4:7a:2a:96:b7:a2: 6e:86:e5:1b:37:ef:4e:53:ce:d5:01:79:3d:8c:31:b4:bd:a0: 9f:8a:0d:ad:80:03:61:49:26:a1:b3:fe:1f:10:14:28:e8:01: 4b:09:0e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjQwNTA0MjMzMjUwWhcNMjQwNTExMjMzMjUwWjAYMRYwFAYD VQQDEw02NjM2YzVhMi05YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dfim0XOAgv7lGO7bCN8y1ndiyZbnYkw4MfSKLEtHMJjt2UcDdD+1hiCxr7G tWnAF0KCzGWoXEquEts9Lg9uAbwWVkVfovilndQYOwxlx3qkblcnRpetusv537Hu 68FrJac8ll4G8TNQQGdeIDr7KA21mLhZL7Xsn5S8tSM/Utt/wh3YGz/LHDxurzDF 5sbSzTDFfONGJlcQqEz6n1YH7lvZkLalMFDupJonrAsAYrkRbOW/zW8ntQ/RuO05 p5z1+puyLAzWO+bSjh/RIIbphSj/RPnfqFitEw7gLifSv+Xb+mbwNjWH2RN90lGI y1CFLWvy1ZXyjXHRMHz+PWZbiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2BLK2F 4ut8W6etGyz/zvedpVQ8MB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNxt4fnBiJAtkWqZT/ERSVBY4fvFRsKfRlpeqs5nDzC0/qBnxgz0yl 2naOHZZSHFFPAa/TQLa9A1UI428GtTyqvBUN+oS1J1XenF1FtK9YfZplvBoweE/s f8u5VkVC2B9DpmBdVJo7DzvZRfH0Q3bL9imd4ohpJ4e+tElr1a0Vsvz1sOunUFO4 x0kDNOtwR/O3wWpwgHign2bg6IKiAAo/O9vp/cvRM7siX4GOMWKDUl1tKOHksA1u eJ9uFYrMo0Cy31behOlPY0fhZ4fXi3FJzr/UeiqWt6JuhuUbN+9OU87VAXk9jDG0 vaCfig2tgANhSSahs/4fEBQo6AFLCQ6h -----END CERTIFICATE-----Generated at Sun May 5 00:14:43 2024 by rpki-client on console-ams.rpki-client.org