$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft File: HcXnECl8UjHHsqVloUYFURjmUmQ.mft (raw, json) Hash identifier: tdaNSugRH3d8kJDG6sAH7N6rBIxBeJ4b1TLaVAmGHo0= Subject key identifier: D9:3D:C1:76:2E:87:37:6C:7A:7A:F4:42:EE:CA:63:93:61:6C:E0:A9 Authority key identifier: 1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64 Certificate issuer: /CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft Manifest number: 09E3 Signing time: Tue 30 Apr 2024 21:40:38 +0000 Manifest this update: Tue 30 Apr 2024 21:40:38 +0000 Manifest next update: Tue 07 May 2024 21:40:38 +0000 Files and hashes: 1: HcXnECl8UjHHsqVloUYFURjmUmQ.crl (hash: LHI+gAjgbGBqPVFjDNQZwCmpDbK0UNT6uyyfvG9XVIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264 Validity Not Before: Apr 30 21:40:38 2024 GMT Not After : May 7 21:40:38 2024 GMT Subject: CN=66316556-4629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:42:23:7b:0d:4e:1e:02:b9:24:72:34:9e: 46:ab:d2:7f:8c:91:a5:58:db:64:61:46:e3:94:e5: 79:d7:2d:60:ac:3d:49:f4:a7:78:08:3e:90:74:68: fc:9b:43:f1:88:1c:f3:33:12:35:63:85:ca:ab:0c: e4:17:2c:c5:9b:a5:d1:70:ad:84:49:1a:20:ad:68: b8:93:e7:c1:21:d1:bf:e0:f5:11:43:ab:6c:34:8a: d1:96:79:b3:87:7f:2f:98:c1:a3:81:9a:b0:33:bc: 52:5c:46:78:61:6b:7a:d4:c2:78:d3:69:e9:59:99: 57:a1:62:94:c5:83:4b:5c:45:83:e9:82:72:8a:55: d4:cf:53:21:6b:e6:46:eb:c7:56:d6:7a:35:ae:78: 9b:80:72:16:af:1d:43:b2:aa:fc:85:c1:27:c6:c4: 20:85:48:ff:bc:8d:62:db:e8:29:d6:a4:0d:51:dc: 25:46:64:97:7b:56:16:9f:c5:d7:e1:0e:e3:97:06: db:67:d7:4a:e9:08:c4:92:ae:99:b7:81:7e:a5:67: 92:82:42:ee:3b:dd:d7:fe:46:25:b8:53:9a:2f:d6: 23:7a:cd:16:a4:7c:92:ea:14:32:24:79:2a:d1:ba: 6f:a7:d8:bf:54:33:42:cd:68:00:ca:6b:69:2d:af: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3D:C1:76:2E:87:37:6C:7A:7A:F4:42:EE:CA:63:93:61:6C:E0:A9 X509v3 Authority Key Identifier: keyid:1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f1:f9:8b:cc:9c:10:25:ef:bb:20:0b:be:13:2f:37:14:94: 53:65:de:1e:c6:65:62:65:be:a3:36:0a:62:59:f0:5c:84:15: 2c:65:dc:e6:f8:f4:6a:9d:fa:e5:30:74:a5:91:b9:fb:47:fc: e0:f4:6e:6c:b6:57:6f:cb:b5:48:a1:b7:02:c9:82:da:06:d1: ff:48:d3:95:6c:06:05:64:15:05:9d:06:b3:59:7b:df:56:08: 01:65:51:7f:8f:9f:9f:f4:43:5e:35:db:22:5c:b7:53:be:16: 13:68:26:f7:6f:1f:da:cd:62:58:8b:66:22:8a:28:c5:72:ab: 6c:32:96:87:ca:66:83:3e:9b:53:8e:29:34:98:8f:5b:86:17: b0:36:55:09:f1:a3:d7:7a:9a:63:52:75:a1:8b:d5:ff:24:39: 22:ce:ef:24:50:5a:9d:1f:e8:e3:ac:10:3f:db:72:57:dd:55: 95:27:82:5d:76:0a:c3:67:79:c6:07:47:28:92:81:75:09:4a: f6:63:3a:28:cf:b1:66:37:0f:e1:07:e1:ef:7a:5f:b4:bb:db: 84:bc:f0:c9:23:be:d4:02:54:b7:49:c4:29:f6:72:62:37:b7: e9:2a:f9:a0:d7:8d:f8:27:18:d3:cf:4b:06:64:1b:f9:ea:fc: 08:e9:b3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdEQzMxMTAvBgNVBAUTKDFEQzVFNzEwMjk3QzUyMzFDN0IyQTU2NUExNDYwNTUx MThFNjUyNjQwHhcNMjQwNDMwMjE0MDM4WhcNMjQwNTA3MjE0MDM4WjAYMRYwFAYD VQQDEw02NjMxNjU1Ni00NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D1CI3sNTh4CuSRyNJ5Gq9J/jJGlWNtkYUbjlOV51y1grD1J9Kd4CD6QdGj8 m0PxiBzzMxI1Y4XKqwzkFyzFm6XRcK2ESRogrWi4k+fBIdG/4PURQ6tsNIrRlnmz h38vmMGjgZqwM7xSXEZ4YWt61MJ402npWZlXoWKUxYNLXEWD6YJyilXUz1Mha+ZG 68dW1no1rnibgHIWrx1Dsqr8hcEnxsQghUj/vI1i2+gp1qQNUdwlRmSXe1YWn8XX 4Q7jlwbbZ9dK6QjEkq6Zt4F+pWeSgkLuO93X/kYluFOaL9Yjes0WpHyS6hQyJHkq 0bpvp9i/VDNCzWgAymtpLa/8BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk9wXYu hzdsenr0Qu7KY5NhbOCpMB8GA1UdIwQYMBaAFB3F5xApfFIxx7KlZaFGBVEY5lJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RDMy9FNjUxMThBMjg0 QTYxMUVBQUM1MTQyMUZDNEY5QUUwMi9IY1huRUNsOFVqSEhzcVZsb1VZRlVSam1V bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hjWG5FQ2w4VWpISHNxVmxvVVlGVVJqbVVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RDMy9FNjUxMThBMjg0QTYxMUVBQUM1MTQyMUZDNEY5QUUwMi9IY1huRUNsOFVq SEhzcVZsb1VZRlVSam1VbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX8fmLzJwQJe+7IAu+Ey83FJRTZd4exmViZb6jNgpiWfBchBUsZdzm +PRqnfrlMHSlkbn7R/zg9G5stldvy7VIobcCyYLaBtH/SNOVbAYFZBUFnQazWXvf VggBZVF/j5+f9ENeNdsiXLdTvhYTaCb3bx/azWJYi2YiiijFcqtsMpaHymaDPptT jik0mI9bhhewNlUJ8aPXeppjUnWhi9X/JDkizu8kUFqdH+jjrBA/23JX3VWVJ4Jd dgrDZ3nGB0cokoF1CUr2Yzooz7FmNw/hB+Hvel+0u9uEvPDJI77UAlS3ScQp9nJi N7fpKvmg1434JxjTz0sGZBv56vwI6bMi -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:16 2024 by rpki-client on console-fra.rpki-client.org