$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: TkiPfQJvtjsvLRxjIlscMCr6JGrbL5HycIpmtqA3VLY= Subject key identifier: E6:B7:FD:86:ED:D0:9D:9B:8B:F4:96:7D:E5:4B:18:94:95:D9:DF:46 Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 5A Signing time: Wed 15 May 2024 07:49:50 +0000 Manifest this update: Wed 15 May 2024 07:49:49 +0000 Manifest next update: Wed 22 May 2024 07:49:49 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: LZdcvcQZPUrhBQqFRn4Rk6up0aUM+SDBj0eT9LcJGQQ=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: yux+dEwmBwNyU/hTLCnztj/y9rn0KtneR4FPzepCfkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: May 15 07:49:49 2024 GMT Not After : May 22 07:49:49 2024 GMT Subject: CN=6644691d-bd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:57:d7:f1:58:a6:a7:be:a2:53:54:3e:2c:dd: 20:6c:40:5b:4d:be:64:0e:18:15:81:24:a7:e8:33: 80:76:55:e7:31:94:5c:d5:c1:93:1c:62:35:53:55: c7:82:f7:0e:fa:d1:a8:7c:48:a4:54:b1:d6:cb:ef: 15:b5:85:bc:b9:89:f3:bc:03:8d:07:79:3d:79:89: 2c:ce:3c:03:22:12:d1:2e:2a:82:d7:92:5c:29:08: 4b:d6:91:ff:ed:d2:3a:a5:d7:04:93:da:d4:f3:32: a7:27:65:ba:e3:57:11:fc:0f:05:90:70:86:73:4b: 2d:49:4f:ac:1f:9f:c4:c4:d8:fd:69:75:84:2c:d7: 4d:75:b1:17:66:bc:2c:3d:cf:a5:73:a1:df:df:3d: 7c:64:d7:02:cd:b2:f3:ed:19:b4:92:e0:37:14:58: 75:46:46:35:b8:b9:01:d7:14:be:70:e6:90:05:48: d6:56:f9:1e:90:08:a8:85:e0:e1:b4:1e:5f:e7:57: 4a:b8:20:3b:4b:71:9c:59:87:c9:3c:19:e2:b0:2e: 7c:68:85:d6:4f:63:ec:65:7b:f0:24:0f:ad:5e:1e: 0f:a0:24:99:02:b0:01:5f:6b:b9:4f:3b:ee:34:c6: 92:c1:41:42:f6:23:82:cc:44:27:77:c1:cf:3d:95: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B7:FD:86:ED:D0:9D:9B:8B:F4:96:7D:E5:4B:18:94:95:D9:DF:46 X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:a9:2d:62:b6:1f:c3:80:09:85:2b:87:c0:38:a0:24:8f: cc:48:0a:3b:c1:3d:c6:6b:0c:57:3f:e5:e6:45:f0:9c:28:eb: b2:b3:25:b6:28:ea:6a:99:bb:4d:fb:ff:17:1c:3a:2d:68:fc: da:0f:12:03:db:93:72:80:24:b4:66:d4:8c:c4:55:9f:8c:07: 25:ef:33:25:9f:20:08:03:0c:cf:21:3c:77:79:48:23:d1:90: 87:b3:62:c6:94:07:39:e6:57:84:d0:9f:32:e3:d8:9e:7a:f1: be:11:85:80:6b:c3:d7:a2:f5:62:c5:4f:7c:57:20:be:f1:d1: 7a:2d:16:7a:aa:77:7f:f5:47:f4:1f:08:aa:0f:cf:a4:5b:fb: f7:57:f9:44:15:a6:b3:a4:f9:aa:8f:44:08:08:50:ef:24:35: 43:27:66:5a:dd:1b:39:79:ce:22:40:c6:89:2d:9f:1e:d8:40: f9:6b:9f:ea:6e:13:8f:96:5c:83:c6:06:ba:63:60:2c:22:ee: 8a:0f:6c:eb:69:97:5c:c3:c9:97:8d:5c:67:1d:1b:68:ea:1d: ce:5b:98:94:2b:dd:2a:6b:0d:8b:a6:01:58:5d:fe:51:42:61: c1:bb:4c:be:93:0a:70:09:98:83:e6:b7:01:fe:6c:a2:d8:ad: 44:f2:9d:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc2NzExMC8GA1UEBRMoODQ2OEIwMjE5N0ZDOUI3NzBBRjg0MDU1N0JGNDE1QTBC NjEzODIwRDAeFw0yNDA1MTUwNzQ5NDlaFw0yNDA1MjIwNzQ5NDlaMBgxFjAUBgNV BAMTDTY2NDQ2OTFkLWJkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuV9fxWKanvqJTVD4s3SBsQFtNvmQOGBWBJKfoM4B2VecxlFzVwZMcYjVTVceC 9w760ah8SKRUsdbL7xW1hby5ifO8A40HeT15iSzOPAMiEtEuKoLXklwpCEvWkf/t 0jql1wST2tTzMqcnZbrjVxH8DwWQcIZzSy1JT6wfn8TE2P1pdYQs1011sRdmvCw9 z6Vzod/fPXxk1wLNsvPtGbSS4DcUWHVGRjW4uQHXFL5w5pAFSNZW+R6QCKiF4OG0 Hl/nV0q4IDtLcZxZh8k8GeKwLnxohdZPY+xle/AkD61eHg+gJJkCsAFfa7lPO+40 xpLBQUL2I4LMRCd3wc89la4jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5rf9hu3Q nZuL9JZ95UsYlJXZ30YwHwYDVR0jBBgwFoAUhGiwIZf8m3cK+EBVe/QVoLYTgg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzY3LzdCQzYxRDgyODg0 QjExRUU4MTdGQjY3RkM0RjlBRTAyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEdpd0laZjhtM2NLLUVCVmVfUVZvTFlUZ2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzY3LzdCQzYxRDgyODg0QjExRUU4MTdGQjY3RkM0RjlBRTAyL2hHaXdJWmY4bTNj Sy1FQlZlX1FWb0xZVGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEkEqS1ith/DgAmFK4fAOKAkj8xICjvBPcZrDFc/5eZF8Jwo67KzJbYo 6mqZu037/xccOi1o/NoPEgPbk3KAJLRm1IzEVZ+MByXvMyWfIAgDDM8hPHd5SCPR kIezYsaUBznmV4TQnzLj2J568b4RhYBrw9ei9WLFT3xXIL7x0XotFnqqd3/1R/Qf CKoPz6Rb+/dX+UQVprOk+aqPRAgIUO8kNUMnZlrdGzl5ziJAxoktnx7YQPlrn+pu E4+WXIPGBrpjYCwi7ooPbOtpl1zDyZeNXGcdG2jqHc5bmJQr3SprDYumAVhd/lFC YcG7TL6TCnAJmIPmtwH+bKLYrUTynTk= -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org