$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: tZ8fl6Z2u6ZxnuAUdY7ZESSF+8HvRTOtnS/IofdNmQ8= Subject key identifier: FD:4F:F6:C0:FC:3B:10:D9:8A:5F:0A:1B:3D:C6:B7:9B:CC:E5:80:D0 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1C4F Signing time: Sat 04 May 2024 16:38:56 +0000 Manifest this update: Sat 04 May 2024 16:38:55 +0000 Manifest next update: Sat 11 May 2024 16:38:55 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: tfYOVQkPpoXWfy+gQEYRn/KFYorerPc8lUl1rZugtf4=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: lgyUxKxQwD/USXERFmZ/C5l2ud571oJQXSeGgzVlXQk=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: gQbrYaQX93Dy7t6tPlyoJ+ydeyI3aXJAqSLNxQcjczs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7268 (0x1c64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: May 4 16:38:55 2024 GMT Not After : May 11 16:38:55 2024 GMT Subject: CN=6636649f-c090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:5a:ee:dc:f0:73:ea:ce:63:99:9a:96:2e: 61:74:09:2f:04:dc:ff:31:b3:25:71:cd:c1:4e:24: ec:56:83:0f:62:a5:6d:f6:63:86:cc:93:e6:59:22: c3:f1:18:d4:52:ee:05:cb:e9:2f:71:ec:cb:6f:82: dd:d0:13:d3:a7:39:f7:f6:f4:d9:e7:6f:eb:84:bd: bd:56:4d:26:31:7d:4a:95:69:80:21:12:f5:16:b6: d5:8e:59:7e:0f:fd:53:65:bb:04:5e:71:19:7f:fa: 1c:a9:e7:ec:59:fc:71:98:5e:3a:4b:54:e0:e6:37: 05:94:d0:71:48:6d:92:f5:e5:ea:7f:cb:6d:2f:a7: 81:5f:9a:8b:64:b4:2d:41:49:d5:b8:84:d8:80:c8: 7c:75:51:2a:31:9e:cb:88:63:e2:87:26:44:18:6e: 7f:e3:4d:ec:d8:52:9a:a0:c8:0e:2b:0c:25:43:c9: a9:4e:91:a7:0c:66:db:ec:be:e4:a1:e1:1c:96:1f: 4c:8c:09:db:fe:14:c4:6e:b8:d4:a0:d7:b4:dd:3c: 63:29:f3:70:80:9d:9d:43:76:ac:a2:46:93:eb:80: 5a:6f:b0:e1:c8:4d:50:33:be:c7:88:d1:47:23:4d: ee:3e:80:0b:f5:f8:d1:7b:c5:03:71:48:7b:d5:90: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4F:F6:C0:FC:3B:10:D9:8A:5F:0A:1B:3D:C6:B7:9B:CC:E5:80:D0 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2e:f9:60:32:d0:eb:67:90:8f:4c:f5:60:4a:9c:91:c4:61: dc:a7:ec:6e:28:b2:a6:21:f8:ef:a5:b6:14:a0:80:98:3e:88: 4f:e1:d2:46:b4:ca:b7:b9:a7:04:f9:13:a1:50:82:f3:78:56: 6c:f9:74:63:67:d9:ec:11:5f:d2:3d:f0:59:71:ab:cd:12:23: fe:a4:62:2e:2d:e5:bd:fb:b7:20:2c:7d:75:fc:85:44:d3:ae: 69:44:99:93:08:24:30:77:9d:37:3f:1c:40:38:e8:80:c3:8b: 32:d3:20:24:8e:be:47:cc:ef:22:bf:ac:c4:f4:e2:94:2c:2f: bc:4f:42:e4:51:8c:26:c9:80:3c:f4:10:02:c6:0c:13:76:6d: c1:1f:b6:67:dc:51:c2:8d:4f:5d:f2:c4:ba:3d:9b:e2:36:e7: 40:17:0b:73:30:2d:72:dc:67:93:71:94:0f:af:63:6e:18:f6: d4:e0:bf:c7:7b:0d:fe:5a:03:84:98:ca:e1:9f:cb:20:d0:c1: 5e:83:5b:d6:76:09:48:fc:19:04:66:43:b9:24:f5:67:6e:26: 29:0f:62:67:53:df:70:0f:60:2c:70:ba:28:08:73:04:d9:d5: c9:69:c6:49:14:fa:3a:cd:2b:36:fa:39:8e:62:cb:82:2a:77: d6:5f:9b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjQwNTA0MTYzODU1WhcNMjQwNTExMTYzODU1WjAYMRYwFAYD VQQDEw02NjM2NjQ5Zi1jMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yRa7tzwc+rOY5mali5hdAkvBNz/MbMlcc3BTiTsVoMPYqVt9mOGzJPmWSLD 8RjUUu4Fy+kvcezLb4Ld0BPTpzn39vTZ52/rhL29Vk0mMX1KlWmAIRL1FrbVjll+ D/1TZbsEXnEZf/ocqefsWfxxmF46S1Tg5jcFlNBxSG2S9eXqf8ttL6eBX5qLZLQt QUnVuITYgMh8dVEqMZ7LiGPihyZEGG5/403s2FKaoMgOKwwlQ8mpTpGnDGbb7L7k oeEclh9MjAnb/hTEbrjUoNe03TxjKfNwgJ2dQ3asokaT64Bab7DhyE1QM77HiNFH I03uPoAL9fjRe8UDcUh71ZCkzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1P9sD8 OxDZil8KGz3Gt5vM5YDQMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPLvlgMtDrZ5CPTPVgSpyRxGHcp+xuKLKmIfjvpbYUoICYPohP4dJG tMq3uacE+ROhUILzeFZs+XRjZ9nsEV/SPfBZcavNEiP+pGIuLeW9+7cgLH11/IVE 065pRJmTCCQwd503PxxAOOiAw4sy0yAkjr5HzO8iv6zE9OKULC+8T0LkUYwmyYA8 9BACxgwTdm3BH7Zn3FHCjU9d8sS6PZviNudAFwtzMC1y3GeTcZQPr2NuGPbU4L/H ew3+WgOEmMrhn8sg0MFeg1vWdglI/BkEZkO5JPVnbiYpD2JnU99wD2AscLooCHME 2dXJacZJFPo6zSs2+jmOYsuCKnfWX5u1 -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org