$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: AhbufZiWx4QwUU+CJ9xO2qdH2zzIC2VbBxNyo8y0yBc= Subject key identifier: 58:CA:2D:88:8C:6D:77:17:BF:45:28:E4:EC:E3:D2:41:2A:E4:53:1E Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: FB Signing time: Fri 03 May 2024 05:42:07 +0000 Manifest this update: Fri 03 May 2024 05:42:07 +0000 Manifest next update: Fri 10 May 2024 05:42:07 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: //Zp1oL0GQqZZORSROLFIE1Kaafitjjy39yd/JvoPQU=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: 0Idm6A6nWK/fQZNYq7K+eosKvzzmF58y5ztchLiLTj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: May 3 05:42:07 2024 GMT Not After : May 10 05:42:07 2024 GMT Subject: CN=6634792f-41b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:b4:d5:16:58:ce:2d:82:01:aa:66:0f:23: 20:d8:a2:c0:aa:6b:7e:52:57:c1:af:41:45:aa:c6: 82:43:d8:78:73:b2:45:f2:81:9d:9c:b6:82:b2:fd: 37:15:cd:6e:87:36:14:e8:45:5c:9b:5c:e7:de:b0: d5:67:4d:b0:e9:e8:ae:c8:6e:ca:d5:9b:80:73:82: 5f:e8:ea:55:90:d8:98:27:e8:96:9c:08:d9:72:84: 2c:1f:8a:ea:ee:91:28:9a:ea:a9:ca:88:03:f4:5f: 0b:93:79:62:1c:f4:03:04:1e:19:a7:d2:ec:3e:8f: 0e:52:be:17:cb:3a:1f:cf:96:f8:bb:6a:8b:40:31: b4:a7:ca:50:5e:e7:8f:63:d6:15:f0:75:8a:6c:99: 48:d9:42:b8:27:0c:aa:b9:87:6a:aa:23:76:59:aa: bd:1f:4c:a6:9d:ae:0e:6e:60:bb:b4:ac:c6:08:26: b4:de:e3:60:b5:24:40:d8:21:30:03:b3:f4:02:0f: 95:fa:30:a3:3e:71:34:b6:d6:8e:1c:ee:49:df:a4: b2:33:3e:83:4a:87:a2:4a:a1:7d:f1:08:75:37:c0: d6:af:3a:78:67:f0:cf:1f:8c:8a:be:01:8b:22:d6: 56:20:55:2b:8d:60:11:9d:10:56:64:33:af:49:89: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CA:2D:88:8C:6D:77:17:BF:45:28:E4:EC:E3:D2:41:2A:E4:53:1E X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:38:01:ff:55:06:9f:43:d6:88:72:54:a2:6a:7b:20:01:2d: 52:b0:36:ca:26:fb:25:28:b7:b4:a7:76:2e:b6:4d:09:15:60: 05:7f:4d:86:4a:45:f6:97:f2:83:c6:5e:6a:63:7f:5e:5d:b9: b2:bd:f2:f6:28:2f:44:5f:a9:8a:11:a4:95:3c:ea:9c:df:28: 15:f2:92:70:cc:fb:38:ac:1d:2c:a3:19:12:8e:1a:f2:8d:c1: e2:7b:49:cd:06:9e:62:dc:b1:29:f9:0e:35:10:b5:0b:82:56: 7d:84:ec:8d:ea:ec:3d:74:0b:fa:9e:9e:10:73:dd:a9:e2:4c: 07:af:ed:1a:c0:5a:d9:aa:13:26:39:f2:2e:14:0e:e8:90:d9: d7:f6:17:32:4b:0c:cd:f5:8c:f5:fa:90:0a:17:7e:3a:6e:9a: 8a:fc:c0:08:d2:e9:9c:ca:d1:fe:5c:80:fe:54:1a:70:e0:4d: 4d:e4:97:63:1d:98:8b:48:00:df:80:04:be:e7:b8:9a:48:df: f3:4c:98:17:97:47:b0:84:5a:d8:d4:39:23:d4:63:7c:1f:c9: 35:0c:f2:e9:24:83:67:c5:44:2f:5c:ec:26:49:15:bb:e3:35: 85:e1:05:f9:b5:15:dc:ba:a4:d4:1a:aa:43:fb:47:2e:f8:46: 48:14:e3:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjQwNTAzMDU0MjA3WhcNMjQwNTEwMDU0MjA3WjAYMRYwFAYD VQQDEw02NjM0NzkyZi00MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLi01RZYzi2CAapmDyMg2KLAqmt+UlfBr0FFqsaCQ9h4c7JF8oGdnLaCsv03 Fc1uhzYU6EVcm1zn3rDVZ02w6eiuyG7K1ZuAc4Jf6OpVkNiYJ+iWnAjZcoQsH4rq 7pEomuqpyogD9F8Lk3liHPQDBB4Zp9LsPo8OUr4Xyzofz5b4u2qLQDG0p8pQXueP Y9YV8HWKbJlI2UK4JwyquYdqqiN2Waq9H0ymna4ObmC7tKzGCCa03uNgtSRA2CEw A7P0Ag+V+jCjPnE0ttaOHO5J36SyMz6DSoeiSqF98Qh1N8DWrzp4Z/DPH4yKvgGL ItZWIFUrjWARnRBWZDOvSYkBNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjKLYiM bXcXv0Uo5Ozj0kEq5FMeMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvOAH/VQafQ9aIclSiansgAS1SsDbKJvslKLe0p3Yutk0JFWAFf02G SkX2l/KDxl5qY39eXbmyvfL2KC9EX6mKEaSVPOqc3ygV8pJwzPs4rB0soxkSjhry jcHie0nNBp5i3LEp+Q41ELULglZ9hOyN6uw9dAv6np4Qc92p4kwHr+0awFrZqhMm OfIuFA7okNnX9hcySwzN9Yz1+pAKF346bpqK/MAI0umcytH+XID+VBpw4E1N5Jdj HZiLSADfgAS+57iaSN/zTJgXl0ewhFrY1Dkj1GN8H8k1DPLpJINnxUQvXOwmSRW7 4zWF4QX5tRXcuqTUGqpD+0cu+EZIFOMo -----END CERTIFICATE-----Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org