$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: jdiH4BwXjwSv7Is8YzSgQ/fDWl2BYh0GYpd7O70LjOc= Subject key identifier: CA:D5:B3:2C:98:61:A8:40:7F:91:71:46:09:63:54:0D:0A:16:60:9E Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0DD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 0E30 Signing time: Tue 30 Apr 2024 18:47:37 +0000 Manifest this update: Tue 30 Apr 2024 18:47:36 +0000 Manifest next update: Tue 07 May 2024 18:47:36 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: ZQHM9q5Us9blpgMmdwKYqGQuakoeO9dsPgZic500T3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Apr 30 18:47:36 2024 GMT Not After : May 7 18:47:36 2024 GMT Subject: CN=66313cc9-b3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:4e:8b:75:95:ef:d2:37:ad:d6:be:f6:ad: a4:ec:1b:30:eb:be:9d:1b:1c:e0:aa:3b:f9:fb:bb: 01:20:37:f4:4c:75:dd:92:bf:68:46:51:b2:96:1f: 74:f7:c4:a7:36:95:0a:de:a1:01:f4:f2:a4:d2:d8: 6e:d0:ed:c3:16:f6:42:8f:66:d4:6a:83:09:f8:39: 99:33:03:98:db:3b:ee:69:14:63:4c:3a:58:9d:5a: 07:10:4a:71:10:35:0d:b9:2b:d7:03:32:fc:9f:56: 0d:82:27:c0:08:ac:56:81:4d:bb:40:59:eb:b2:46: 70:35:39:f0:4a:df:75:5a:0f:1e:58:68:54:d1:b7: 34:b3:24:8a:0a:5d:00:a6:60:19:4a:6d:ca:99:11: 5b:4b:48:aa:c1:da:c3:63:ea:1b:e1:75:f8:1b:41: 3c:a9:bb:24:e4:86:49:d4:20:e5:5b:90:57:64:27: 09:a7:dd:5d:a1:b9:d9:58:b2:f1:70:57:cd:56:41: 98:b9:f9:31:e9:4a:65:4e:92:b3:af:67:ed:19:52: db:ac:e5:df:54:b0:30:8d:05:a9:4a:d4:e1:2f:a0: f1:cb:01:0b:5c:9b:da:0e:cc:b9:72:18:7f:ec:3b: ea:00:60:ce:35:00:0a:4b:31:c9:2b:a8:66:32:e7: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D5:B3:2C:98:61:A8:40:7F:91:71:46:09:63:54:0D:0A:16:60:9E X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ad:e3:b4:70:69:6d:18:c9:be:f7:de:25:26:80:6f:f0:a9: da:78:08:6d:6c:f5:0d:d0:2a:fb:35:76:24:c1:e0:9c:47:4e: 6f:ba:0e:a4:11:3b:e6:87:89:86:38:63:d4:f6:a1:2d:cd:7f: 7f:60:77:c6:44:de:a2:d1:a6:9a:ff:cb:b2:fd:54:97:41:21: 6f:c6:04:5c:fe:79:68:9e:a0:83:c1:5d:aa:7c:ec:47:0c:dd: bc:eb:b6:2d:03:e4:71:20:b0:72:c4:18:68:80:e8:4e:6f:9e: 34:39:b6:5e:16:d9:a5:78:ef:0d:e1:3f:65:13:61:73:b9:9e: 9c:75:64:a9:28:19:dc:8a:ee:fd:15:03:bf:d3:2e:58:33:5c: 8c:0d:c0:71:0f:ab:ea:b0:5a:1c:69:5f:44:c3:4e:30:94:27: d2:da:7c:ac:a0:65:4b:d0:20:e8:f0:d2:34:00:c4:9b:67:5b: b8:39:c4:6a:f0:b7:7c:c5:90:11:a9:d2:13:58:e5:e6:77:48: f4:29:e5:07:5b:26:33:ac:33:91:84:fe:95:0c:8a:44:fb:79: 6f:70:24:ac:14:c9:2d:16:15:eb:63:1d:d3:53:65:1a:aa:d1: 64:3b:ec:62:eb:aa:02:83:a0:33:ff:89:71:b2:a5:82:e1:50: 24:77:9c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjQwNDMwMTg0NzM2WhcNMjQwNTA3MTg0NzM2WjAYMRYwFAYD VQQDEw02NjMxM2NjOS1iM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXdOi3WV79I3rda+9q2k7Bsw676dGxzgqjv5+7sBIDf0THXdkr9oRlGylh90 98SnNpUK3qEB9PKk0thu0O3DFvZCj2bUaoMJ+DmZMwOY2zvuaRRjTDpYnVoHEEpx EDUNuSvXAzL8n1YNgifACKxWgU27QFnrskZwNTnwSt91Wg8eWGhU0bc0sySKCl0A pmAZSm3KmRFbS0iqwdrDY+ob4XX4G0E8qbsk5IZJ1CDlW5BXZCcJp91dobnZWLLx cFfNVkGYufkx6UplTpKzr2ftGVLbrOXfVLAwjQWpStThL6DxywELXJvaDsy5chh/ 7DvqAGDONQAKSzHJK6hmMufvbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrVsyyY YahAf5FxRgljVA0KFmCeMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKreO0cGltGMm+994lJoBv8KnaeAhtbPUN0Cr7NXYkweCcR05vug6k ETvmh4mGOGPU9qEtzX9/YHfGRN6i0aaa/8uy/VSXQSFvxgRc/nlonqCDwV2qfOxH DN2867YtA+RxILByxBhogOhOb540ObZeFtmleO8N4T9lE2FzuZ6cdWSpKBnciu79 FQO/0y5YM1yMDcBxD6vqsFocaV9Ew04wlCfS2nysoGVL0CDo8NI0AMSbZ1u4OcRq 8Ld8xZARqdITWOXmd0j0KeUHWyYzrDORhP6VDIpE+3lvcCSsFMktFhXrYx3TU2Ua qtFkO+xi66oCg6Az/4lxsqWC4VAkd5zT -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:05 2024 by rpki-client on console-fra.rpki-client.org