$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft File: HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json) Hash identifier: Agbk3Vgrr2I4ky2Ot2CwucUjefv4nMlx2sRVYVviIv0= Subject key identifier: CC:4E:DB:AD:7E:A5:22:62:AF:3A:16:4D:C8:C3:AF:1A:F0:81:B1:1B Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft Manifest number: 044F Signing time: Fri 03 May 2024 01:59:45 +0000 Manifest this update: Fri 03 May 2024 01:59:45 +0000 Manifest next update: Fri 10 May 2024 01:59:44 +0000 Files and hashes: 1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: iWZ9KYTMSosyxpbe9OlqZ9GLsetyaKS0UDf68EfMABk=) 2: 149FB86C057511EC988EF77BC4F9AE02.roa (hash: K/5g4LbcV5JgwmzgpMURAj/bNGFQ2ixWTsmM0mwD96Q=) 3: 0AC20CE6846211EEBA443743C4F9AE02.roa (hash: N3M1hSqx5oHid2DsYTGtKIE5HiaDQHv1bi/QT2l7XTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Validity Not Before: May 3 01:59:45 2024 GMT Not After : May 10 01:59:44 2024 GMT Subject: CN=66344511-0a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:b7:d7:57:a0:f1:7e:b7:c1:cf:b0:80:96: e1:00:96:77:35:fa:a3:cc:01:b8:c2:0b:32:fc:b8: a0:9c:a4:15:c1:7a:43:b1:21:54:eb:dd:d4:e7:73: e0:b6:34:1b:8f:60:57:31:9a:1a:cb:07:11:9a:20: 12:64:b6:21:85:bf:03:76:a8:76:02:36:ef:fb:67: 9b:cb:9a:bb:8f:87:83:8c:24:7e:cd:7e:c9:c2:5d: c8:8c:07:1b:7b:10:bc:cc:78:c6:90:eb:d0:27:f5: 69:0a:ea:00:f7:ce:99:cb:81:84:96:a1:2e:d7:ce: fd:cb:cc:e0:37:12:d9:2c:40:74:d2:c4:16:7b:21: c3:6e:b9:7d:26:4f:f6:23:4b:17:93:6f:27:eb:1b: 46:e3:fb:65:03:56:1a:9d:24:74:ee:f3:87:77:bc: bf:67:56:25:de:41:47:ea:77:38:41:70:13:ff:fa: 1e:9d:47:53:52:38:4d:17:e7:65:8d:04:bd:1f:60: 9b:98:7f:25:fd:09:72:c0:ef:71:74:55:e7:46:b1: d0:29:5c:88:c9:7e:10:42:1a:f7:24:cf:dc:79:bb: e5:80:d8:33:4b:c7:1d:af:24:4f:1c:4a:57:29:c5: 83:9f:1c:1f:15:a3:48:ce:8e:48:0a:aa:b5:4e:cc: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:DB:AD:7E:A5:22:62:AF:3A:16:4D:C8:C3:AF:1A:F0:81:B1:1B X509v3 Authority Key Identifier: keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:9e:58:31:65:36:64:c4:e3:f3:c5:f7:ca:1c:1e:1b:04: 7e:d6:01:ab:ae:67:3b:f1:4d:fc:3e:f2:a8:7f:f0:78:d0:d2: dd:90:c2:a3:fa:fd:d0:b2:bc:e5:10:79:a2:56:bc:93:3b:0e: 27:e9:b5:83:4c:fc:d8:9f:cb:73:8f:12:c7:31:36:4e:bd:fc: ea:b1:f7:26:92:18:00:1a:2b:06:ae:9d:07:9b:aa:b8:3a:5e: 97:ef:35:d4:80:19:4d:a0:24:49:55:85:84:fa:cb:0c:57:71: 2c:09:ae:eb:1a:d8:3f:31:57:e9:b5:42:82:c4:f9:19:1a:c6: 6e:23:1f:59:50:e0:06:aa:8b:1a:f6:b4:e7:52:1c:05:81:33: ae:42:dc:2f:57:2d:a0:a8:cc:21:65:55:6c:c1:ff:6d:df:10: 6f:4c:43:4a:8f:21:e1:19:5f:ed:a6:75:8a:e0:cb:67:6d:e9: 30:1f:63:8d:2d:3a:0f:32:0d:75:1f:9e:2c:32:be:13:a8:e1: e8:d6:c6:63:8d:b6:4b:f6:b7:fa:26:66:b0:c3:99:00:99:a2: c7:2a:8e:a4:4c:e4:a9:5a:4e:dd:4e:8e:16:37:c6:2d:d8:98: 18:0e:d9:43:1a:74:48:a8:0e:e0:39:c2:58:08:31:81:dc:ac: 75:9a:1d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4 MzZBNDBGRjgwHhcNMjQwNTAzMDE1OTQ1WhcNMjQwNTEwMDE1OTQ0WjAYMRYwFAYD VQQDEw02NjM0NDUxMS0wYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM2311eg8X63wc+wgJbhAJZ3NfqjzAG4wgsy/LignKQVwXpDsSFU693U53Pg tjQbj2BXMZoaywcRmiASZLYhhb8Ddqh2Ajbv+2eby5q7j4eDjCR+zX7Jwl3IjAcb exC8zHjGkOvQJ/VpCuoA986Zy4GElqEu1879y8zgNxLZLEB00sQWeyHDbrl9Jk/2 I0sXk28n6xtG4/tlA1YanSR07vOHd7y/Z1Yl3kFH6nc4QXAT//oenUdTUjhNF+dl jQS9H2CbmH8l/QlywO9xdFXnRrHQKVyIyX4QQhr3JM/cebvlgNgzS8cdryRPHEpX KcWDnxwfFaNIzo5ICqq1Tsz2jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxO261+ pSJirzoWTcjDrxrwgbEbMB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1 NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQ2QS82OUMyRDM1MDA1NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0y LWlobk5mamdhUm1EYWtEX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArLJ5YMWU2ZMTj88X3yhweGwR+1gGrrmc78U38PvKof/B40NLdkMKj +v3QsrzlEHmiVryTOw4n6bWDTPzYn8tzjxLHMTZOvfzqsfcmkhgAGisGrp0Hm6q4 Ol6X7zXUgBlNoCRJVYWE+ssMV3EsCa7rGtg/MVfptUKCxPkZGsZuIx9ZUOAGqosa 9rTnUhwFgTOuQtwvVy2gqMwhZVVswf9t3xBvTENKjyHhGV/tpnWK4MtnbekwH2ON LToPMg11H54sMr4TqOHo1sZjjbZL9rf6Jmaww5kAmaLHKo6kTOSpWk7dTo4WN8Yt 2JgYDtlDGnRIqA7gOcJYCDGB3Kx1mh0U -----END CERTIFICATE-----Generated at Fri May 3 04:45:27 2024 by rpki-client on console-fra.rpki-client.org