$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft File: -P-HgJbLhByDdgq1VerbvXBSUwo.mft (raw, json) Hash identifier: jt62HdAbLpVA4Ro6gYC8RaHga383fAWWg8Yw3mDpBpM= Subject key identifier: 4D:35:7B:89:B7:48:8F:96:5C:81:DE:8B:1C:B7:74:C8:47:62:58:56 Authority key identifier: F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A Certificate issuer: /CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft Manifest number: 058B Signing time: Thu 02 May 2024 14:43:18 +0000 Manifest this update: Thu 02 May 2024 14:43:17 +0000 Manifest next update: Thu 09 May 2024 14:43:17 +0000 Files and hashes: 1: -P-HgJbLhByDdgq1VerbvXBSUwo.crl (hash: s+oEXfv1nDZDBF3I/tvyb1fCT8Bumg7NN3odWV9/3Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.crl rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A Validity Not Before: May 2 14:43:17 2024 GMT Not After : May 9 14:43:17 2024 GMT Subject: CN=6633a685-b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:26:e8:70:78:05:71:73:a7:2e:05:a8:fc: 0b:a8:a3:d6:85:70:b4:ab:a4:ef:32:75:91:da:2b: 4e:f6:e7:a5:4c:30:7c:df:cc:e6:fe:d6:d7:2e:17: ed:90:60:31:78:38:5c:e3:4b:fb:d3:1b:43:a6:ee: 32:1d:39:a2:d6:e6:67:ac:99:09:cb:56:82:2a:59: 3d:a2:41:81:36:c7:d9:58:29:cf:db:a8:87:3a:f9: 45:b0:73:a8:71:33:3b:c0:27:0a:7d:9c:83:f1:e2: c6:7c:2f:cf:b7:45:45:fb:51:69:74:f5:c4:18:dc: 7d:13:d9:07:29:90:c2:70:39:31:c3:df:ea:f2:b1: 16:ef:12:ae:6b:b2:d5:d1:da:a2:3c:61:35:59:9c: b0:93:f0:be:f8:98:bf:08:c5:38:09:0b:34:8b:28: ce:c1:18:7d:ed:05:92:2a:90:8c:c1:61:20:59:8b: 89:54:73:63:29:8d:8f:f7:a4:b9:2e:09:bd:91:c0: 20:8e:85:f4:77:83:39:bc:0e:85:48:41:15:26:dc: a2:98:bf:ab:2c:61:18:0d:01:ff:40:ed:4e:16:2a: 82:e1:a0:ed:52:1c:8a:51:07:0b:bb:44:6d:87:6f: 24:6f:d3:a0:f8:98:a1:7b:86:3e:18:4d:af:04:98: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:7B:89:B7:48:8F:96:5C:81:DE:8B:1C:B7:74:C8:47:62:58:56 X509v3 Authority Key Identifier: keyid:F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f6:59:e7:d6:80:15:80:97:cc:1a:63:cf:f9:14:48:69:ab: 67:ad:99:b5:97:45:d1:0f:60:c4:d1:05:2e:db:bc:6d:66:ac: 9c:60:19:32:d1:aa:0c:66:25:00:17:0a:9b:8c:51:9b:cf:09: 18:27:f9:37:90:3e:ed:45:43:5a:15:44:af:17:01:f0:1b:7b: e8:ee:8a:7a:e9:05:7d:4f:a7:d4:9b:11:ac:80:19:91:f1:bc: 9d:f0:51:cb:93:21:44:7a:7a:91:e0:04:21:d5:4b:3a:f3:91: bd:c4:56:08:6f:21:7d:d9:d3:9f:f3:3c:6e:03:b9:67:3f:ba: a7:5e:f4:c7:0e:1d:ef:91:e4:0e:22:40:86:95:db:15:21:2b: 1c:50:3c:b5:74:2e:59:a8:e4:e0:19:10:62:35:df:86:4a:07: 5e:e1:6f:1b:44:52:7f:79:93:a6:43:de:83:00:08:b8:ea:92: f7:ce:f3:a2:fd:1f:41:8c:09:93:a8:a9:28:58:be:51:aa:25: ab:9b:e7:11:54:de:77:33:4e:c3:7f:11:95:bb:91:ba:73:e7: 3d:0a:7a:e2:45:2e:79:6b:53:12:5a:41:6b:4c:7b:5b:03:03: a7:4b:ae:8f:ff:76:40:98:46:34:30:d1:9f:23:17:df:9e:4e: d1:2d:9d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RjYxMTAvBgNVBAUTKEY4RkY4NzgwOTZDQjg0MUM4Mzc2MEFCNTU1RUFEQkJE NzA1MjUzMEEwHhcNMjQwNTAyMTQ0MzE3WhcNMjQwNTA5MTQ0MzE3WjAYMRYwFAYD VQQDEw02NjMzYTY4NS1iMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDAm6HB4BXFzpy4FqPwLqKPWhXC0q6TvMnWR2itO9uelTDB838zm/tbXLhft kGAxeDhc40v70xtDpu4yHTmi1uZnrJkJy1aCKlk9okGBNsfZWCnP26iHOvlFsHOo cTM7wCcKfZyD8eLGfC/Pt0VF+1FpdPXEGNx9E9kHKZDCcDkxw9/q8rEW7xKua7LV 0dqiPGE1WZywk/C++Ji/CMU4CQs0iyjOwRh97QWSKpCMwWEgWYuJVHNjKY2P96S5 Lgm9kcAgjoX0d4M5vA6FSEEVJtyimL+rLGEYDQH/QO1OFiqC4aDtUhyKUQcLu0Rt h28kb9Og+Jihe4Y+GE2vBJghsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE01e4m3 SI+WXIHeixy3dMhHYlhWMB8GA1UdIwQYMBaAFPj/h4CWy4Qcg3YKtVXq271wUlMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhGNi9GRUYzNDQ2QzhE NzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhCeURkZ3ExVmVyYnZYQlNV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1QLUhnSmJMaEJ5RGRncTFWZXJidlhCU1V3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhGNi9GRUYzNDQ2QzhENzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhC eURkZ3ExVmVyYnZYQlNVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv9lnn1oAVgJfMGmPP+RRIaatnrZm1l0XRD2DE0QUu27xtZqycYBky 0aoMZiUAFwqbjFGbzwkYJ/k3kD7tRUNaFUSvFwHwG3vo7op66QV9T6fUmxGsgBmR 8byd8FHLkyFEenqR4AQh1Us685G9xFYIbyF92dOf8zxuA7lnP7qnXvTHDh3vkeQO IkCGldsVISscUDy1dC5ZqOTgGRBiNd+GSgde4W8bRFJ/eZOmQ96DAAi46pL3zvOi /R9BjAmTqKkoWL5RqiWrm+cRVN53M07DfxGVu5G6c+c9CnriRS55a1MSWkFrTHtb AwOnS66P/3ZAmEY0MNGfIxffnk7RLZ1Q -----END CERTIFICATE-----Generated at Thu May 2 17:43:51 2024 by rpki-client on console-fra.rpki-client.org