$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: MgDs5Om7KJaCxZTmRvFPoqR5e1JPgzLtm99lkTU56Dc= Subject key identifier: 75:07:A6:65:54:35:85:4D:5D:2F:FA:1F:0F:6E:84:49:A7:79:B4:C7 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 0110 Signing time: Sun 19 May 2024 05:26:15 +0000 Manifest this update: Sun 19 May 2024 05:26:14 +0000 Manifest next update: Sun 26 May 2024 05:26:14 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: /gdwqLTqDo1hrd7o5cVTStLHYzgfzKbu+m09vAI5juo=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: 1F0H2dbwEQAZ11mjRklbJAe3otm+tJQyGGpBTqSZ0C0=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: yUnpz9eBONeeUf/ARcjSeazIrSPZziYwbK0ejyuueSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: May 19 05:26:14 2024 GMT Not After : May 26 05:26:14 2024 GMT Subject: CN=66498d77-35cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:08:48:c1:58:e6:32:5c:02:97:6c:42:11: f9:8a:32:c7:1b:c7:2a:d6:cc:23:57:88:e5:a0:71: 7a:40:e5:6c:01:d7:d7:3b:5c:fd:80:7f:89:b8:a8: 39:c1:bd:aa:2a:3f:25:a8:74:fa:f2:a5:6b:27:f1: cc:f9:f3:4f:f6:c9:73:89:74:6a:76:b6:4b:c0:ef: c9:9c:da:0d:ab:85:b6:f7:81:a2:43:7a:60:03:20: 6f:25:98:73:fb:eb:e8:67:0b:5d:ce:d5:2d:cf:16: 62:c7:97:f7:25:b2:a8:7f:53:84:e9:aa:60:d1:cb: ff:69:b1:07:75:ea:f6:e9:70:44:c6:f7:37:be:88: d2:a8:bd:09:cd:04:0f:6e:eb:4c:90:d5:64:7e:37: d7:79:73:8e:ec:23:54:70:e6:a3:1f:ca:d6:fd:78: 4c:4d:d6:d3:db:d8:ac:d2:98:c6:f9:55:77:67:3f: 6f:16:21:d6:a0:9f:c5:fc:d1:46:97:ce:6a:07:f2: 1b:fa:21:3d:f7:9b:d7:e7:e4:26:07:39:a2:fc:e3: 36:99:f3:c5:63:10:d6:55:ee:db:82:a0:1b:b6:f0: a1:2b:dc:01:04:40:ff:42:79:c9:a9:9c:13:d8:cf: 5d:4d:c7:1f:5d:52:f6:89:93:5b:c2:bd:2b:a2:c8: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:A6:65:54:35:85:4D:5D:2F:FA:1F:0F:6E:84:49:A7:79:B4:C7 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1e:37:59:b0:8e:2d:69:83:3d:d5:9f:80:50:8a:09:bd:9b: 91:50:e9:8f:61:e6:10:bb:40:76:2a:fc:08:47:20:c1:b0:6d: 4d:8e:21:dd:86:f9:be:6b:a7:f2:60:98:3b:d7:cd:44:cf:64: 67:88:06:8b:7a:ca:32:1a:5f:bf:bb:89:a4:83:36:20:83:55: ef:7e:2b:ea:74:73:de:7b:ab:5d:b0:a5:cf:13:fb:0e:cd:d8: 2a:05:2b:d9:b9:ae:65:53:cf:5b:74:3b:c1:19:05:d1:b4:b1: 30:05:6a:76:98:e2:52:c7:29:1d:48:e7:4b:af:8e:df:8e:98: 1e:fb:13:a8:97:15:18:43:bf:e6:2e:55:0b:b8:53:fe:4c:8f: 9a:84:e0:07:dc:cf:57:cd:33:46:30:2b:ea:a2:42:25:35:e1: 4a:b3:63:8d:36:80:6f:36:29:05:18:de:cf:66:d7:bf:2d:2f: da:cc:cb:8d:00:05:10:5c:3d:35:17:72:b4:54:52:8f:7f:3c: c4:0f:df:98:4a:86:d9:70:04:2f:b0:e7:46:4b:f8:fd:e3:a6: 08:cc:1d:30:dc:a8:70:43:0a:1e:31:bc:36:b3:56:24:f5:15: b3:8d:5c:d8:76:60:0b:b4:ed:06:53:23:cd:98:35:8d:4c:83: 5c:d6:bd:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjQwNTE5MDUyNjE0WhcNMjQwNTI2MDUyNjE0WjAYMRYwFAYD VQQDEw02NjQ5OGQ3Ny0zNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYEISMFY5jJcApdsQhH5ijLHG8cq1swjV4jloHF6QOVsAdfXO1z9gH+JuKg5 wb2qKj8lqHT68qVrJ/HM+fNP9slziXRqdrZLwO/JnNoNq4W294GiQ3pgAyBvJZhz ++voZwtdztUtzxZix5f3JbKof1OE6apg0cv/abEHder26XBExvc3vojSqL0JzQQP butMkNVkfjfXeXOO7CNUcOajH8rW/XhMTdbT29is0pjG+VV3Zz9vFiHWoJ/F/NFG l85qB/Ib+iE995vX5+QmBzmi/OM2mfPFYxDWVe7bgqAbtvChK9wBBED/QnnJqZwT 2M9dTccfXVL2iZNbwr0rosgoewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUHpmVU NYVNXS/6Hw9uhEmnebTHMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeHjdZsI4taYM91Z+AUIoJvZuRUOmPYeYQu0B2KvwIRyDBsG1NjiHd hvm+a6fyYJg7181Ez2RniAaLesoyGl+/u4mkgzYgg1XvfivqdHPee6tdsKXPE/sO zdgqBSvZua5lU89bdDvBGQXRtLEwBWp2mOJSxykdSOdLr47fjpge+xOolxUYQ7/m LlULuFP+TI+ahOAH3M9XzTNGMCvqokIlNeFKs2ONNoBvNikFGN7PZte/LS/azMuN AAUQXD01F3K0VFKPfzzED9+YSobZcAQvsOdGS/j946YIzB0w3KhwQwoeMbw2s1Yk 9RWzjVzYdmALtO0GUyPNmDWNTINc1r1B -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org