$ rpki-client -vvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft File: hlMymlHbxnnxvxfXkdg-x2ib564.mft (raw, json) Hash identifier: 3ZAJiDwkngHS6n0G20tPXI59lAkGwPeeRkT7bJelAfc= Subject key identifier: 3A:00:10:43:E9:1A:98:A1:F5:5A:FB:3C:27:B1:25:E6:CC:8D:67:C1 Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE Certificate issuer: /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft Manifest number: 0765 Signing time: Sat 18 May 2024 22:17:03 +0000 Manifest this update: Sat 18 May 2024 22:17:02 +0000 Manifest next update: Sat 25 May 2024 22:17:02 +0000 Files and hashes: 1: hlMymlHbxnnxvxfXkdg-x2ib564.crl (hash: YSZ4oKtud4tnX7Jcm5G+VoLSDKwxKPgXOD1l4ekq5MY=) 2: 2611C806D1AA11EA82C4313FC4F9AE02.roa (hash: v7I8KdBlsLZ+MggZkXYNQX5z4teRga/cCIhewywVSAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Validity Not Before: May 18 22:17:02 2024 GMT Not After : May 25 22:17:02 2024 GMT Subject: CN=664928df-4cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:2a:12:75:79:15:10:3a:20:b0:f3:f8:30: 3b:ba:e5:11:39:80:29:b0:3d:14:42:06:36:91:13: 34:0f:0c:8f:43:bc:54:c4:e0:b6:02:45:fc:2f:c2: 04:ce:be:1e:cb:96:0e:df:3c:bf:77:88:cd:c5:6f: 51:4b:c1:e0:75:e7:d0:16:bf:88:fc:73:67:65:ec: a1:a8:df:fe:18:1f:f6:ef:23:7c:43:20:19:8d:43: 14:23:f3:ec:58:97:59:a0:9d:b9:9a:70:1b:68:2c: 86:89:50:37:7f:9b:71:0e:7c:f9:a4:70:31:c7:66: 38:2e:8e:35:87:1b:72:68:c6:15:9d:fa:88:09:dd: 55:df:70:88:bf:2a:e8:76:7a:9c:c2:07:51:b3:23: 69:8b:b9:2b:01:ed:3d:c0:3e:e7:49:0d:79:c3:66: 7e:fa:96:b2:4f:b5:e6:b2:3c:82:e3:4b:d8:cf:5b: eb:78:c3:6e:a0:67:1f:0b:83:58:22:41:5a:65:ba: e4:3a:3c:0b:3b:03:bf:b4:06:59:a1:ae:65:d5:5a: 98:87:c5:34:35:a3:e4:1a:a6:a3:bb:8e:7c:f8:bf: 5f:8c:76:0f:5e:24:0b:c2:8c:b8:02:a4:cc:be:18: 13:7c:4d:1f:d7:b1:ca:28:27:78:08:b3:a5:15:81: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:10:43:E9:1A:98:A1:F5:5A:FB:3C:27:B1:25:E6:CC:8D:67:C1 X509v3 Authority Key Identifier: keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8b:5c:c9:28:55:a8:5c:0c:f5:ec:e1:8e:7e:38:5c:cf:8b: 00:47:f4:7c:0c:f4:b3:47:36:3d:6d:c0:4c:8b:b7:25:6e:90: 98:d4:bb:2c:60:fa:d8:15:4d:29:80:81:cc:62:36:49:a0:ec: e1:e6:50:a7:aa:9d:fd:67:41:22:96:18:d9:6a:c2:e9:e8:a4: e8:13:0c:32:12:97:3f:e0:ab:0e:44:39:2d:57:a5:f0:f7:9d: 44:b9:68:ba:b4:aa:7b:8b:1f:ae:5b:db:95:b1:a8:98:6a:eb: cf:9d:17:9b:d4:c9:e0:3c:6b:99:cb:6f:f2:6b:dc:43:12:d1: 6d:49:d6:19:ed:ae:63:2c:3b:64:ee:85:7f:87:e8:f1:67:1a: 9d:2f:34:77:c6:67:a3:18:17:5b:23:13:de:66:31:4c:66:8c: 02:c3:62:c3:fe:f7:a5:b6:0a:ce:29:9d:7a:e9:99:a3:c2:00: 3d:cb:da:a2:15:7c:d8:b2:05:77:d0:15:02:a3:6a:7b:7a:90: 48:85:a5:05:94:87:cc:41:87:cb:09:26:49:2b:35:57:67:58: b1:36:34:51:d3:ab:09:d3:bb:32:21:23:06:5e:37:3c:bc:0f: 21:ee:17:0f:b6:04:91:28:c5:79:40:19:00:fa:ce:10:26:99: da:18:de:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3RDQxMTAvBgNVBAUTKDg2NTMzMjlBNTFEQkM2NzlGMUJGMTdENzkxRDgzRUM3 Njg5QkU3QUUwHhcNMjQwNTE4MjIxNzAyWhcNMjQwNTI1MjIxNzAyWjAYMRYwFAYD VQQDEw02NjQ5MjhkZi00Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpQqEnV5FRA6ILDz+DA7uuUROYApsD0UQgY2kRM0DwyPQ7xUxOC2AkX8L8IE zr4ey5YO3zy/d4jNxW9RS8HgdefQFr+I/HNnZeyhqN/+GB/27yN8QyAZjUMUI/Ps WJdZoJ25mnAbaCyGiVA3f5txDnz5pHAxx2Y4Lo41hxtyaMYVnfqICd1V33CIvyro dnqcwgdRsyNpi7krAe09wD7nSQ15w2Z++payT7XmsjyC40vYz1vreMNuoGcfC4NY IkFaZbrkOjwLOwO/tAZZoa5l1VqYh8U0NaPkGqaju458+L9fjHYPXiQLwoy4AqTM vhgTfE0f17HKKCd4CLOlFYFLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoAEEPp Gpih9Vr7PCexJebMjWfBMB8GA1UdIwQYMBaAFIZTMppR28Z58b8X15HYPsdom+eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdENC8yQ0VFRkUzNEQx QTgxMUVBOEM1ODM3M0JDNEY5QUUwMi9obE15bWxIYnhubnh2eGZYa2RnLXgyaWI1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hsTXltbEhieG5ueHZ4ZlhrZGcteDJpYjU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdENC8yQ0VFRkUzNEQxQTgxMUVBOEM1ODM3M0JDNEY5QUUwMi9obE15bWxIYnhu bnh2eGZYa2RnLXgyaWI1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWi1zJKFWoXAz17OGOfjhcz4sAR/R8DPSzRzY9bcBMi7clbpCY1Lss YPrYFU0pgIHMYjZJoOzh5lCnqp39Z0EilhjZasLp6KToEwwyEpc/4KsORDktV6Xw 951EuWi6tKp7ix+uW9uVsaiYauvPnReb1MngPGuZy2/ya9xDEtFtSdYZ7a5jLDtk 7oV/h+jxZxqdLzR3xmejGBdbIxPeZjFMZowCw2LD/veltgrOKZ166ZmjwgA9y9qi FXzYsgV30BUCo2p7epBIhaUFlIfMQYfLCSZJKzVXZ1ixNjRR06sJ07syISMGXjc8 vA8h7hcPtgSRKMV5QBkA+s4QJpnaGN7h -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org