$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: WG7vylg6Ad2SGQXCfRQsoL7aIaDypcvFiizuPO8JxxM= Subject key identifier: BB:30:DD:BF:19:9E:66:69:9E:7F:3E:F8:19:C3:E4:37:37:40:E9:9E Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 61 Signing time: Fri 31 May 2024 08:40:07 +0000 Manifest this update: Fri 31 May 2024 08:40:06 +0000 Manifest next update: Fri 07 Jun 2024 08:40:06 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: PJpC1JPo9Nupi0b/cjd6yPAneWRx3HvZl5FPCLWcsDc=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: DAdzrCTjSXLAdQ/ahzO4J1jSOYJKGFTd/4G8C3uhYEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: May 31 08:40:06 2024 GMT Not After : Jun 7 08:40:06 2024 GMT Subject: CN=66598ce7-b700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:d3:ea:14:7f:c3:ab:87:05:a2:23:06:19: e5:04:2f:d6:70:b2:d1:82:11:b0:f2:b4:1f:60:33: 27:c2:62:9f:5a:87:d1:61:ad:93:dc:9f:82:6e:2c: fa:f5:bb:1c:79:11:0f:73:ce:f8:a5:3c:7d:1f:8c: 30:75:46:d8:49:30:29:02:72:68:bd:5c:91:84:35: 3f:8d:5e:84:1a:0a:6f:f4:d3:f5:1c:52:3c:9e:33: de:a9:f0:62:43:d0:87:f4:54:f2:0d:61:cf:5f:61: 0c:94:58:f7:a1:7e:9c:88:2b:11:d2:70:a5:a0:b9: c7:3c:18:1b:a7:6b:68:1f:32:30:ec:2f:b7:81:16: cc:c5:71:03:2e:bc:41:88:dd:c3:bd:9a:04:c5:30: 48:e4:69:e2:61:48:90:a4:0c:bd:18:b4:61:2d:4f: 71:07:ad:72:82:2b:9b:67:22:74:d1:9a:29:4c:a8: e3:b0:7b:cf:88:8d:99:e1:a1:dd:45:c4:72:c8:5b: d5:75:48:cb:41:87:38:5f:4a:be:55:4c:e1:c4:73: 36:6d:7f:6d:e1:b0:29:8d:4e:37:4f:d3:95:8c:a2: 3d:8d:79:b1:00:96:83:a8:38:ac:34:ed:bb:cd:f6: 3d:e2:b1:09:83:b1:f8:1a:4c:74:75:c0:f1:68:02: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:DD:BF:19:9E:66:69:9E:7F:3E:F8:19:C3:E4:37:37:40:E9:9E X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1a:1c:5e:8c:72:10:22:9b:b1:39:53:63:e8:e9:a2:1f:45: 99:e5:83:d7:85:74:ba:b8:95:c1:4e:ed:43:1a:6f:3d:e4:e4: 89:a3:08:ac:08:11:ee:de:29:6d:0a:df:2e:89:d7:e1:bb:3d: 1f:65:79:f4:f7:f7:c8:7d:d8:9e:8c:d3:01:a9:a5:3f:aa:67: 1e:70:91:7b:d5:21:7d:28:e9:a3:bc:9b:95:a1:75:ab:11:6c: 1f:56:0f:4e:18:aa:a2:72:72:a2:87:3d:2c:88:fe:ef:1d:37: 39:00:f8:a0:82:00:97:2a:91:f1:30:9c:13:01:b6:14:10:78: 45:3f:25:8a:1d:f8:df:a1:2d:6c:5f:9b:66:f9:76:59:0b:5f: bb:bd:c7:9a:14:ff:38:fc:f4:21:12:cb:c4:af:a5:40:8d:4e: 29:6a:c4:a7:79:c8:c0:72:86:4d:17:03:fa:fd:c3:74:50:61: 1f:ae:9b:68:5b:4f:34:4e:cc:0f:e0:f9:c2:d1:dc:ed:bb:8d: 07:bc:e9:28:47:47:a3:b2:aa:5d:bc:80:dd:ec:ca:05:73:9c: b4:2b:54:37:9d:9d:2b:ee:c8:63:db:8e:fd:ff:a3:c7:63:fa: d0:bd:1c:b7:47:d1:d8:d1:26:0d:c6:76:ca:70:2e:69:50:5f: 35:3b:ac:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTMzQjExMC8GA1UEBRMoODZEQTE5MDBFNjE1MENCRDlDRDgxNUFDNjdEQzUzQTVF NkQzQzAyNzAeFw0yNDA1MzEwODQwMDZaFw0yNDA2MDcwODQwMDZaMBgxFjAUBgNV BAMTDTY2NTk4Y2U3LWI3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7DNPqFH/Dq4cFoiMGGeUEL9ZwstGCEbDytB9gMyfCYp9ah9FhrZPcn4JuLPr1 uxx5EQ9zzvilPH0fjDB1RthJMCkCcmi9XJGENT+NXoQaCm/00/UcUjyeM96p8GJD 0If0VPINYc9fYQyUWPehfpyIKxHScKWgucc8GBuna2gfMjDsL7eBFszFcQMuvEGI 3cO9mgTFMEjkaeJhSJCkDL0YtGEtT3EHrXKCK5tnInTRmilMqOOwe8+IjZnhod1F xHLIW9V1SMtBhzhfSr5VTOHEczZtf23hsCmNTjdP05WMoj2NebEAloOoOKw07bvN 9j3isQmDsfgaTHR1wPFoAvZ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuzDdvxme Zmmefz74GcPkNzdA6Z4wHwYDVR0jBBgwFoAUhtoZAOYVDL2c2BWsZ9xTpebTwCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MzNCL0U5OEExMTNFOTI2 NDExRUU5OTQ3REE1QkM0RjlBRTAyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHRvWkFPWVZETDJjMkJXc1o5eFRwZWJUd0NjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MzNCL0U5OEExMTNFOTI2NDExRUU5OTQ3REE1QkM0RjlBRTAyL2h0b1pBT1lWREwy YzJCV3NaOXhUcGViVHdDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkaHF6MchAim7E5U2Po6aIfRZnlg9eFdLq4lcFO7UMabz3k5ImjCKwI Ee7eKW0K3y6J1+G7PR9lefT398h92J6M0wGppT+qZx5wkXvVIX0o6aO8m5WhdasR bB9WD04YqqJycqKHPSyI/u8dNzkA+KCCAJcqkfEwnBMBthQQeEU/JYod+N+hLWxf m2b5dlkLX7u9x5oU/zj89CESy8SvpUCNTilqxKd5yMByhk0XA/r9w3RQYR+um2hb TzROzA/g+cLR3O27jQe86ShHR6Oyql28gN3sygVznLQrVDednSvuyGPbjv3/o8dj +tC9HLdH0djRJg3GdspwLmlQXzU7rDs= -----END CERTIFICATE-----Generated at Fri May 31 10:01:36 2024 by rpki-client on console-ams.rpki-client.org