$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: uH+pqo31K3hH5hvRsbIRBccEcDQsbi/BHLCqidSiN9g= Subject key identifier: 92:69:F2:33:9A:21:1F:B7:93:06:3D:D7:78:88:A8:54:A1:F6:88:D8 Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 0299 Signing time: Sun 19 May 2024 03:37:00 +0000 Manifest this update: Sun 19 May 2024 03:36:59 +0000 Manifest next update: Sun 26 May 2024 03:36:59 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: LLeT5TU2uI4BcZT5mYHBH/KSbtDTnoL/XBNrIK5/0Ps=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: pBbwlRGBpC2tDZKkxngbZ3HbOh4/vWaEBE463DX52ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: May 19 03:36:59 2024 GMT Not After : May 26 03:36:59 2024 GMT Subject: CN=664973dc-eae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:a1:32:08:de:05:68:c2:4e:d8:f5:7a:aa: 91:5e:20:10:e3:3d:ac:27:44:cf:85:c3:dc:aa:2e: b5:15:d3:b4:cf:e1:3d:16:57:47:92:93:c4:2d:de: 63:4a:6c:99:25:e4:79:73:11:1b:30:c9:6d:ee:71: ca:be:e8:f9:c6:95:a3:f4:21:d8:89:5b:99:47:a0: 85:f4:72:29:c4:82:ab:4c:1d:d0:b1:a3:be:3c:7f: 92:fc:f1:66:21:8c:d8:35:1c:b8:bb:b8:b3:9a:14: ee:cc:21:85:be:2c:42:95:a7:a6:54:56:2b:bd:ac: 06:ec:35:bc:ff:18:d1:1d:8d:da:53:3b:e1:d5:76: 2b:77:80:9e:e9:18:db:be:9f:14:19:7c:da:cb:06: b6:40:e8:61:10:4d:16:f5:41:8a:d4:e7:b8:dd:e0: 88:8e:f2:da:1c:78:c8:b7:70:e0:63:06:29:ef:70: a5:39:f6:10:58:ed:d7:9a:8d:cc:9f:be:f6:6d:36: 63:15:76:5f:e8:0b:be:b3:c4:14:66:45:7c:71:6d: 50:dc:84:0f:ec:39:67:e8:a5:98:27:fb:a5:ad:05: 99:5b:3c:f1:0c:89:9d:01:c1:ab:2b:93:b6:a4:6a: d4:1c:95:f9:53:4b:8f:52:9c:1d:b7:cf:e5:f2:1a: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:69:F2:33:9A:21:1F:B7:93:06:3D:D7:78:88:A8:54:A1:F6:88:D8 X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ef:cc:b1:91:6c:4e:e3:2c:6b:9b:65:5e:04:c2:9f:e0:cd: 77:5d:f3:68:2d:31:5c:75:00:39:8f:d4:2b:7e:db:4e:38:84: d8:28:f8:9c:d8:13:24:13:2a:f8:28:a8:8f:d3:aa:04:c1:24: e5:ec:46:eb:5f:42:39:4f:1b:c0:7d:fa:8b:9b:3e:84:2f:02: 31:cf:aa:26:13:cb:f8:aa:d3:7f:b7:b9:35:72:f0:b2:80:72: 9e:1d:e1:5c:d4:97:51:bb:b8:55:ac:e2:52:df:4b:a0:1a:8e: 5a:f1:b3:c1:b9:8a:b7:a1:ef:f3:df:c5:ff:64:20:81:40:7a: d5:fa:ea:96:1b:e8:cd:f8:c3:a1:59:ed:23:a0:e9:4c:de:9f: b6:c9:11:83:70:4e:e3:02:34:1b:23:c6:e7:85:8a:1c:58:3c: 8a:54:52:7e:93:c6:5a:ea:d7:2a:5d:c1:d4:a9:5a:5c:d1:35: b4:0c:a3:ef:d9:f7:fd:a6:50:d7:13:55:c1:7c:b9:26:0e:ae: 16:2e:8b:b1:6d:6c:ea:67:c1:11:13:fb:f1:d5:19:2c:01:a2: 8b:f1:3a:83:4f:b0:6d:48:7b:f5:e5:3f:72:92:86:41:a2:ba: 4a:12:71:49:a0:2d:e2:c4:99:e4:70:02:8a:44:8e:db:e1:76: c0:70:33:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjQwNTE5MDMzNjU5WhcNMjQwNTI2MDMzNjU5WjAYMRYwFAYD VQQDEw02NjQ5NzNkYy1lYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnqhMgjeBWjCTtj1eqqRXiAQ4z2sJ0TPhcPcqi61FdO0z+E9FldHkpPELd5j SmyZJeR5cxEbMMlt7nHKvuj5xpWj9CHYiVuZR6CF9HIpxIKrTB3QsaO+PH+S/PFm IYzYNRy4u7izmhTuzCGFvixClaemVFYrvawG7DW8/xjRHY3aUzvh1XYrd4Ce6Rjb vp8UGXzaywa2QOhhEE0W9UGK1Oe43eCIjvLaHHjIt3DgYwYp73ClOfYQWO3Xmo3M n772bTZjFXZf6Au+s8QUZkV8cW1Q3IQP7Dln6KWYJ/ulrQWZWzzxDImdAcGrK5O2 pGrUHJX5U0uPUpwdt8/l8hqgfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJp8jOa IR+3kwY913iIqFSh9ojYMB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt78yxkWxO4yxrm2VeBMKf4M13XfNoLTFcdQA5j9QrfttOOITYKPic 2BMkEyr4KKiP06oEwSTl7EbrX0I5TxvAffqLmz6ELwIxz6omE8v4qtN/t7k1cvCy gHKeHeFc1JdRu7hVrOJS30ugGo5a8bPBuYq3oe/z38X/ZCCBQHrV+uqWG+jN+MOh We0joOlM3p+2yRGDcE7jAjQbI8bnhYocWDyKVFJ+k8Za6tcqXcHUqVpc0TW0DKPv 2ff9plDXE1XBfLkmDq4WLouxbWzqZ8ERE/vx1RksAaKL8TqDT7BtSHv15T9ykoZB orpKEnFJoC3ixJnkcAKKRI7b4XbAcDPy -----END CERTIFICATE-----Generated at Sun May 19 04:20:41 2024 by rpki-client on console-ams.rpki-client.org