$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: LpKyclW5aHkJdff9oqy2tgQfQQILRVngO2rj+NnodWM= Subject key identifier: 57:74:14:EC:22:67:3B:54:8B:6D:C4:12:D4:CE:AE:51:23:41:C1:98 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 021C Signing time: Sun 19 May 2024 04:06:55 +0000 Manifest this update: Sun 19 May 2024 04:06:54 +0000 Manifest next update: Sun 26 May 2024 04:06:54 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: TG8ayBmIk5dEzxe/Zamr0t5Qm9Bj02HDF+ILVXoc8CY=) 2: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: +a0U6w1CjuusxBG03ixVQAqkLcwL21Ku4OSmZ/v9k2w=) 3: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: s+HkYvvknTVhjDiXk+JKRxeWvfXyhf8f2Sf1Vm7zUxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: May 19 04:06:54 2024 GMT Not After : May 26 04:06:54 2024 GMT Subject: CN=66497adf-4b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:32:61:93:2e:18:01:c7:a0:e8:0d:c9:48: e6:6a:52:39:88:b0:4e:fc:9a:b3:46:07:fd:18:93: 89:1c:79:16:b3:36:74:3f:ee:e6:c0:9b:93:22:79: 19:da:c9:29:74:21:7b:6c:18:4b:6b:de:b5:27:fa: 48:f8:d8:32:1d:e5:42:af:10:81:20:11:42:fb:2d: 98:36:e3:7a:30:12:9b:18:e9:d8:86:08:81:1f:f4: 89:cd:e4:78:e3:d4:95:fb:6d:29:eb:16:19:87:59: c2:75:97:d0:ca:2c:ac:ef:c4:77:ca:c3:4d:40:a2: 38:3d:a4:77:a5:09:11:a1:60:56:98:4f:da:69:48: 30:b1:71:df:49:0a:bd:13:96:97:d1:fd:d0:56:7c: b5:77:f0:79:55:ca:65:2d:e0:20:ff:75:1f:a5:78: 07:8e:5f:6d:9a:41:76:8e:a8:1c:82:de:bc:95:6d: 91:0d:b5:49:3d:0e:b3:53:f8:99:11:2a:b2:91:59: a8:fb:b5:2c:1b:e8:27:2e:b0:03:c6:4f:2f:a6:45: 75:47:11:c0:01:9e:d7:48:a4:3e:2f:3c:c5:f8:3d: c5:9d:bc:08:1e:90:7a:41:b4:ff:c8:74:b0:cc:3b: c8:5d:94:a9:b2:f9:00:83:41:9e:25:28:20:e8:db: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:74:14:EC:22:67:3B:54:8B:6D:C4:12:D4:CE:AE:51:23:41:C1:98 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4c:bc:fd:73:40:b4:19:3e:1d:5a:31:06:33:61:a9:bf:1e: 7c:56:54:0d:f7:47:40:91:3d:f9:6c:5d:25:8c:85:57:78:eb: c7:5a:85:77:5f:7d:55:fc:f7:ba:f9:7d:2a:e9:88:b7:cd:9c: 78:0d:05:56:87:d1:cc:4d:b6:da:bf:bb:78:3d:09:dd:58:34: 44:be:37:8c:07:95:1b:43:eb:9a:65:50:30:f5:c6:41:86:ad: 71:52:ba:ff:97:70:17:0e:6d:69:e3:d3:c4:ea:b2:17:a8:0d: bf:9b:0b:95:ac:e6:00:7a:64:bb:ed:5f:cc:3c:71:88:eb:0f: b7:67:c1:55:57:f4:b5:5b:0d:f6:27:e1:63:f0:27:98:3a:d0: 6f:7f:c3:d2:0f:23:f8:66:53:fa:ea:a8:7a:24:9e:92:ca:c9: a4:15:11:e3:49:c6:40:07:da:7e:ff:91:1f:af:d1:14:c8:11: 08:1f:5f:a3:25:5a:c9:e4:4b:8f:f9:c7:b0:85:dc:35:13:5a: 40:09:43:f9:a0:fa:99:d7:a7:00:10:93:7c:f1:67:b1:b0:59: 71:63:22:18:8a:b1:1a:2d:a9:39:2a:8f:e5:bb:ce:a6:fc:b5: 27:ab:ab:4e:c9:d6:e3:bd:bf:f8:c6:b9:07:d3:f1:0c:fc:d6: da:c5:a8:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQwNTE5MDQwNjU0WhcNMjQwNTI2MDQwNjU0WjAYMRYwFAYD VQQDEw02NjQ5N2FkZi00YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTwyYZMuGAHHoOgNyUjmalI5iLBO/JqzRgf9GJOJHHkWszZ0P+7mwJuTInkZ 2skpdCF7bBhLa961J/pI+NgyHeVCrxCBIBFC+y2YNuN6MBKbGOnYhgiBH/SJzeR4 49SV+20p6xYZh1nCdZfQyiys78R3ysNNQKI4PaR3pQkRoWBWmE/aaUgwsXHfSQq9 E5aX0f3QVny1d/B5VcplLeAg/3UfpXgHjl9tmkF2jqgcgt68lW2RDbVJPQ6zU/iZ ESqykVmo+7UsG+gnLrADxk8vpkV1RxHAAZ7XSKQ+LzzF+D3FnbwIHpB6QbT/yHSw zDvIXZSpsvkAg0GeJSgg6NvvXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd0FOwi ZztUi23EEtTOrlEjQcGYMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9TLz9c0C0GT4dWjEGM2Gpvx58VlQN90dAkT35bF0ljIVXeOvHWoV3 X31V/Pe6+X0q6Yi3zZx4DQVWh9HMTbbav7t4PQndWDREvjeMB5UbQ+uaZVAw9cZB hq1xUrr/l3AXDm1p49PE6rIXqA2/mwuVrOYAemS77V/MPHGI6w+3Z8FVV/S1Ww32 J+Fj8CeYOtBvf8PSDyP4ZlP66qh6JJ6SysmkFRHjScZAB9p+/5Efr9EUyBEIH1+j JVrJ5EuP+cewhdw1E1pACUP5oPqZ16cAEJN88WexsFlxYyIYirEaLak5Ko/lu86m /LUnq6tOydbjvb/4xrkH0/EM/Nbaxajr -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org