$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: 4RA6ysdaQY6XKI/MwilZXMgqdlKWrhamMdhgKX4VW8I= Subject key identifier: 5E:41:E2:51:31:43:C4:10:14:EF:A0:3E:1A:A1:44:E8:15:F6:45:65 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 93 Signing time: Fri 31 May 2024 07:56:38 +0000 Manifest this update: Fri 31 May 2024 07:56:38 +0000 Manifest next update: Fri 07 Jun 2024 07:56:38 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: cLknfMg/9BZ2YoMr15MRirDMSJRci+EPMwwIXAm+/t8=) 2: 00B2998A576911EEA54BD978C4F9AE02.roa (hash: vp36Zl+WFuWslPPrxZrZo/Ztbdz18Q/TK67tiiSY7d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: May 31 07:56:38 2024 GMT Not After : Jun 7 07:56:38 2024 GMT Subject: CN=665982b6-ac10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:89:5e:56:79:d5:b7:e8:26:1f:a2:5b:d3:c0: f6:f6:31:2d:df:dd:fa:a6:5d:4e:2e:ff:0c:22:15: db:d0:f0:d4:76:66:2e:0a:79:67:ba:0f:ee:72:c3: cd:3b:3a:34:11:81:17:c7:72:eb:fc:37:68:fa:42: 7d:94:49:c5:ec:7f:60:81:36:4c:85:93:9c:31:dc: 05:f4:c0:d5:7d:29:38:4c:d8:9d:da:db:04:05:95: c9:af:02:0d:d8:c2:d1:78:24:8d:fe:a7:8d:5e:e2: 8f:9a:d9:68:d6:5d:f5:f2:60:d0:66:90:6b:4d:21: e8:a2:43:8f:93:01:ce:13:37:27:17:8f:68:2f:a3: 1c:f1:0c:52:19:07:6a:c6:e3:a1:6e:94:7b:16:17: 57:4c:b2:fe:e7:75:70:ea:0d:70:1f:0c:7c:4c:17: cf:38:23:cb:20:54:3d:42:2e:dd:eb:f8:8b:d4:a9: 91:9e:de:1d:98:23:35:4d:09:91:c3:d8:ed:bc:39: 7c:cb:48:03:79:91:a7:f6:24:cf:0a:4a:7d:94:9f: d2:7d:f1:b7:ae:f4:98:e1:7d:72:00:ea:36:79:69: fc:da:0d:17:f0:b5:c8:fd:d2:ca:d5:d7:47:90:3a: 4f:f2:c4:78:69:5f:4e:9c:da:c7:b5:64:27:87:ad: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:E2:51:31:43:C4:10:14:EF:A0:3E:1A:A1:44:E8:15:F6:45:65 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:a5:36:f8:72:65:ed:ee:20:d5:ce:bc:07:cf:3b:3b:97: 5b:4e:10:c9:b4:4b:40:14:aa:2b:11:62:e4:0e:48:cf:c7:ea: 7e:40:b3:1f:34:41:b0:d9:93:c9:c6:1d:13:76:0b:66:f9:cf: 57:3b:ff:99:56:df:a7:3f:45:04:72:ef:61:f0:51:76:69:91: b9:43:5e:b3:90:75:74:f9:ad:a3:fc:de:be:ad:51:73:0c:ed: c2:0a:09:d1:44:79:b8:3d:62:a4:e7:aa:9e:83:1f:2b:8b:6f: b0:68:5a:8a:fb:51:d8:4f:98:b9:9c:01:d5:ae:03:2e:cd:17: 67:0a:e4:3c:0a:8f:ff:8e:d8:d7:69:3b:ec:63:35:0e:f1:b3: 54:59:91:0d:02:10:ea:6f:ef:4c:4a:11:6d:1a:d2:33:af:6e: a5:d9:0f:3c:f2:69:26:97:3c:3b:73:6a:7c:73:e7:8c:a4:f6: 8a:98:19:39:95:21:b2:84:97:53:c2:36:41:5a:8d:0d:3a:43: 5f:4b:e5:19:18:dd:ff:c9:de:d1:4b:00:c1:2a:0d:f1:09:a3: d7:df:12:57:3b:4b:48:17:35:28:29:fd:4b:b6:28:5a:ab:6c: 87:8f:91:6a:bb:ff:ae:4b:bf:4f:6d:e2:06:e3:7c:33:01:3d: 12:cd:4f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjQwNTMxMDc1NjM4WhcNMjQwNjA3MDc1NjM4WjAYMRYwFAYD VQQDEw02NjU5ODJiNi1hYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IleVnnVt+gmH6Jb08D29jEt3936pl1OLv8MIhXb0PDUdmYuCnlnug/ucsPN Ozo0EYEXx3Lr/Ddo+kJ9lEnF7H9ggTZMhZOcMdwF9MDVfSk4TNid2tsEBZXJrwIN 2MLReCSN/qeNXuKPmtlo1l318mDQZpBrTSHookOPkwHOEzcnF49oL6Mc8QxSGQdq xuOhbpR7FhdXTLL+53Vw6g1wHwx8TBfPOCPLIFQ9Qi7d6/iL1KmRnt4dmCM1TQmR w9jtvDl8y0gDeZGn9iTPCkp9lJ/SffG3rvSY4X1yAOo2eWn82g0X8LXI/dLK1ddH kDpP8sR4aV9OnNrHtWQnh60/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5B4lEx Q8QQFO+gPhqhROgV9kVlMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4oKU2+HJl7e4g1c68B887O5dbThDJtEtAFKorEWLkDkjPx+p+QLMf NEGw2ZPJxh0Tdgtm+c9XO/+ZVt+nP0UEcu9h8FF2aZG5Q16zkHV0+a2j/N6+rVFz DO3CCgnRRHm4PWKk56qegx8ri2+waFqK+1HYT5i5nAHVrgMuzRdnCuQ8Co//jtjX aTvsYzUO8bNUWZENAhDqb+9MShFtGtIzr26l2Q888mkmlzw7c2p8c+eMpPaKmBk5 lSGyhJdTwjZBWo0NOkNfS+UZGN3/yd7RSwDBKg3xCaPX3xJXO0tIFzUoKf1Ltiha q2yHj5Fqu/+uS79PbeIG43wzAT0SzU8j -----END CERTIFICATE-----Generated at Fri May 31 10:01:38 2024 by rpki-client on console-ams.rpki-client.org