$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft File: HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json) Hash identifier: hGYvzJG1WBTQhnezV/qObEDi0W3yjIKbCzOsy/rmbWk= Subject key identifier: 76:F9:5F:44:3C:DB:3B:9B:DD:53:90:56:B3:30:C5:D0:62:AB:52:BA Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft Manifest number: 1B33 Signing time: Sat 18 May 2024 16:39:15 +0000 Manifest this update: Sat 18 May 2024 16:39:15 +0000 Manifest next update: Sat 25 May 2024 16:39:15 +0000 Files and hashes: 1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: msBOvfk6vcBYXCOcBzyFou0xIRkaXA7XsvCXxDghh80=) 2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: DbkBrE3yf6eTRjLQ1Tf5NcGY0sop7MmBR+m/dNqdI6I=) 3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: nBhLFz/G2rXndPzhgzBD31wJh18WPJGfGQXA7I+GCSc=) 4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: PJZWl9/W8fabcDKxs3z+LpX5XSTRZXZ8e4Srjm/kLTc=) 5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: OjugscuwSxg6O+LjQabc766gtjQFnuR3xjR9F05JFcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6998 (0x1b56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: May 18 16:39:15 2024 GMT Not After : May 25 16:39:15 2024 GMT Subject: CN=6648d9b3-c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:1c:63:c5:b4:3f:79:a0:0b:0b:1b:14:d8: 9e:13:b3:7b:cb:d5:55:fe:af:ed:0d:a0:f6:d6:70: 8e:c8:58:89:fd:4f:9f:bb:1c:0e:3d:0e:e3:bc:7a: 03:38:ef:b1:a2:3a:12:93:66:91:96:1b:19:7b:ca: 51:66:bf:8f:6e:aa:71:4b:ca:16:11:be:25:d6:f3: e4:4d:b0:16:9c:04:b4:61:23:6e:9d:b8:06:1b:75: ae:12:39:0a:27:f2:76:71:e4:b0:be:2f:ae:9c:00: 5e:38:1c:99:dc:36:fb:17:6a:b9:ca:4d:87:68:8a: ec:11:27:5d:46:4c:e0:c7:39:4f:05:91:75:ec:d7: 3c:af:5f:73:13:54:34:6b:75:52:93:b0:43:73:2d: e1:12:7a:62:44:51:51:4c:25:4d:39:50:ab:5a:43: f8:84:5d:6e:69:82:43:ea:ac:37:e3:54:ea:b2:98: bc:c8:c0:f1:97:ea:d3:9f:81:14:10:e7:68:d5:87: ae:c0:04:a8:eb:b2:83:b5:bb:95:99:2c:67:f3:a6: 34:b7:5c:96:82:4b:31:c1:6a:bb:e7:f7:69:26:f3: 14:47:2a:63:83:a0:94:cf:16:89:65:46:cf:aa:27: f7:4a:eb:ab:53:fd:5f:5c:f2:5e:9e:de:88:18:bd: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:5F:44:3C:DB:3B:9B:DD:53:90:56:B3:30:C5:D0:62:AB:52:BA X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:9e:27:c4:e6:0b:ed:14:e7:8f:d7:ee:c4:c9:de:86:b6: a7:4a:1a:97:66:a3:3e:2a:72:e3:f4:53:38:1f:7f:15:b9:20: 8e:80:55:e0:72:c6:c2:c8:af:3c:cb:03:eb:65:cb:b4:76:91: b6:97:20:c8:4e:47:5e:63:a8:f3:72:df:6d:54:23:8c:74:b0: 4b:e9:c8:c7:b1:cd:bb:b8:e4:8e:7d:a9:eb:00:9c:21:52:19: ed:91:21:ab:cf:fa:c6:62:d4:38:65:9c:ec:4f:4e:07:b4:43: 54:29:ac:1d:ac:93:64:76:d6:8e:03:e5:67:76:46:d9:29:32: e9:36:d6:20:f9:81:2c:60:68:69:20:59:c9:0d:d0:2e:40:3c: 8e:db:4f:f6:96:39:e3:43:22:7a:d0:5d:ad:11:1e:df:cf:29: 15:9a:96:9d:00:36:30:e8:b4:96:08:da:ed:19:b6:3f:35:59: a9:ff:52:20:da:1f:21:6b:9f:e3:3a:44:50:ad:7d:61:71:34: 70:1d:ff:81:d0:37:95:f5:1f:a6:8f:6e:b2:1a:78:c8:18:cd: 97:f0:55:e2:5a:ba:67:3d:0b:79:35:08:db:88:ef:b1:8b:fa: 19:7f:34:4f:0d:7e:6f:5f:4c:93:32:cd:de:fb:60:9d:d2:3b: ea:07:ec:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjQwNTE4MTYzOTE1WhcNMjQwNTI1MTYzOTE1WjAYMRYwFAYD VQQDEw02NjQ4ZDliMy1jNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcQcY8W0P3mgCwsbFNieE7N7y9VV/q/tDaD21nCOyFiJ/U+fuxwOPQ7jvHoD OO+xojoSk2aRlhsZe8pRZr+PbqpxS8oWEb4l1vPkTbAWnAS0YSNunbgGG3WuEjkK J/J2ceSwvi+unABeOByZ3Db7F2q5yk2HaIrsESddRkzgxzlPBZF17Nc8r19zE1Q0 a3VSk7BDcy3hEnpiRFFRTCVNOVCrWkP4hF1uaYJD6qw341Tqspi8yMDxl+rTn4EU EOdo1YeuwASo67KDtbuVmSxn86Y0t1yWgksxwWq75/dpJvMURypjg6CUzxaJZUbP qif3SuurU/1fXPJent6IGL0d7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb5X0Q8 2zub3VOQVrMwxdBiq1K6MB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FFOS8wOERBNjBDNkYxQjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlH Yi1scUtYOTNMdWdMVVlwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd154nxOYL7RTnj9fuxMnehranShqXZqM+KnLj9FM4H38VuSCOgFXg csbCyK88ywPrZcu0dpG2lyDITkdeY6jzct9tVCOMdLBL6cjHsc27uOSOfanrAJwh UhntkSGrz/rGYtQ4ZZzsT04HtENUKawdrJNkdtaOA+VndkbZKTLpNtYg+YEsYGhp IFnJDdAuQDyO20/2ljnjQyJ60F2tER7fzykVmpadADYw6LSWCNrtGbY/NVmp/1Ig 2h8ha5/jOkRQrX1hcTRwHf+B0DeV9R+mj26yGnjIGM2X8FXiWrpnPQt5NQjbiO+x i/oZfzRPDX5vX0yTMs3e+2Cd0jvqB+zy -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org