$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: MhUqa4OK9NzXIbJLOeLAEXLkb2b6OuM0CdzprGTZe68= Subject key identifier: AE:36:AE:7F:6A:D0:A3:CD:3E:96:EA:8E:56:93:52:A8:99:A5:0D:24 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0AC0 Signing time: Sat 18 May 2024 20:06:26 +0000 Manifest this update: Sat 18 May 2024 20:06:25 +0000 Manifest next update: Sat 25 May 2024 20:06:25 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: 7INN9MGzpqXcKDVBSMMsG7EJ7eHjEYXvM5H84rbvV7U=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: RtTKCFPI3qJRyDL5O6Q2LMX3dhxqXJB2E8cnAtCFD8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: May 18 20:06:25 2024 GMT Not After : May 25 20:06:25 2024 GMT Subject: CN=66490a42-9db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:0d:37:85:37:58:4a:9d:d7:38:9b:d5:9b: 45:1e:4f:e5:65:2d:e6:73:8e:15:88:4d:db:93:64: 88:1f:2f:cb:97:91:a8:2f:7d:a8:97:aa:7f:9c:50: 89:49:55:08:8b:08:b7:a7:df:c8:33:00:89:75:87: f6:5a:d7:bf:ba:97:ca:37:22:77:12:98:28:77:82: 1d:58:e0:37:e9:06:c0:0e:ea:bf:8b:15:80:f3:01: 1c:a9:6d:a0:83:94:04:4f:0a:ae:5d:bc:5b:73:1c: a7:78:57:f2:49:27:44:28:f1:73:11:90:87:aa:aa: 39:94:51:6f:3f:a9:dd:e6:55:d9:96:64:2e:f6:1c: 89:9f:21:ba:4c:07:d1:47:78:a6:c4:d3:d1:28:00: ef:40:61:66:ec:96:4e:fb:a7:9e:a4:9a:23:f7:d6: 11:01:51:2e:05:9f:95:3d:5b:1e:b9:d9:11:55:6c: 10:69:a6:cf:ab:59:19:11:80:62:65:86:c2:6b:b3: ac:94:b5:9b:9a:03:80:ae:8d:d2:48:cf:d8:4a:47: 87:5d:2b:37:06:8a:32:5b:55:88:ba:7e:54:a6:fc: 33:90:e1:a1:d6:c8:55:1d:43:e8:56:c0:91:b1:37: 9b:2b:46:9b:b8:04:73:b7:29:e6:6f:db:dd:e0:e8: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:AE:7F:6A:D0:A3:CD:3E:96:EA:8E:56:93:52:A8:99:A5:0D:24 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fa:bb:95:97:0a:07:98:5f:89:db:0e:75:d4:66:02:82:cb: e8:14:ed:33:34:65:04:1f:5d:81:5c:c8:5b:de:30:fb:72:d3: ea:49:43:a7:77:d5:cf:9c:a3:85:1e:cd:6d:26:db:75:51:ef: 1f:05:fd:ef:d8:e4:fa:2f:6f:49:76:0b:bf:98:86:eb:dc:c6: 9f:33:ed:cd:3b:e2:36:23:06:c9:9a:5a:46:f3:30:47:01:32: 39:06:25:e0:ea:56:be:5a:87:f3:b3:d6:bf:b7:95:f8:f3:81: de:e8:82:c0:ea:7c:aa:cb:a6:54:4e:ba:77:2d:82:08:19:bf: 60:df:c5:52:a6:f5:a5:2d:10:66:9a:e6:3b:5d:2e:ac:04:62: 0b:2e:fe:d2:7b:92:8d:83:1d:0b:62:f4:95:53:e7:08:ec:bb: a0:9a:7b:90:b4:18:2c:17:6a:41:10:0a:58:fa:7b:84:20:b8: 3c:44:17:e2:3d:6f:30:af:50:6f:22:32:87:48:ca:dc:fc:b1: db:a3:c5:e7:e1:ca:7a:ab:bf:b1:ce:e6:1e:94:62:78:b0:bb: e3:49:b3:db:4f:d5:e0:93:69:a5:12:b9:5e:a9:e5:e5:19:39: a1:3a:31:e2:cf:d4:ae:fe:b3:23:bc:8e:b7:03:9d:fa:47:a9: c4:70:c2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjQwNTE4MjAwNjI1WhcNMjQwNTI1MjAwNjI1WjAYMRYwFAYD VQQDEw02NjQ5MGE0Mi05ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0oNN4U3WEqd1zib1ZtFHk/lZS3mc44ViE3bk2SIHy/Ll5GoL32ol6p/nFCJ SVUIiwi3p9/IMwCJdYf2Wte/upfKNyJ3Epgod4IdWOA36QbADuq/ixWA8wEcqW2g g5QETwquXbxbcxyneFfySSdEKPFzEZCHqqo5lFFvP6nd5lXZlmQu9hyJnyG6TAfR R3imxNPRKADvQGFm7JZO+6eepJoj99YRAVEuBZ+VPVseudkRVWwQaabPq1kZEYBi ZYbCa7OslLWbmgOAro3SSM/YSkeHXSs3BooyW1WIun5UpvwzkOGh1shVHUPoVsCR sTebK0abuARztynmb9vd4OgSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK42rn9q 0KPNPpbqjlaTUqiZpQ0kMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+ruVlwoHmF+J2w511GYCgsvoFO0zNGUEH12BXMhb3jD7ctPqSUOn d9XPnKOFHs1tJtt1Ue8fBf3v2OT6L29Jdgu/mIbr3MafM+3NO+I2IwbJmlpG8zBH ATI5BiXg6la+Wofzs9a/t5X484He6ILA6nyqy6ZUTrp3LYIIGb9g38VSpvWlLRBm muY7XS6sBGILLv7Se5KNgx0LYvSVU+cI7LugmnuQtBgsF2pBEApY+nuEILg8RBfi PW8wr1BvIjKHSMrc/LHbo8Xn4cp6q7+xzuYelGJ4sLvjSbPbT9Xgk2mlErleqeXl GTmhOjHiz9Su/rMjvI63A536R6nEcMJE -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org