$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: ZFsM26MXejQ+MgZibomxP0xNE1K8EWnSt0eH9U39vGs= Subject key identifier: 2B:69:E5:23:B7:EE:B7:6B:A1:73:25:CF:7C:31:A8:73:AD:0E:F6:8A Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: DE Signing time: Fri 31 May 2024 06:54:00 +0000 Manifest this update: Fri 31 May 2024 06:53:59 +0000 Manifest next update: Fri 07 Jun 2024 06:53:59 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: s3iC0oE+OrrnkVd5VVKUZ5BIrwT989kMmBu0DFJ8EJk=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: 63Cg8UWmGVPjQtQwAhVDY7/yUPc1L0LYA1nO69mjsoE=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: k8fn8kaAVqX+FyPeWprQ1+C6X5Mp6iWOh3NubB8x45A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 31 06:53:59 2024 GMT Not After : Jun 7 06:53:59 2024 GMT Subject: CN=66597407-8190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:18:76:bc:81:31:7d:8e:80:6b:67:a7:38: 4e:21:99:26:e1:83:45:4c:ae:8b:3b:13:9b:85:d9: d5:49:67:6b:d8:a5:c0:bb:29:65:95:84:3d:60:bc: 27:44:21:bb:5f:b8:f6:4a:cb:66:c9:3a:a2:e9:39: 49:3e:55:7a:4e:ec:84:0b:e1:c4:df:94:76:d9:3a: f5:8e:bf:02:a5:04:94:72:98:d9:fe:c8:93:90:49: 50:fe:4b:e4:16:71:bd:6b:1b:e5:16:47:69:d0:2e: 0f:36:5b:e9:22:28:2d:58:73:cd:42:4f:51:c3:00: 53:cc:f8:1c:de:2f:68:8f:07:d1:e4:32:1e:ab:5f: 52:09:73:5f:d9:7a:b2:43:3c:a9:e5:6e:15:ac:02: 54:65:fc:d2:84:36:1b:40:5f:c4:64:fa:ee:4c:2f: ab:ed:44:3e:eb:5b:29:3d:e2:aa:c0:72:df:5a:2b: b5:6e:3e:71:c2:c9:93:90:a3:09:f2:4e:ca:06:d1: 31:e7:02:be:ca:98:8f:96:44:bc:a5:9c:13:c3:f7: 45:54:46:0e:b7:d8:fd:cd:1e:01:c4:bf:7f:15:d0: ad:4f:92:fe:82:89:82:04:d6:93:14:38:70:ff:86: 6e:20:b2:ad:30:66:48:54:17:92:f5:9c:46:96:d5: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:E5:23:B7:EE:B7:6B:A1:73:25:CF:7C:31:A8:73:AD:0E:F6:8A X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:fc:6e:2a:27:0d:b5:04:8a:f6:0f:c2:7c:8d:85:4b:04: c6:e0:a5:bd:8a:a6:ac:57:14:15:6f:7a:5d:0b:96:ec:38:db: b1:a2:0f:60:36:62:28:d1:d6:26:01:32:8c:a9:5f:e8:e9:cd: a3:6b:8d:72:96:56:f7:44:2f:5b:2c:35:bb:96:3c:fe:b0:5a: 76:f5:9e:c3:71:23:98:ce:41:27:cd:54:3e:a0:0b:68:77:f1: eb:53:f1:43:cb:72:99:76:93:46:43:12:90:44:bf:93:0c:f5: e0:93:7d:52:1e:4e:9d:44:1d:85:38:39:8b:48:a4:1f:80:f3: 58:63:51:f9:6d:38:69:90:f5:f3:76:72:84:12:df:a1:eb:de: ba:c9:fc:38:34:c9:fd:5c:b2:7f:89:10:08:4e:ce:4c:1f:e7: 11:d8:87:4d:e4:20:28:4b:aa:27:b6:c3:93:86:8f:f7:6b:ff: c2:71:2b:8c:74:70:81:9d:9b:7f:5a:6c:70:dd:a0:7f:e2:f9: e2:18:d5:d5:78:42:87:1d:ef:9b:46:60:a4:1c:d3:f7:68:86: e5:78:73:ea:cb:b1:f6:ad:c5:f0:5e:ed:ce:28:3f:ab:39:0b: 88:93:d9:6a:96:c2:67:2a:19:74:9a:06:cc:8d:b6:ef:22:9c: a8:68:8a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjQwNTMxMDY1MzU5WhcNMjQwNjA3MDY1MzU5WjAYMRYwFAYD VQQDEw02NjU5NzQwNy04MTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZYYdryBMX2OgGtnpzhOIZkm4YNFTK6LOxObhdnVSWdr2KXAuylllYQ9YLwn RCG7X7j2SstmyTqi6TlJPlV6TuyEC+HE35R22Tr1jr8CpQSUcpjZ/siTkElQ/kvk FnG9axvlFkdp0C4PNlvpIigtWHPNQk9RwwBTzPgc3i9ojwfR5DIeq19SCXNf2Xqy Qzyp5W4VrAJUZfzShDYbQF/EZPruTC+r7UQ+61spPeKqwHLfWiu1bj5xwsmTkKMJ 8k7KBtEx5wK+ypiPlkS8pZwTw/dFVEYOt9j9zR4BxL9/FdCtT5L+gomCBNaTFDhw /4ZuILKtMGZIVBeS9ZxGltUM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtp5SO3 7rdroXMlz3wxqHOtDvaKMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCN/xuKicNtQSK9g/CfI2FSwTG4KW9iqasVxQVb3pdC5bsONuxog9g NmIo0dYmATKMqV/o6c2ja41yllb3RC9bLDW7ljz+sFp29Z7DcSOYzkEnzVQ+oAto d/HrU/FDy3KZdpNGQxKQRL+TDPXgk31SHk6dRB2FODmLSKQfgPNYY1H5bThpkPXz dnKEEt+h6966yfw4NMn9XLJ/iRAITs5MH+cR2IdN5CAoS6ontsOTho/3a//CcSuM dHCBnZt/Wmxw3aB/4vniGNXVeEKHHe+bRmCkHNP3aIbleHPqy7H2rcXwXu3OKD+r OQuIk9lqlsJnKhl0mgbMjbbvIpyoaIpH -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org