$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: vzwmXT67d3XEBju+Xhpe2sin9F3H0vv7yhrqiPDR18I= Subject key identifier: 00:85:B3:0A:1F:CA:AB:93:50:51:E1:E1:9D:9E:CB:A6:32:1D:08:35 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1D16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1D09 Signing time: Fri 31 May 2024 16:42:23 +0000 Manifest this update: Fri 31 May 2024 16:42:22 +0000 Manifest next update: Fri 07 Jun 2024 16:42:22 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: LTWwXXo6byGbghqxW9xFUzD7l+wevQHoZiuWhtnAzy8=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: BLvI9bBUsLtYR2Pft0jwpM2SvcgK5YyBko45DtuXiUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7446 (0x1d16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: May 31 16:42:22 2024 GMT Not After : Jun 7 16:42:22 2024 GMT Subject: CN=6659fdef-a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:d4:ba:c5:52:ba:95:53:88:52:2d:16:a5: 8e:ba:1c:01:11:fa:3c:d7:5a:7a:fc:be:dc:31:04: d1:42:2e:7a:ed:d0:2c:d5:e4:17:2b:90:79:7f:63: b1:19:4d:df:92:cf:62:86:43:2c:bf:5a:6a:a1:19: b5:e1:58:93:0a:0f:62:df:d5:42:ff:63:4e:1e:e6: 41:4f:61:bf:08:13:52:a5:c3:08:0c:25:29:ec:01: 63:0f:fc:a6:7b:67:b7:61:bb:e6:1d:e3:9e:e0:1c: 97:3a:e9:e9:31:18:35:79:ae:ab:84:a0:7b:30:4b: c6:62:25:eb:43:2f:8f:21:dd:85:e9:b1:2f:22:21: 1a:91:75:ab:b9:e6:4b:36:eb:5e:a7:d0:94:f7:81: 60:53:80:8b:37:7d:7d:26:a6:88:ea:15:bd:83:23: 25:d6:b9:97:76:2f:d8:9a:2e:ca:f4:51:76:da:35: dd:00:10:8f:b5:e3:4d:c8:9d:a9:b3:68:f1:60:40: d1:a4:2e:43:1c:09:db:f6:e6:63:95:38:08:44:46: c0:e9:eb:ec:e9:3f:f8:d0:89:2b:9c:7a:2d:00:79: dd:42:76:b8:de:15:73:36:c6:fa:9a:87:5d:37:31: 75:a7:3c:eb:11:c9:72:e0:fe:e3:65:68:37:a4:6f: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:B3:0A:1F:CA:AB:93:50:51:E1:E1:9D:9E:CB:A6:32:1D:08:35 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:0c:65:15:f8:07:08:8e:3b:ca:8c:78:03:66:3c:80:38:d6: 82:b7:74:51:66:d6:83:f4:bc:0c:5b:0f:b4:bb:d8:e6:69:9d: 4e:95:56:68:6c:fa:df:12:fd:61:d1:cf:9a:01:ec:f2:89:cd: 79:16:b0:d5:e2:ad:32:d5:c8:fc:95:ab:65:c6:a6:bf:46:46: 64:84:5c:1a:90:e9:15:0b:d5:be:26:c6:ef:1f:16:89:0f:10: 35:0c:51:97:48:39:4f:ae:55:2a:8d:3a:09:a0:17:f9:18:c6: 76:ee:9a:4f:54:e1:74:ab:c3:79:5c:63:16:6f:76:ec:be:0d: fd:71:e4:e0:ee:de:2e:b2:c8:a0:3c:c1:7e:eb:29:88:aa:03: aa:78:78:ee:5f:2f:d0:26:ff:df:42:0d:8b:9e:56:0d:03:75: 6c:1a:08:d1:24:8a:06:b7:7e:ed:86:99:f2:bd:8d:39:bb:3c: b1:1a:e7:f5:0e:6a:d5:6e:85:b0:43:f5:ff:62:f2:1d:13:d4: 05:90:69:21:c8:c0:59:79:89:15:4a:ab:6b:38:83:0b:5e:9d: c6:93:4f:87:c1:03:44:99:53:1f:e0:2f:80:24:2e:aa:b0:ef: c3:ad:be:1e:e7:55:9b:49:52:aa:f6:17:87:22:2c:e1:f4:7b: 64:20:74:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjQwNTMxMTY0MjIyWhcNMjQwNjA3MTY0MjIyWjAYMRYwFAYD VQQDEw02NjU5ZmRlZi1hMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniTUusVSupVTiFItFqWOuhwBEfo811p6/L7cMQTRQi567dAs1eQXK5B5f2Ox GU3fks9ihkMsv1pqoRm14ViTCg9i39VC/2NOHuZBT2G/CBNSpcMIDCUp7AFjD/ym e2e3YbvmHeOe4ByXOunpMRg1ea6rhKB7MEvGYiXrQy+PId2F6bEvIiEakXWrueZL Nutep9CU94FgU4CLN319JqaI6hW9gyMl1rmXdi/Ymi7K9FF22jXdABCPteNNyJ2p s2jxYEDRpC5DHAnb9uZjlTgIREbA6evs6T/40IkrnHotAHndQna43hVzNsb6modd NzF1pzzrEcly4P7jZWg3pG+s1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACFswof yquTUFHh4Z2ey6YyHQg1MB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDDGUV+AcIjjvKjHgDZjyAONaCt3RRZtaD9LwMWw+0u9jmaZ1OlVZo bPrfEv1h0c+aAezyic15FrDV4q0y1cj8latlxqa/RkZkhFwakOkVC9W+JsbvHxaJ DxA1DFGXSDlPrlUqjToJoBf5GMZ27ppPVOF0q8N5XGMWb3bsvg39ceTg7t4ussig PMF+6ymIqgOqeHjuXy/QJv/fQg2LnlYNA3VsGgjRJIoGt37thpnyvY05uzyxGuf1 DmrVboWwQ/X/YvIdE9QFkGkhyMBZeYkVSqtrOIMLXp3Gk0+HwQNEmVMf4C+AJC6q sO/Drb4e51WbSVKq9heHIizh9HtkIHT/ -----END CERTIFICATE-----Generated at Fri May 31 17:44:24 2024 by rpki-client on console-fra.rpki-client.org