$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: wTlhjYYSkIMPUrVrjvvbenels/A2iz5m5aECX9ASuNM= Subject key identifier: D6:16:07:D3:27:2A:80:BD:F8:7D:8E:6A:17:29:FD:09:74:90:52:DC Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: AE Signing time: Sun 19 May 2024 06:39:53 +0000 Manifest this update: Sun 19 May 2024 06:39:53 +0000 Manifest next update: Sun 26 May 2024 06:39:53 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: j0OBM7PGIEQ6SYef9pZBfsEp14osEIrtIOaA0wtv9MY=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: fORQkqLvJ2dGBDBnaZU9L7Plq+kw/h2X+nWJ/fFzZps=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: WHaadnKjNZQDbadv+Fexmh1Wu5Tp8jJIMAgwTj5mmBw=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: NyRhFKoeq17kmMX8OQZh3mkXOb3bkuMOT5GFnj9SEJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: May 19 06:39:53 2024 GMT Not After : May 26 06:39:53 2024 GMT Subject: CN=66499eb9-1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:e8:b7:e7:84:fe:bb:0c:68:66:38:67:f6: a6:5e:81:3d:e7:b1:28:2c:82:d6:0f:b7:35:0d:53: 8d:40:d3:d1:2f:8e:52:1b:6a:cc:e1:ab:09:fd:c2: b3:de:b8:7c:c1:89:f2:f1:ab:ac:33:7b:70:ae:55: e8:2f:af:b5:1e:b8:67:fd:11:9a:a7:1e:8b:cf:89: b3:38:8c:53:4b:56:1e:33:08:ba:e3:b1:09:d3:72: f2:f9:47:11:6d:ae:99:1a:a2:f4:51:5a:fc:f3:b1: 8a:fd:e0:91:d5:e4:8e:12:b1:65:33:cc:3f:92:52: 0a:46:54:ac:50:de:94:17:81:a4:d1:58:18:dd:78: 44:6c:21:23:96:4d:d7:cc:d1:5c:db:f4:3b:f8:ac: b2:fe:bd:49:61:db:46:69:44:a7:73:30:cc:29:45: 12:e0:36:10:49:c6:2b:a6:8a:b0:28:38:f1:3e:52: fe:a8:6b:7b:f6:d1:8b:bc:c6:07:7d:ca:4d:57:16: 57:5e:47:b0:90:bb:d5:d7:4c:1e:4c:a3:4f:5e:2e: ad:8c:3f:a8:95:ae:87:d8:2f:2f:ec:e1:bb:9d:a7: 7f:ba:6c:af:d8:37:f5:78:47:ad:86:c2:67:e5:18: b3:5f:a2:1b:5c:58:be:cf:95:0c:e9:7f:1b:57:8a: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:16:07:D3:27:2A:80:BD:F8:7D:8E:6A:17:29:FD:09:74:90:52:DC X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:67:21:c8:95:f7:f1:d6:41:9b:13:36:18:e2:06:24:df:87: a7:29:6c:88:f1:08:e1:b0:18:8d:96:09:6c:b4:ff:c7:26:fc: 52:df:a0:d4:ce:8d:8d:23:f6:b2:9c:61:c7:c2:dc:b2:68:a4: 8e:ae:47:a8:02:b2:d6:e0:33:fe:ed:cd:ab:d4:7d:1a:78:0f: 16:07:71:b5:b1:20:5a:43:be:15:57:64:11:f9:70:9d:9a:d8: 7b:6a:39:5a:1e:f6:75:8d:8f:18:c4:05:fc:e8:fc:47:49:1f: 4f:81:57:15:2e:90:ea:c3:89:8b:32:17:52:4d:6d:78:ba:72: 59:63:ff:74:dd:b7:66:ef:6d:17:36:86:69:67:5e:40:c7:2e: 40:ab:cb:53:4c:ad:f3:2d:08:02:9b:f1:85:52:ce:5b:88:59: 47:12:1c:f7:5e:a6:cb:e3:48:e2:04:7a:06:7b:0d:89:23:25: ee:ba:23:db:3a:f4:d9:47:1c:50:ef:dd:d5:86:a9:f8:2b:4e: 0a:3c:0b:88:f3:15:b4:5f:8b:5f:60:dc:1a:14:97:58:a6:db: ad:85:b1:39:ae:93:a5:6b:d6:11:d1:fd:92:80:11:62:dd:f2: 7c:0b:22:85:f2:28:3b:94:1b:86:c0:a1:0f:92:c0:36:5c:22: f8:ec:86:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjQwNTE5MDYzOTUzWhcNMjQwNTI2MDYzOTUzWjAYMRYwFAYD VQQDEw02NjQ5OWViOS0xNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwbot+eE/rsMaGY4Z/amXoE957EoLILWD7c1DVONQNPRL45SG2rM4asJ/cKz 3rh8wYny8ausM3twrlXoL6+1Hrhn/RGapx6Lz4mzOIxTS1YeMwi647EJ03Ly+UcR ba6ZGqL0UVr887GK/eCR1eSOErFlM8w/klIKRlSsUN6UF4Gk0VgY3XhEbCEjlk3X zNFc2/Q7+Kyy/r1JYdtGaUSnczDMKUUS4DYQScYrpoqwKDjxPlL+qGt79tGLvMYH fcpNVxZXXkewkLvV10weTKNPXi6tjD+ola6H2C8v7OG7nad/umyv2Df1eEethsJn 5RizX6IbXFi+z5UM6X8bV4qoeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYWB9Mn KoC9+H2Oahcp/Ql0kFLcMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWZyHIlffx1kGbEzYY4gYk34enKWyI8QjhsBiNlglstP/HJvxS36DU zo2NI/aynGHHwtyyaKSOrkeoArLW4DP+7c2r1H0aeA8WB3G1sSBaQ74VV2QR+XCd mth7ajlaHvZ1jY8YxAX86PxHSR9PgVcVLpDqw4mLMhdSTW14unJZY/903bdm720X NoZpZ15Axy5Aq8tTTK3zLQgCm/GFUs5biFlHEhz3XqbL40jiBHoGew2JIyXuuiPb OvTZRxxQ793Vhqn4K04KPAuI8xW0X4tfYNwaFJdYptuthbE5rpOla9YR0f2SgBFi 3fJ8CyKF8ig7lBuGwKEPksA2XCL47IYy -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org