$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json) Hash identifier: mzXsZfT4gNQNVWrRmw9OtlidXJBDfqcyelGijt1LHqs= Subject key identifier: 7F:54:F7:BC:69:1D:33:C4:93:5D:D5:57:01:11:EB:80:8C:C2:B4:D8 Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft Manifest number: 05D3 Signing time: Sun 19 May 2024 00:42:54 +0000 Manifest this update: Sun 19 May 2024 00:42:54 +0000 Manifest next update: Sun 26 May 2024 00:42:54 +0000 Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: Yklag6otOWcpClehwx0yx7tr1ZQLQkmHQ2fiC7fpSUw=) 2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: ZOu32o6P9r0jbCvbJk7rc+xFvyLi86thbWiSe0JW1Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Validity Not Before: May 19 00:42:54 2024 GMT Not After : May 26 00:42:54 2024 GMT Subject: CN=66494b0e-a9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:9f:b4:84:64:ff:92:7f:e8:77:39:96:e1: 69:11:30:b4:b7:2a:04:a6:b8:d5:88:d6:2c:3d:89: 72:dc:e6:0d:cb:7f:c4:d5:74:3d:1b:34:b9:5d:4c: 99:d8:ef:5e:97:5b:a9:9b:e8:60:b4:3f:45:3a:b3: 4e:b2:e5:5b:5c:58:27:2a:78:fb:49:f5:f2:5c:6c: a7:b5:1f:22:45:86:71:4c:65:b0:c4:56:26:f9:f2: 23:69:d5:a1:71:9f:c6:63:b6:09:33:9f:e2:31:30: 26:da:dc:2d:d6:3b:79:6d:a6:53:c9:68:ce:3d:74: 7c:6c:40:ef:8a:5d:c7:48:1a:21:ec:ab:0f:4d:e1: 9a:09:94:e1:e6:d0:ca:f6:7d:a6:2f:d2:6f:51:b3: 82:79:ac:e7:86:3e:80:4e:ec:5e:ea:38:b7:3e:32: 60:66:c2:d5:cd:a5:85:f9:76:11:70:04:31:7b:bf: 0e:ea:6b:69:79:aa:68:c7:45:32:35:d4:7d:4a:24: 32:49:be:84:22:a6:05:56:8f:d2:d6:6a:3d:c1:50: 3f:3a:14:9d:01:ab:c3:b1:e5:36:01:cb:e0:51:f4: 9b:21:6e:3c:49:b5:b8:cb:bd:07:a7:04:28:2d:b6: ca:2f:dd:9e:b7:14:73:f7:22:62:67:98:91:b1:c1: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:54:F7:BC:69:1D:33:C4:93:5D:D5:57:01:11:EB:80:8C:C2:B4:D8 X509v3 Authority Key Identifier: keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:6e:bd:ff:d3:ff:c7:93:a6:b0:b7:1c:ff:d7:1a:43:e9: 90:ed:f0:d2:fb:e4:c9:ff:57:60:a2:d2:b0:fd:05:fc:62:54: c9:4a:46:15:bb:0d:2b:6e:64:d4:1c:6a:0f:03:dc:0a:a5:85: 0f:00:8c:8a:f1:bc:0d:50:bd:25:ea:f3:85:4a:86:77:df:6f: 58:01:81:3d:da:cd:f6:07:b3:65:23:f4:76:f6:5d:53:9d:8f: ed:c9:16:dd:31:94:3f:dc:1f:1e:77:53:1d:b5:c7:55:de:06: 6b:cd:4d:d1:ee:16:56:88:4c:ed:9e:8c:ab:2e:be:1e:c1:ef: 23:3d:7a:9f:85:3c:dc:0a:2a:aa:9d:2e:0d:c7:48:16:ef:90: df:e0:e2:26:a5:83:d7:fa:d1:05:e6:12:3d:1d:9e:b7:7b:e4: 3a:af:b2:74:61:39:11:cf:ce:c2:9d:d7:fb:e6:cd:7e:b8:94: 0c:f2:06:9e:47:4c:66:61:de:30:69:d5:49:46:c4:7f:0d:1d: df:d8:db:96:23:b5:cb:24:eb:50:bb:d4:06:d8:eb:4d:44:dc: 0a:c4:f0:03:ff:aa:b1:8e:33:c4:9d:99:71:32:a7:b7:bc:ba: 1c:61:dd:bd:28:e0:f7:d4:c5:12:08:72:e8:8b:37:84:48:24: 28:03:46:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDk2MzExMC8GA1UEBRMoMUQ0OTJGQTNGM0IyOTU4MDQ5NUE2ODgwRDQwNEVFMEMz NzBBRDkyNTAeFw0yNDA1MTkwMDQyNTRaFw0yNDA1MjYwMDQyNTRaMBgxFjAUBgNV BAMTDTY2NDk0YjBlLWE5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2+J+0hGT/kn/odzmW4WkRMLS3KgSmuNWI1iw9iXLc5g3Lf8TVdD0bNLldTJnY 716XW6mb6GC0P0U6s06y5VtcWCcqePtJ9fJcbKe1HyJFhnFMZbDEVib58iNp1aFx n8Zjtgkzn+IxMCba3C3WO3ltplPJaM49dHxsQO+KXcdIGiHsqw9N4ZoJlOHm0Mr2 faYv0m9Rs4J5rOeGPoBO7F7qOLc+MmBmwtXNpYX5dhFwBDF7vw7qa2l5qmjHRTI1 1H1KJDJJvoQipgVWj9LWaj3BUD86FJ0Bq8Ox5TYBy+BR9JshbjxJtbjLvQenBCgt tsov3Z63FHP3ImJnmJGxwYEBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf1T3vGkd M8STXdVXARHrgIzCtNgwHwYDVR0jBBgwFoAUHUkvo/OylYBJWmiA1ATuDDcK2SUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOTYzLzkwRTgwQkM4OTdF MjExRUI5QjM5RDUzMUM0RjlBRTAyL0hVa3ZvX095bFlCSldtaUExQVR1RERjSzJT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFVrdm9fT3lsWUJKV21pQTFBVHVERGNLMlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OTYzLzkwRTgwQkM4OTdFMjExRUI5QjM5RDUzMUM0RjlBRTAyL0hVa3ZvX095bFlC SldtaUExQVR1RERjSzJTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQDbr3/0//Hk6awtxz/1xpD6ZDt8NL75Mn/V2Ci0rD9BfxiVMlKRhW7 DStuZNQcag8D3AqlhQ8AjIrxvA1QvSXq84VKhnffb1gBgT3azfYHs2Uj9Hb2XVOd j+3JFt0xlD/cHx53Ux21x1XeBmvNTdHuFlaITO2ejKsuvh7B7yM9ep+FPNwKKqqd Lg3HSBbvkN/g4ialg9f60QXmEj0dnrd75DqvsnRhORHPzsKd1/vmzX64lAzyBp5H TGZh3jBp1UlGxH8NHd/Y25Yjtcsk61C71AbY601E3ArE8AP/qrGOM8SdmXEyp7e8 uhxh3b0o4PfUxRIIcuiLN4RIJCgDRhc= -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org