$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: uJgXdInviptUWLnsYI4Zmu5gppRp4w0mLZRmLAdMtw0= Subject key identifier: CA:80:87:70:67:7A:92:B0:4A:53:7B:36:E2:D2:8D:7E:4C:1B:AA:23 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 0414 Signing time: Sun 19 May 2024 02:06:18 +0000 Manifest this update: Sun 19 May 2024 02:06:18 +0000 Manifest next update: Sun 26 May 2024 02:06:18 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: Qprf6MUn47xBln3h286pblFkIKNUOAx69YRJmoNQmO4=) 2: 6608D04620E911EC891FA162C4F9AE02.roa (hash: lrbydhSrpno0Ynb5k1Wi71w0BmNH6uvgTMCbCFodlLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: May 19 02:06:18 2024 GMT Not After : May 26 02:06:18 2024 GMT Subject: CN=66495e9a-d201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:a8:aa:e2:81:37:54:6a:93:f0:b2:e0:0c: 08:51:36:69:a2:9c:92:35:65:7e:2b:3b:7e:dc:77: e7:a8:13:e0:bd:29:ea:e0:61:6b:7d:56:78:d3:f8: 2b:39:b7:5d:53:77:b6:bc:f5:d7:37:d5:83:61:4c: 63:cc:c7:d5:8b:f0:27:54:8a:ae:bf:4e:81:05:0d: 81:b1:80:a7:83:e7:0c:28:42:dc:c2:54:a7:ba:b1: 3f:b2:af:0a:3a:d7:91:50:31:dc:84:24:53:c0:95: fb:ec:f3:ce:9c:9c:cc:3e:9a:3e:1e:c7:6e:62:58: 20:b9:54:c0:7b:26:7b:75:a2:1d:09:ef:dd:98:fe: 48:41:34:f8:24:3a:e5:9b:2d:11:ed:16:af:68:c8: 3a:15:f2:6b:57:0b:12:45:f6:77:8c:be:21:e2:7d: 83:c1:51:5d:ea:58:08:bb:05:bc:ab:8d:94:d4:b4: 8b:ad:4d:fc:8c:a0:fc:5d:7c:27:85:6a:82:4d:a9: 95:1f:07:73:b1:da:03:44:1f:20:f7:f3:4a:46:c4: ad:22:32:8b:f4:52:53:67:19:cd:9d:fe:33:41:1b: 36:bc:c5:ae:90:2a:cc:9b:98:58:96:57:3a:38:c1: 53:59:d9:83:ed:1e:43:18:2d:9c:43:8b:84:74:01: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:87:70:67:7A:92:B0:4A:53:7B:36:E2:D2:8D:7E:4C:1B:AA:23 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:19:b1:62:19:b7:38:63:4f:23:00:c2:00:d6:b7:38:f7:3a: 60:19:e8:cb:13:39:fc:7a:27:0f:fe:16:1e:c8:93:58:f0:cb: a3:04:b2:18:a4:86:0d:38:32:79:c5:c4:3c:5e:f0:4a:27:77: e2:19:35:14:3c:e0:b5:ff:95:93:93:00:fe:38:ad:af:8d:b7: d8:5a:38:bb:c2:93:53:96:70:ef:25:aa:c4:09:97:4a:c5:24: fa:8d:d1:4c:e4:bb:64:6d:ab:15:3c:a4:81:f5:ea:86:91:36: 27:41:15:4f:a2:27:b5:76:d0:08:b0:9e:d0:a1:44:e2:7a:22: c6:b4:c0:88:85:be:5f:52:d8:8e:48:f7:67:63:94:51:af:cc: a9:45:b9:ae:a5:3a:ab:10:b5:d6:d6:c9:23:c4:1b:3c:e9:15: a9:59:a4:0f:00:db:5e:13:eb:8e:2f:e1:b3:a8:5a:2d:ea:bb: 45:98:d9:3b:99:49:96:a1:da:a8:f5:1f:75:5a:54:88:76:03: 3d:e8:95:f9:ff:89:1a:76:de:e4:76:a9:9f:f3:5f:f9:cf:96: a5:40:2f:fe:dd:59:3d:dc:d4:1b:70:5c:aa:10:02:e6:9e:ae: 9f:70:bc:5e:81:70:90:a9:2c:89:b4:7a:bf:14:cd:0b:e5:c6: f8:98:2b:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjQwNTE5MDIwNjE4WhcNMjQwNTI2MDIwNjE4WjAYMRYwFAYD VQQDEw02NjQ5NWU5YS1kMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rioquKBN1Rqk/Cy4AwIUTZpopySNWV+Kzt+3HfnqBPgvSnq4GFrfVZ40/gr ObddU3e2vPXXN9WDYUxjzMfVi/AnVIquv06BBQ2BsYCng+cMKELcwlSnurE/sq8K OteRUDHchCRTwJX77PPOnJzMPpo+HsduYlgguVTAeyZ7daIdCe/dmP5IQTT4JDrl my0R7RavaMg6FfJrVwsSRfZ3jL4h4n2DwVFd6lgIuwW8q42U1LSLrU38jKD8XXwn hWqCTamVHwdzsdoDRB8g9/NKRsStIjKL9FJTZxnNnf4zQRs2vMWukCrMm5hYllc6 OMFTWdmD7R5DGC2cQ4uEdAGDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqAh3Bn epKwSlN7NuLSjX5MG6ojMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtGbFiGbc4Y08jAMIA1rc49zpgGejLEzn8eicP/hYeyJNY8MujBLIY pIYNODJ5xcQ8XvBKJ3fiGTUUPOC1/5WTkwD+OK2vjbfYWji7wpNTlnDvJarECZdK xST6jdFM5LtkbasVPKSB9eqGkTYnQRVPoie1dtAIsJ7QoUTieiLGtMCIhb5fUtiO SPdnY5RRr8ypRbmupTqrELXW1skjxBs86RWpWaQPANteE+uOL+GzqFot6rtFmNk7 mUmWodqo9R91WlSIdgM96JX5/4kadt7kdqmf81/5z5alQC/+3Vk93NQbcFyqEALm nq6fcLxegXCQqSyJtHq/FM0L5cb4mCsE -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org