$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: sDe0Yj2cuF0J4fcEeH7hWE+3wE1n9/8C4bvFMSJM24s= Subject key identifier: 86:DE:90:F1:AF:AA:15:C3:4F:2D:ED:C8:E9:3F:36:6A:1F:4A:2B:C3 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 89 Signing time: Sun 19 May 2024 07:09:54 +0000 Manifest this update: Sun 19 May 2024 07:09:53 +0000 Manifest next update: Sun 26 May 2024 07:09:53 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: jZvbCdw+UY4fke/8rqzI74z2amqToPqwZsfsMc2evzA=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: d4qUUZCMTJGqsgVXJbSv25ILaZv9GF/+8F1MKtPBFUg=) 3: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: hwuGZFS1c2OEbzowaU8aBp9+90fOAJ6vT/p/knft1/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: May 19 07:09:53 2024 GMT Not After : May 26 07:09:53 2024 GMT Subject: CN=6649a5c1-7090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:33:ae:4b:f8:af:5b:93:e9:d9:77:a8:b4:86: d3:0c:77:b9:8a:22:b8:b4:ba:b9:be:05:78:24:a4: 11:6d:7c:7b:87:4e:e2:48:48:68:c8:e6:48:36:d8: 37:41:a3:3a:c7:31:04:f0:60:2a:e6:0e:99:58:6f: 94:dc:3f:3c:56:e7:5f:09:dc:9d:c5:d5:4c:a5:0b: 13:fe:66:ab:7f:5b:27:18:f2:fd:39:c9:73:6f:11: 0c:54:48:a8:d9:8b:54:a0:55:d7:36:8c:da:c4:0c: 88:29:2a:7a:24:20:c6:5f:c5:6f:3d:36:c9:13:b1: 10:db:7d:45:a4:f5:bb:1c:42:4c:72:97:8d:47:09: 16:cd:3b:7b:4d:74:da:1c:78:8a:b6:7e:43:c0:e8: e2:5a:5f:f1:ce:fb:72:9d:11:ee:66:c1:82:bc:4e: 8f:c1:02:1e:ef:14:0f:8a:a7:d2:ed:19:78:2b:74: 7c:29:69:c9:3b:c1:5e:e9:ea:c6:82:cb:ce:5c:fe: ed:42:55:2a:86:45:fc:2a:da:6e:d2:c2:0e:45:8b: f3:aa:bd:c8:35:56:3b:be:f4:9e:52:6e:00:95:31: 31:78:ed:85:15:7b:24:77:34:cf:29:95:e1:61:cb: 42:37:fe:50:5c:51:79:d2:2e:d2:57:2e:a8:82:f9: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DE:90:F1:AF:AA:15:C3:4F:2D:ED:C8:E9:3F:36:6A:1F:4A:2B:C3 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:15:1b:e1:d2:75:49:07:53:78:47:90:04:19:04:b3:7f:52: bf:01:aa:f7:3d:d6:65:5f:f9:f9:c4:31:62:01:75:cc:39:db: 44:28:25:52:a0:e7:a4:fe:10:3d:86:72:e3:e4:1a:a4:ca:e2: b4:1f:69:30:ef:c1:2a:d0:66:3e:eb:81:d2:9f:e1:1e:f6:b9: 3d:f6:1b:6e:41:53:a3:4d:ce:c6:37:4e:c1:f3:55:d2:5d:ee: b7:90:c7:3b:51:7c:7c:2d:d6:9f:3f:0d:f6:a1:3a:f3:7c:ff: ff:e6:d2:79:df:67:40:b6:d5:f6:aa:0f:5a:df:9d:83:a8:b6: 35:d0:3e:4d:49:49:91:30:52:e4:e0:10:8f:a9:37:c4:6d:33: 42:92:51:1a:0e:b0:27:db:cc:26:a5:c4:2f:89:9c:64:f8:09: cd:bd:a8:9e:a2:73:3b:7e:bd:56:1d:49:8b:70:59:f4:c6:7d: 19:5c:ba:e1:16:06:f8:15:63:e9:3c:f0:75:ae:08:8a:fe:a5: 44:25:4b:71:ea:a3:a2:0a:b5:ad:31:99:2b:d3:f5:21:f7:ad: 26:93:99:a7:58:5e:da:57:56:bc:ad:9f:6c:3a:13:1a:88:46: c1:70:27:4e:23:32:b1:73:4f:cd:27:45:74:cb:19:01:72:bf: b4:49:63:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjQwNTE5MDcwOTUzWhcNMjQwNTI2MDcwOTUzWjAYMRYwFAYD VQQDEw02NjQ5YTVjMS03MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DOuS/ivW5Pp2XeotIbTDHe5iiK4tLq5vgV4JKQRbXx7h07iSEhoyOZINtg3 QaM6xzEE8GAq5g6ZWG+U3D88VudfCdydxdVMpQsT/marf1snGPL9OclzbxEMVEio 2YtUoFXXNozaxAyIKSp6JCDGX8VvPTbJE7EQ231FpPW7HEJMcpeNRwkWzTt7TXTa HHiKtn5DwOjiWl/xzvtynRHuZsGCvE6PwQIe7xQPiqfS7Rl4K3R8KWnJO8Fe6erG gsvOXP7tQlUqhkX8Ktpu0sIORYvzqr3INVY7vvSeUm4AlTExeO2FFXskdzTPKZXh YctCN/5QXFF50i7SVy6ogvnCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbekPGv qhXDTy3tyOk/NmofSivDMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqFRvh0nVJB1N4R5AEGQSzf1K/Aar3PdZlX/n5xDFiAXXMOdtEKCVS oOek/hA9hnLj5BqkyuK0H2kw78Eq0GY+64HSn+Ee9rk99htuQVOjTc7GN07B81XS Xe63kMc7UXx8LdafPw32oTrzfP//5tJ532dAttX2qg9a352DqLY10D5NSUmRMFLk 4BCPqTfEbTNCklEaDrAn28wmpcQviZxk+AnNvaieonM7fr1WHUmLcFn0xn0ZXLrh Fgb4FWPpPPB1rgiK/qVEJUtx6qOiCrWtMZkr0/Uh960mk5mnWF7aV1a8rZ9sOhMa iEbBcCdOIzKxc0/NJ0V0yxkBcr+0SWNT -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org