$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json) Hash identifier: 0g+iMlpKrpM2aNYFYU5WtFU4ersF4/7L1jviYEmkOfo= Subject key identifier: 51:32:95:CD:E8:F8:56:05:A6:44:CD:48:FE:81:F0:18:28:9F:80:B1 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft Manifest number: 0A26 Signing time: Sat 18 May 2024 20:34:35 +0000 Manifest this update: Sat 18 May 2024 20:34:34 +0000 Manifest next update: Sat 25 May 2024 20:34:34 +0000 Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: Ti/TxRU8XybKlpkjp+4pz7tYUsiXfFFrysILGfxP2a4=) 2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: IXdOLb5XGDPUV+uNEtH6HzYSX48p5a2jXIDxz5vqGBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: May 18 20:34:34 2024 GMT Not After : May 25 20:34:34 2024 GMT Subject: CN=664910da-3365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:fe:6b:3a:12:73:f4:d1:7b:e7:37:5c:b9: 70:21:c1:35:db:b4:d5:b5:7c:89:85:5a:2b:13:84: 94:e5:82:dc:1f:11:1f:8b:a3:44:f0:d9:e5:24:32: a8:ee:04:a1:9c:f2:54:02:10:68:55:e1:68:52:df: 39:a1:77:38:5f:2f:0d:83:1a:37:5e:c3:f6:18:de: 00:50:43:36:4f:10:8a:f9:ad:d6:f1:36:49:41:35: 74:b7:b1:d3:0c:34:b1:71:42:6b:5d:4c:26:bf:0e: 10:51:08:4b:2b:72:b1:2b:3f:7a:a7:66:04:e2:3e: a2:19:7d:28:d7:9d:85:9b:75:e0:38:f5:07:df:da: 83:57:eb:23:ce:a3:32:b0:f6:8c:9f:75:7c:5d:22: bb:a5:ac:bd:74:36:d0:29:07:41:87:b7:79:67:1b: 51:26:67:70:8e:15:81:0e:3a:93:16:7d:48:62:51: 6f:19:d5:ec:36:21:a4:74:79:da:66:fe:32:3c:59: 82:1e:7d:36:7b:63:73:a9:67:d3:32:d0:d6:86:7b: 02:ea:ab:11:1c:69:84:64:91:44:22:22:77:58:f3: 9b:1f:84:f1:c5:0b:c3:b7:f9:82:3e:b6:2f:c0:7d: db:66:7b:d8:e4:de:41:60:2c:96:e6:d9:59:8e:9a: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:95:CD:E8:F8:56:05:A6:44:CD:48:FE:81:F0:18:28:9F:80:B1 X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:30:2e:d3:bc:83:a5:f4:20:ca:6b:a2:5c:dc:a6:2e:71:52: 4b:8c:e2:17:ca:1a:af:af:1f:f9:dd:f4:55:a8:c3:c2:ab:32: 19:eb:db:5b:16:d6:47:ca:8d:8a:fc:5e:b3:b8:dc:05:42:05: 09:00:28:b4:e9:c0:63:f9:e4:31:cc:23:5f:d8:3f:58:6d:5f: 31:ad:88:49:63:b6:2e:09:0a:24:a0:96:47:ae:61:65:cd:c4: 3d:9c:a9:aa:a3:29:39:0a:2b:47:05:03:98:0c:fd:c5:0e:6c: 71:e8:c4:2b:3e:c6:d8:e6:77:b7:0c:06:45:a2:f7:65:cd:a0: d5:80:e0:8d:c2:43:c8:17:e9:e2:fb:bf:78:54:c7:db:2d:0e: 99:d8:06:46:54:8d:ea:75:58:cc:70:01:a2:4d:8d:dd:44:79: 81:4f:21:4f:14:b3:e8:f2:f7:a3:58:5e:89:19:29:1e:86:57: a2:39:9b:a5:f9:f3:9a:0e:d3:33:a9:d5:b3:6d:4e:f1:b7:0f: 9f:6f:b9:94:df:77:d7:8b:2c:9b:f4:f1:79:3d:c3:38:76:2f: a5:63:03:ac:dd:61:f0:93:80:f8:9d:29:6c:45:35:e2:41:84: 2b:c7:e3:97:2c:9e:f6:39:cb:40:9b:2a:28:94:94:e1:a5:d5: e3:93:2b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjQwNTE4MjAzNDM0WhcNMjQwNTI1MjAzNDM0WjAYMRYwFAYD VQQDEw02NjQ5MTBkYS0zMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/r+azoSc/TRe+c3XLlwIcE127TVtXyJhVorE4SU5YLcHxEfi6NE8NnlJDKo 7gShnPJUAhBoVeFoUt85oXc4Xy8Ngxo3XsP2GN4AUEM2TxCK+a3W8TZJQTV0t7HT DDSxcUJrXUwmvw4QUQhLK3KxKz96p2YE4j6iGX0o152Fm3XgOPUH39qDV+sjzqMy sPaMn3V8XSK7pay9dDbQKQdBh7d5ZxtRJmdwjhWBDjqTFn1IYlFvGdXsNiGkdHna Zv4yPFmCHn02e2NzqWfTMtDWhnsC6qsRHGmEZJFEIiJ3WPObH4TxxQvDt/mCPrYv wH3bZnvY5N5BYCyW5tlZjpqZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEylc3o +FYFpkTNSP6B8Bgon4CxMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi cnVMcGxJaEN6ckMwQko1NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXMC7TvIOl9CDKa6Jc3KYucVJLjOIXyhqvrx/53fRVqMPCqzIZ69tb FtZHyo2K/F6zuNwFQgUJACi06cBj+eQxzCNf2D9YbV8xrYhJY7YuCQokoJZHrmFl zcQ9nKmqoyk5CitHBQOYDP3FDmxx6MQrPsbY5ne3DAZFovdlzaDVgOCNwkPIF+ni +794VMfbLQ6Z2AZGVI3qdVjMcAGiTY3dRHmBTyFPFLPo8vejWF6JGSkehleiOZul +fOaDtMzqdWzbU7xtw+fb7mU33fXiyyb9PF5PcM4di+lYwOs3WHwk4D4nSlsRTXi QYQrx+OXLJ72OctAmyoolJThpdXjkyvn -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org