$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft File: HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json) Hash identifier: Coil5XGLLQyLsEXxuek3FHo6ZSILercNrrho2nR9F+w= Subject key identifier: 17:7C:53:FC:B6:8B:92:85:55:73:44:80:9D:EE:37:C7:12:53:CF:AE Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB Certificate issuer: /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft Manifest number: 0D2E Signing time: Sat 18 May 2024 18:42:01 +0000 Manifest this update: Sat 18 May 2024 18:42:01 +0000 Manifest next update: Sat 25 May 2024 18:42:01 +0000 Files and hashes: 1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: kmjBsCXRFK4N/8U5/tg22rQ3xUOxSIsp8iw0QvpGDH8=) 2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: qCAKgLjSLQVpqeSB9DPCjoQb5DaM/m2x9TSh6/Y2h7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB Validity Not Before: May 18 18:42:01 2024 GMT Not After : May 25 18:42:01 2024 GMT Subject: CN=6648f679-0265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:f5:51:0d:01:95:02:c5:0e:c4:e2:5b:d0: 53:80:e9:22:7e:2e:16:20:e7:28:d9:78:dc:74:46: 49:bc:8d:ee:b9:8b:7f:34:e8:e2:a3:27:c4:ac:25: 9b:d9:4f:9d:bf:58:c4:69:aa:b8:35:c7:a8:fb:b3: f1:af:b0:58:2b:5f:b6:f3:d6:c9:37:51:8e:18:09: 91:60:57:f1:2e:ed:e2:8f:f2:13:b6:2e:35:d8:fa: 46:d3:c7:3a:3c:d3:2a:31:40:96:00:16:8d:cf:0e: e8:67:07:9f:a9:61:e8:90:ed:3a:35:6d:1a:b4:5b: c4:7e:4e:05:67:34:ae:50:8a:86:9d:2c:15:0d:1d: 34:9e:14:85:67:f0:a3:03:f6:e2:f9:87:d8:73:9d: dd:0f:8e:48:45:8d:8a:ed:ff:a0:dc:51:9c:4c:8e: 8f:81:c5:04:41:75:38:67:ee:d5:93:a4:73:d7:de: e3:9a:52:45:b7:81:3d:6f:56:b7:d6:7a:16:49:79: c1:b7:35:68:ee:5e:1d:c2:05:9c:40:22:a3:6d:26: 54:ff:79:07:17:97:31:70:ce:1c:50:94:01:2a:dc: 7a:0e:4d:ed:bb:d4:ad:e1:66:07:1f:a1:c8:24:f1: 22:cf:17:39:c2:98:64:6b:4d:4f:c5:f2:c5:8c:7f: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7C:53:FC:B6:8B:92:85:55:73:44:80:9D:EE:37:C7:12:53:CF:AE X509v3 Authority Key Identifier: keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:27:aa:d6:e8:41:a6:a6:cb:e9:78:b4:4c:04:cf:39:1b:5b: 56:eb:05:32:f1:13:f5:37:c5:a0:c4:f9:9b:68:35:7d:7b:32: 88:c6:dc:10:45:97:2e:62:b5:57:b5:ad:d9:e0:48:0c:dc:39: b5:82:3f:2e:bd:50:9b:d5:e0:12:df:23:c6:e7:7f:bb:2c:a1: 94:e8:24:eb:74:82:3e:6d:3a:c6:71:9f:61:b3:2d:f6:b4:e3: 1a:45:35:9e:98:8f:cc:17:1d:97:fa:c2:e4:d1:77:c3:24:61: 5a:b5:e9:22:1a:cf:18:24:e7:7d:c7:96:ad:3d:68:b1:51:c0: 9a:c5:f7:6a:fc:c6:f6:a3:2e:fd:84:38:56:ea:cb:c9:64:62: f0:06:1f:09:24:c0:ff:bf:60:77:02:22:dc:bb:c5:fb:e0:22: 47:ab:6d:da:2c:64:af:10:47:f5:a6:36:22:43:c8:86:1d:19: 1e:9c:03:4e:e1:85:18:d7:99:98:38:6d:5e:d9:52:f2:df:44: be:6b:11:90:84:a6:34:a7:dc:ed:e5:ac:7a:b5:a8:f1:7d:51: 55:ae:8b:03:fa:c8:06:9b:68:40:b3:f0:76:7e:71:fa:32:da: bb:9d:a1:a5:ca:20:e3:0a:7d:94:44:a7:e0:6f:c3:d1:36:3b: 6b:ed:58:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNEYxMTAvBgNVBAUTKDFFMEE5MzhBNERDN0QzQkFENEY1Rjk2NURDRDU1RTBC Mjk4QzQyREIwHhcNMjQwNTE4MTg0MjAxWhcNMjQwNTI1MTg0MjAxWjAYMRYwFAYD VQQDEw02NjQ4ZjY3OS0wMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrH1UQ0BlQLFDsTiW9BTgOkifi4WIOco2XjcdEZJvI3uuYt/NOjioyfErCWb 2U+dv1jEaaq4Nceo+7Pxr7BYK1+289bJN1GOGAmRYFfxLu3ij/ITti412PpG08c6 PNMqMUCWABaNzw7oZwefqWHokO06NW0atFvEfk4FZzSuUIqGnSwVDR00nhSFZ/Cj A/bi+YfYc53dD45IRY2K7f+g3FGcTI6PgcUEQXU4Z+7Vk6Rz197jmlJFt4E9b1a3 1noWSXnBtzVo7l4dwgWcQCKjbSZU/3kHF5cxcM4cUJQBKtx6Dk3tu9St4WYHH6HI JPEizxc5wphka01PxfLFjH9u6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd8U/y2 i5KFVXNEgJ3uN8cSU8+uMB8GA1UdIwQYMBaAFB4Kk4pNx9O61PX5ZdzVXgspjELb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE0Ri9FNTI5NUM0OEIx QUYxMUU5ODU5NzVBNjNDNEY5QUUwMi9IZ3FUaWszSDA3clU5ZmxsM05WZUN5bU1R dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hncVRpazNIMDdyVTlmbGwzTlZlQ3ltTVF0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE0Ri9FNTI5NUM0OEIxQUYxMUU5ODU5NzVBNjNDNEY5QUUwMi9IZ3FUaWszSDA3 clU5ZmxsM05WZUN5bU1RdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJ6rW6EGmpsvpeLRMBM85G1tW6wUy8RP1N8WgxPmbaDV9ezKIxtwQ RZcuYrVXta3Z4EgM3Dm1gj8uvVCb1eAS3yPG53+7LKGU6CTrdII+bTrGcZ9hsy32 tOMaRTWemI/MFx2X+sLk0XfDJGFatekiGs8YJOd9x5atPWixUcCaxfdq/Mb2oy79 hDhW6svJZGLwBh8JJMD/v2B3AiLcu8X74CJHq23aLGSvEEf1pjYiQ8iGHRkenANO 4YUY15mYOG1e2VLy30S+axGQhKY0p9zt5ax6tajxfVFVrosD+sgGm2hAs/B2fnH6 Mtq7naGlyiDjCn2URKfgb8PRNjtr7Vh2 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org