$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json) Hash identifier: YA355ymT+4zzTsVt0QngynKoH8k6g2TmGZtg9OxqebM= Subject key identifier: 51:B3:F0:1F:2E:32:3B:33:62:55:12:90:98:F6:15:05:38:00:F6:94 Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft Manifest number: 0199 Signing time: Sun 19 May 2024 04:40:26 +0000 Manifest this update: Sun 19 May 2024 04:40:25 +0000 Manifest next update: Sun 26 May 2024 04:40:25 +0000 Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: ALu8JBg/WYGHIm0WbNoLzz6K6V+mW3DYI4e6rGD48ac=) 2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: 9ZgcTHr/wiHrrO5IWgPJKdmWbiUzLY2mXCNS62wsgQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A Validity Not Before: May 19 04:40:25 2024 GMT Not After : May 26 04:40:25 2024 GMT Subject: CN=664982b9-2a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:3d:ea:18:f9:a5:f3:c9:22:da:17:fa:cd: ed:54:24:33:27:bb:a1:c1:5a:5c:a5:1e:cc:ee:5d: 37:b7:a6:da:2e:28:d8:9a:db:c4:8e:78:c9:d0:8d: b0:be:fa:fd:9a:2c:5a:1b:fd:74:3b:4f:2f:4e:64: ff:57:18:99:a5:16:ba:32:79:4d:ac:a9:39:f2:f7: 71:ea:76:2b:06:31:ee:a7:92:0d:9a:8c:e9:90:b3: e0:cf:c2:06:2b:70:cd:9e:f3:9d:12:f9:90:e4:36: 27:9c:2a:25:b2:66:18:f4:fc:37:46:8a:18:aa:76: 30:87:12:8d:07:37:bc:c6:e0:1c:10:ec:d7:47:23: f0:74:29:ed:5d:ef:6d:d4:b8:0f:5a:9d:04:d8:40: f7:14:af:ab:bd:2b:24:58:46:e1:43:55:e6:b9:ec: 08:8f:8c:88:57:5d:df:b1:72:50:ee:99:8e:bc:ea: 38:d2:5f:57:3d:33:4d:40:30:7c:ba:47:e1:a9:7c: 36:88:34:44:13:3a:ba:dc:0d:6d:b8:19:f3:c2:4d: 16:18:69:1c:24:e1:42:73:03:fa:3c:6a:bb:c2:3c: 28:c9:68:c0:2f:55:b0:20:40:03:76:db:12:b0:ea: e7:b8:34:84:2a:12:10:ee:c0:86:ad:d5:51:80:11: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:F0:1F:2E:32:3B:33:62:55:12:90:98:F6:15:05:38:00:F6:94 X509v3 Authority Key Identifier: keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ce:8f:2b:f8:a4:a5:6f:f4:bc:da:02:cf:6c:47:89:ca:43: 1c:28:e4:2d:23:62:e9:98:97:f1:31:04:67:82:aa:24:0a:16: 39:ec:c2:4d:45:fc:93:d1:26:51:0b:b5:71:d4:28:88:9f:4d: 8d:0c:9e:79:ce:6b:fb:8b:f2:32:59:09:42:1c:80:fa:73:7a: 1c:e4:56:c6:e8:f1:cc:ac:e4:75:36:28:f2:0c:8f:39:1f:76: a5:a8:be:df:fb:ad:59:e8:78:3f:62:30:a9:71:8c:45:47:8f: 9a:3d:03:3f:59:49:de:6f:0f:e0:62:bb:f4:58:4d:6e:d4:97: 6a:5f:a2:e5:a0:19:86:63:99:70:67:ff:75:90:fa:c1:a7:2f: c3:c0:bd:87:e4:02:a1:b5:15:71:f5:c1:49:a4:28:2a:91:b6: 04:53:34:1a:30:d8:e4:a8:a9:a3:f4:5c:61:0d:2d:7f:45:63: 03:46:7b:76:87:52:0f:88:89:59:31:ae:ca:c0:df:9b:18:02: 01:fc:04:1a:df:f9:6a:c3:60:dc:3b:ec:af:25:97:56:66:6e: 5b:f3:95:71:64:91:69:f9:56:7b:fd:23:c6:82:9b:2d:6c:92: ec:7e:c9:14:7a:25:c3:36:8c:66:48:83:b9:0a:8f:23:88:a1: 0e:1f:c1:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMzAxMTAvBgNVBAUTKDFEMkE1NTE1QThBOTlCMzBCMjFEMTg3MUJDRkFGRDI3 RUIxQTEzMkEwHhcNMjQwNTE5MDQ0MDI1WhcNMjQwNTI2MDQ0MDI1WjAYMRYwFAYD VQQDEw02NjQ5ODJiOS0yYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6A96hj5pfPJItoX+s3tVCQzJ7uhwVpcpR7M7l03t6baLijYmtvEjnjJ0I2w vvr9mixaG/10O08vTmT/VxiZpRa6MnlNrKk58vdx6nYrBjHup5INmozpkLPgz8IG K3DNnvOdEvmQ5DYnnColsmYY9Pw3RooYqnYwhxKNBze8xuAcEOzXRyPwdCntXe9t 1LgPWp0E2ED3FK+rvSskWEbhQ1XmuewIj4yIV13fsXJQ7pmOvOo40l9XPTNNQDB8 ukfhqXw2iDREEzq63A1tuBnzwk0WGGkcJOFCcwP6PGq7wjwoyWjAL1WwIEADdtsS sOrnuDSEKhIQ7sCGrdVRgBGEtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGz8B8u MjszYlUSkJj2FQU4APaUMB8GA1UdIwQYMBaAFB0qVRWoqZswsh0Ycbz6/SfrGhMq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIzMC84OTc3QzY3NDE5 MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16Q3lIUmh4dlByOUotc2FF eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hTcFZGYWlwbXpDeUhSaHh2UHI5Si1zYUV5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIzMC84OTc3QzY3NDE5MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16 Q3lIUmh4dlByOUotc2FFeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6zo8r+KSlb/S82gLPbEeJykMcKOQtI2LpmJfxMQRngqokChY57MJN RfyT0SZRC7Vx1CiIn02NDJ55zmv7i/IyWQlCHID6c3oc5FbG6PHMrOR1NijyDI85 H3alqL7f+61Z6Hg/YjCpcYxFR4+aPQM/WUnebw/gYrv0WE1u1JdqX6LloBmGY5lw Z/91kPrBpy/DwL2H5AKhtRVx9cFJpCgqkbYEUzQaMNjkqKmj9FxhDS1/RWMDRnt2 h1IPiIlZMa7KwN+bGAIB/AQa3/lqw2DcO+yvJZdWZm5b85VxZJFp+VZ7/SPGgpst bJLsfskUeiXDNoxmSIO5Co8jiKEOH8Eh -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org