$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: sn7vUbpyNiZNOi/nlpo0M6rPw8UEJMSSH5lnYVkxzG8= Subject key identifier: 79:6B:87:77:82:B9:1B:B8:4C:91:E4:D4:F0:89:22:F1:4F:03:E9:9E Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 15CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 15C2 Signing time: Sat 18 May 2024 17:14:45 +0000 Manifest this update: Sat 18 May 2024 17:14:43 +0000 Manifest next update: Sat 25 May 2024 17:14:43 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: NWl15h0fM76mUH3GCXPuLQI/tmnmwYR12Ij7fd/LN6Y=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: eTJ6CD0Xj0HJmuR9wUngi9KSIKI7AgQ6RC4Dq2FmzHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5578 (0x15ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: May 18 17:14:43 2024 GMT Not After : May 25 17:14:43 2024 GMT Subject: CN=6648e204-2255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:1e:db:ea:de:92:e4:7a:a0:2b:d4:a7:b9: 22:14:ae:9b:2e:80:fe:2a:2e:37:39:2d:d3:8a:95: 12:04:b5:c9:ed:ae:c6:04:98:9b:ed:b1:12:9a:dd: ef:5a:5f:53:66:34:6c:de:9c:98:3b:5d:c4:a4:b8: d5:d1:cb:23:6b:e4:d3:b4:0c:a2:6b:6e:62:d0:24: fc:87:e9:e0:21:c9:4a:f7:09:88:21:aa:5f:64:f4: e0:cc:f7:a0:d2:03:35:a9:92:b7:85:6f:83:7c:9d: 61:95:71:29:0e:59:9f:8d:e4:30:8c:37:35:c2:8b: b8:92:67:04:a1:ae:78:ac:3a:30:10:cf:23:86:65: b7:86:0b:3a:f5:33:e1:1c:40:90:a9:d8:fe:55:97: 2f:22:42:e5:ca:4b:03:ab:bf:a6:21:52:df:17:f0: be:6c:76:d6:7e:89:3c:71:1f:b4:d0:c7:e6:78:99: 03:77:96:bf:d0:0f:a4:ab:c7:13:dd:cb:75:84:fc: 36:5a:99:60:59:40:8d:57:90:70:48:72:8d:27:68: 60:ef:7d:7c:a6:6d:ec:4d:93:0a:42:75:59:3e:54: c2:44:72:c7:46:54:7f:e0:e1:4e:21:ea:7f:2a:1e: af:b3:05:7b:7b:f1:7f:53:0f:0e:c4:49:19:18:59: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:87:77:82:B9:1B:B8:4C:91:E4:D4:F0:89:22:F1:4F:03:E9:9E X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1d:c1:2b:8b:42:ef:71:4c:b6:ed:ec:b3:e9:8a:a7:eb:67: d7:36:cf:6c:13:2a:ed:01:ee:b6:81:00:43:2e:80:fe:8b:6a: b7:80:ee:6f:31:f8:58:ca:4a:b6:55:c6:ad:39:33:83:a1:43: 9d:ad:3e:57:27:6c:87:0b:5b:d1:fc:a7:72:1c:2a:ce:57:a0: 10:ca:43:d5:99:b8:05:07:59:85:0b:88:86:51:25:f8:3f:ed: 6a:2a:07:32:f8:77:cb:01:72:a7:5d:57:67:fb:37:a2:e4:7a: 57:9c:4a:f1:c9:4f:59:b2:88:f7:a1:79:10:7b:a9:58:aa:e1: 10:f6:48:4f:81:3a:13:3f:41:3a:24:99:e5:0f:7f:56:a5:03: a0:a6:25:ef:04:39:b2:45:a1:2f:d9:5f:ee:aa:fe:2a:a3:a5: 6d:e0:8c:d6:e1:50:60:46:2f:4a:ab:43:2d:be:8d:75:e8:58: ac:17:a3:af:98:f4:94:9e:90:4f:bc:99:54:34:d3:2a:92:24: c6:7e:bd:2e:48:8e:0d:cf:06:a8:c6:61:74:9c:c3:30:d4:a9: a0:f3:27:53:bc:a1:1b:ae:9d:83:67:61:fe:9c:26:75:16:b4: b0:97:61:c5:4b:c2:6c:78:1f:6c:19:d3:a0:7b:74:e2:0d:5b: e7:96:04:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjQwNTE4MTcxNDQzWhcNMjQwNTI1MTcxNDQzWjAYMRYwFAYD VQQDEw02NjQ4ZTIwNC0yMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WUe2+rekuR6oCvUp7kiFK6bLoD+Ki43OS3TipUSBLXJ7a7GBJib7bESmt3v Wl9TZjRs3pyYO13EpLjV0csja+TTtAyia25i0CT8h+ngIclK9wmIIapfZPTgzPeg 0gM1qZK3hW+DfJ1hlXEpDlmfjeQwjDc1wou4kmcEoa54rDowEM8jhmW3hgs69TPh HECQqdj+VZcvIkLlyksDq7+mIVLfF/C+bHbWfok8cR+00MfmeJkDd5a/0A+kq8cT 3ct1hPw2WplgWUCNV5BwSHKNJ2hg7318pm3sTZMKQnVZPlTCRHLHRlR/4OFOIep/ Kh6vswV7e/F/Uw8OxEkZGFkusQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlrh3eC uRu4TJHk1PCJIvFPA+meMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuHcEri0LvcUy27eyz6Yqn62fXNs9sEyrtAe62gQBDLoD+i2q3gO5v MfhYykq2VcatOTODoUOdrT5XJ2yHC1vR/KdyHCrOV6AQykPVmbgFB1mFC4iGUSX4 P+1qKgcy+HfLAXKnXVdn+zei5HpXnErxyU9Zsoj3oXkQe6lYquEQ9khPgToTP0E6 JJnlD39WpQOgpiXvBDmyRaEv2V/uqv4qo6Vt4IzW4VBgRi9Kq0Mtvo116FisF6Ov mPSUnpBPvJlUNNMqkiTGfr0uSI4NzwaoxmF0nMMw1Kmg8ydTvKEbrp2DZ2H+nCZ1 FrSwl2HFS8JseB9sGdOge3TiDVvnlgR0 -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org