$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: w6lgfg4NvmmRjtShEH+HCE3uXWxqTvaTSrvwBI+Dpg0= Subject key identifier: 97:F6:72:86:D2:0B:A7:D2:40:F0:DB:F5:D8:7D:76:E5:2B:4A:75:00 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 02A7 Signing time: Fri 31 May 2024 04:11:22 +0000 Manifest this update: Fri 31 May 2024 04:11:21 +0000 Manifest next update: Fri 07 Jun 2024 04:11:21 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: TzMqMyXb6Srx5jYVOwg3NqoweESql69fLM73zzu8zI0=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: Y2n2BjZK7YcDbJf+OeJwUoZderld4t4C424W9hVCQCo=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: gSJIRhvkvsqzVWI/PIM9ZJldSrE3+tHguZhTA6U0IhA=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: E8TF17FZ+hElw8daIlNLJu6deo+xubevfbPk03QKuzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: May 31 04:11:21 2024 GMT Not After : Jun 7 04:11:21 2024 GMT Subject: CN=66594dea-4e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:33:17:76:48:13:1d:0f:f9:b1:8b:69:11: 80:69:da:8c:79:1e:60:4d:8c:34:03:52:2c:8a:9c: 8c:72:c1:ee:28:76:f3:7c:f5:82:22:87:93:a3:51: 54:e2:5c:d3:26:77:fc:35:74:09:41:3b:4b:5d:98: f5:9f:ba:30:6d:a0:6e:1c:d3:eb:47:da:bf:ff:a1: 98:c9:84:bd:68:70:42:c7:74:3e:73:ff:c1:4d:14: f3:c6:ac:79:32:04:27:55:e1:fd:f5:71:87:98:d4: 15:fd:7c:b8:9b:aa:48:cf:50:ee:a1:f3:96:d0:c8: cb:30:4b:40:15:fe:f7:5d:f8:d4:4b:c1:4a:c7:0d: 34:24:41:b8:7c:7d:8e:17:2a:7b:bd:10:45:1f:91: ab:b6:b7:f6:08:5f:7e:7b:d6:bb:82:e5:5c:15:21: f8:c7:3e:16:da:8b:e1:50:e3:5d:d4:5d:db:06:9a: 6e:0a:b7:eb:36:09:e4:1b:d4:48:70:8f:82:72:5e: db:9e:78:e1:3b:d4:bf:72:34:dc:68:e1:c4:b6:6c: 08:80:b9:a4:a3:05:ae:94:b9:85:d4:54:46:40:59: 74:97:1e:16:57:65:30:ff:7e:b0:94:70:0b:ac:5a: 84:79:e9:06:b9:aa:f0:b5:21:8e:2a:7e:9a:d7:c3: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:72:86:D2:0B:A7:D2:40:F0:DB:F5:D8:7D:76:E5:2B:4A:75:00 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:51:1d:60:84:59:31:28:96:97:85:37:63:67:78:d2:dd:6e: 38:44:f2:84:a6:b2:d7:8a:f7:11:d0:ce:e3:9d:d3:d7:83:e2: d2:60:d6:af:ab:8f:9a:c5:ed:19:0c:6c:ef:cf:71:f4:df:d1: 51:fa:75:44:01:77:12:da:dd:b5:47:3c:56:94:3b:e1:a4:d7: 02:cd:42:4d:67:a2:7c:87:86:42:8b:79:e8:66:9d:18:bc:1a: 35:cc:29:3a:a4:ac:88:81:97:fb:27:4f:bd:91:fc:d2:e3:24: 52:18:d7:ae:e1:2c:8b:5a:77:ce:a2:44:b9:ad:bf:32:fc:c6: b0:7c:e2:ed:14:bb:61:d3:69:85:93:0c:df:1f:33:a6:bd:c7: e5:02:86:7e:cd:e8:97:26:97:83:40:32:04:74:9c:35:bb:0e: c4:b2:6c:9a:86:85:60:9a:13:bb:70:e9:04:6f:af:62:6f:39: e9:bd:c7:65:37:fd:d6:b1:b0:c6:92:eb:a7:8f:ee:65:f9:08: f7:db:06:1c:65:14:b3:97:92:8d:3b:2b:34:4b:69:f2:1f:c2: c8:37:6d:6e:56:f8:2e:d3:0c:9a:3e:f5:c5:fc:e2:b1:29:06: b0:64:33:ab:1b:04:d3:42:d5:87:1d:49:95:b1:68:5b:a8:4c: 9f:0f:43:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjQwNTMxMDQxMTIxWhcNMjQwNjA3MDQxMTIxWjAYMRYwFAYD VQQDEw02NjU5NGRlYS00ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRczF3ZIEx0P+bGLaRGAadqMeR5gTYw0A1IsipyMcsHuKHbzfPWCIoeTo1FU 4lzTJnf8NXQJQTtLXZj1n7owbaBuHNPrR9q//6GYyYS9aHBCx3Q+c//BTRTzxqx5 MgQnVeH99XGHmNQV/Xy4m6pIz1DuofOW0MjLMEtAFf73XfjUS8FKxw00JEG4fH2O Fyp7vRBFH5Grtrf2CF9+e9a7guVcFSH4xz4W2ovhUONd1F3bBppuCrfrNgnkG9RI cI+Ccl7bnnjhO9S/cjTcaOHEtmwIgLmkowWulLmF1FRGQFl0lx4WV2Uw/36wlHAL rFqEeekGuarwtSGOKn6a18OVzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf2cobS C6fSQPDb9dh9duUrSnUAMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbUR1ghFkxKJaXhTdjZ3jS3W44RPKEprLXivcR0M7jndPXg+LSYNav q4+axe0ZDGzvz3H039FR+nVEAXcS2t21RzxWlDvhpNcCzUJNZ6J8h4ZCi3noZp0Y vBo1zCk6pKyIgZf7J0+9kfzS4yRSGNeu4SyLWnfOokS5rb8y/MawfOLtFLth02mF kwzfHzOmvcflAoZ+zeiXJpeDQDIEdJw1uw7EsmyahoVgmhO7cOkEb69ibznpvcdl N/3WsbDGkuunj+5l+Qj32wYcZRSzl5KNOys0S2nyH8LIN21uVvgu0wyaPvXF/OKx KQawZDOrGwTTQtWHHUmVsWhbqEyfD0P2 -----END CERTIFICATE-----Generated at Fri May 31 04:54:00 2024 by rpki-client on console-fra.rpki-client.org