$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: 9PhIpFXJ3MHAfFY2sGYlYg4l2ezjmRjqTQf1s56SDK0= Subject key identifier: 4B:97:0B:07:9E:4D:69:E3:57:0A:F7:FE:8A:53:EB:6F:F9:5A:17:37 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 13D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 13BB Signing time: Sat 18 May 2024 17:30:28 +0000 Manifest this update: Sat 18 May 2024 17:30:28 +0000 Manifest next update: Sat 25 May 2024 17:30:28 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: Y45bIYPkJKdvKClbUB6AnnzkrFxroPNolyjLNYp58Xk=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5074 (0x13d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: May 18 17:30:28 2024 GMT Not After : May 25 17:30:28 2024 GMT Subject: CN=6648e5b4-0b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:23:f3:cc:c1:a8:c5:9d:e5:8c:56:a0:0b: 2a:5c:00:4a:64:1a:7e:b1:96:c1:5d:54:17:01:0a: 5d:c2:3c:26:19:90:43:e7:61:c3:27:87:20:d0:89: 43:2d:5f:d0:63:da:68:b3:c0:1b:a3:d4:30:cc:6a: 0d:a8:75:5d:93:4b:1b:6c:df:60:0a:7b:34:f8:bb: 6c:44:53:b0:e7:98:79:4d:78:ac:67:72:f8:62:6d: ce:4c:63:a0:5e:68:84:a6:8d:59:38:0f:af:07:a8: 89:4a:fc:db:f3:38:d4:57:3e:c3:de:bc:75:8d:1f: 88:1c:73:52:58:87:b6:18:1e:e0:b4:d7:f8:8d:da: db:9e:44:31:f2:6c:ca:65:45:d0:a6:fe:8d:89:da: 7a:4a:6f:cc:bb:6d:52:90:ca:8d:ce:b5:9a:6a:67: 4a:4d:d9:7f:e0:6a:11:b7:01:41:3f:9c:a8:59:02: 73:b3:76:98:a3:ab:69:20:ff:d8:9f:56:62:5b:8e: ae:af:29:48:4c:77:cc:4c:68:e0:59:10:d9:08:f9: 53:25:c5:72:b6:9f:64:7e:f7:a1:50:dd:c0:64:16: f5:09:eb:50:2c:d0:10:80:5c:bf:f5:ce:de:01:29: 03:a5:1b:04:f8:b6:18:0a:19:0a:b4:4f:ca:de:dc: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:0B:07:9E:4D:69:E3:57:0A:F7:FE:8A:53:EB:6F:F9:5A:17:37 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ba:80:c4:db:aa:df:13:85:6e:70:07:a8:9d:6b:59:df:e2: 3d:70:4d:42:2c:3c:5a:d7:e7:d1:f9:f3:42:5d:72:85:64:a8: 7b:d0:d3:02:03:5d:c8:0d:ea:17:8c:0b:01:ea:aa:d9:dc:fc: 99:45:7d:b6:13:d1:1a:65:44:56:5e:12:ec:fc:6a:fb:30:b2: f0:c4:06:c9:93:c7:c0:71:7d:b4:98:58:6f:c6:b9:d6:19:ad: 25:57:c1:db:c8:62:41:5a:75:fb:7e:0c:29:07:99:11:fe:5f: 3b:90:13:60:e8:13:f1:59:44:50:c7:88:b2:fb:6d:1f:c1:b8: b8:fa:13:fb:c1:d1:92:49:60:a2:dd:37:23:a7:91:0b:d5:6a: 1f:6a:ef:9f:f2:5d:fc:a9:b8:44:cf:1b:b9:db:51:01:c3:3d: 64:d9:e4:9f:ee:a5:eb:47:cb:74:e2:07:41:c8:39:b1:39:e1: de:5b:b0:be:c6:a7:84:7d:e8:79:e2:b5:75:dc:14:23:94:37: 5d:b6:ff:dd:1e:1c:b5:d5:4f:d9:7c:90:6e:55:3a:23:0a:25: d1:49:84:66:bd:db:74:7a:2e:e7:ac:2e:c0:b7:77:01:9c:a1: 50:5e:9b:9e:03:84:9c:f8:3d:ea:b1:33:65:10:8e:82:de:15: ea:cc:40:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjQwNTE4MTczMDI4WhcNMjQwNTI1MTczMDI4WjAYMRYwFAYD VQQDEw02NjQ4ZTViNC0wYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y8j88zBqMWd5YxWoAsqXABKZBp+sZbBXVQXAQpdwjwmGZBD52HDJ4cg0IlD LV/QY9pos8Abo9QwzGoNqHVdk0sbbN9gCns0+LtsRFOw55h5TXisZ3L4Ym3OTGOg XmiEpo1ZOA+vB6iJSvzb8zjUVz7D3rx1jR+IHHNSWIe2GB7gtNf4jdrbnkQx8mzK ZUXQpv6Nidp6Sm/Mu21SkMqNzrWaamdKTdl/4GoRtwFBP5yoWQJzs3aYo6tpIP/Y n1ZiW46urylITHfMTGjgWRDZCPlTJcVytp9kfvehUN3AZBb1CetQLNAQgFy/9c7e ASkDpRsE+LYYChkKtE/K3ty7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuXCwee TWnjVwr3/opT62/5Whc3MB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjuoDE26rfE4VucAeonWtZ3+I9cE1CLDxa1+fR+fNCXXKFZKh70NMC A13IDeoXjAsB6qrZ3PyZRX22E9EaZURWXhLs/Gr7MLLwxAbJk8fAcX20mFhvxrnW Ga0lV8HbyGJBWnX7fgwpB5kR/l87kBNg6BPxWURQx4iy+20fwbi4+hP7wdGSSWCi 3Tcjp5EL1Wofau+f8l38qbhEzxu521EBwz1k2eSf7qXrR8t04gdByDmxOeHeW7C+ xqeEfeh54rV13BQjlDddtv/dHhy11U/ZfJBuVTojCiXRSYRmvdt0ei7nrC7At3cB nKFQXpueA4Sc+D3qsTNlEI6C3hXqzEDl -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org