$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: v5aDI+jQTtkexlhB3TQgTBYZ5pToLHDT63kFyPr7vfM= Subject key identifier: 99:40:68:74:33:5E:B2:25:8F:7C:C9:22:C2:97:E4:0C:3F:18:15:3E Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: E6 Signing time: Fri 31 May 2024 06:40:36 +0000 Manifest this update: Fri 31 May 2024 06:40:35 +0000 Manifest next update: Fri 07 Jun 2024 06:40:35 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: aKXTFqyBsmFvQTMv4JbJ/ZhGIbAA4ssmGVqj/LBBnPA=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: yKcLsbx1IuVp0GKhmlBOaq3IPS7ZvYSWgHFOkDGnv+Y=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: GPWGbMrCh9nhUFFsTFy1v1Swe8iB5s0uxXd2oii56dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: May 31 06:40:35 2024 GMT Not After : Jun 7 06:40:35 2024 GMT Subject: CN=665970e3-cd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:7a:10:1e:f8:d4:26:81:95:3f:7b:6b:ef: 4b:77:b1:91:78:e6:f5:62:a8:fa:78:07:fa:78:e0: 88:3c:f1:9b:d1:52:5e:44:81:e2:b7:89:cb:3d:95: 42:ce:2f:ca:4e:60:0c:e1:66:15:63:c5:e3:a4:67: 25:ae:d6:a5:e2:93:da:ba:82:fd:fc:11:89:53:70: 53:88:42:db:b3:e8:0f:28:cd:7e:b5:f6:70:74:86: 9f:16:65:fc:0f:3d:38:17:89:bd:a0:1a:11:53:71: 63:af:04:9f:d0:38:a2:d8:de:b8:d1:56:15:c1:cb: ec:4a:7a:97:6b:94:62:16:ee:96:18:ed:1a:05:6a: 18:be:43:08:91:e1:f7:1e:f3:3a:c4:b1:06:9f:fb: af:36:cb:50:73:88:bf:03:62:83:d8:8b:a2:cd:d0: b7:e3:c5:ce:44:cc:8f:c0:e9:b3:7d:b5:53:99:cf: ab:a3:a9:30:e9:18:c3:d2:58:41:33:56:57:8b:38: ce:39:24:4a:5a:9c:52:18:df:a2:43:ec:41:10:f6: c1:94:35:0e:8c:e8:09:7c:d3:7f:ea:54:78:84:94: 45:ef:c9:85:63:d9:5a:c4:21:fb:ad:d9:e6:ff:d5: ea:e0:7b:a0:30:a6:20:dd:da:f5:86:26:6c:15:2c: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:40:68:74:33:5E:B2:25:8F:7C:C9:22:C2:97:E4:0C:3F:18:15:3E X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ca:28:57:04:ec:e9:80:5d:f6:d4:08:d3:81:79:ea:94:11: a3:9c:ec:6a:96:be:31:c2:42:fa:25:16:04:7e:0b:78:cf:88: 36:b9:b9:ed:86:16:c6:cd:17:88:83:57:0f:48:c0:3d:22:87: db:03:a0:16:4a:82:9c:f4:a1:9c:06:73:c0:ef:87:f6:bc:93: 64:d4:e8:15:fd:51:c7:80:13:fa:34:e7:1e:44:83:94:78:35: 3f:b8:9c:06:71:62:c5:54:0e:f5:65:f7:71:37:99:5a:08:ef: 90:da:fb:53:1c:f9:dc:95:79:28:f8:9c:f7:ef:99:6f:1f:f5: c2:ca:98:57:d5:17:dd:fa:11:df:f7:08:f8:f1:88:af:b7:16: 20:aa:a4:74:eb:b2:ba:4b:b7:e4:3b:91:89:f6:30:59:f7:bd: 54:e1:b4:07:0f:1c:98:e8:6c:85:e3:8e:07:7b:23:c1:bc:b5: a4:6e:86:e2:c9:de:53:64:ff:8b:8d:1e:aa:e7:76:5e:9f:f1: db:5e:30:cf:4a:f4:f5:40:8b:36:e4:32:30:a4:23:cc:93:90: 53:89:d6:35:7c:58:31:2b:17:6e:dc:19:7d:b0:09:d3:08:70: e6:e6:13:d7:aa:3c:b8:aa:29:5c:77:15:91:13:72:e8:23:89: 18:0c:95:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjQwNTMxMDY0MDM1WhcNMjQwNjA3MDY0MDM1WjAYMRYwFAYD VQQDEw02NjU5NzBlMy1jZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0B6EB741CaBlT97a+9Ld7GReOb1Yqj6eAf6eOCIPPGb0VJeRIHit4nLPZVC zi/KTmAM4WYVY8XjpGclrtal4pPauoL9/BGJU3BTiELbs+gPKM1+tfZwdIafFmX8 Dz04F4m9oBoRU3FjrwSf0Dii2N640VYVwcvsSnqXa5RiFu6WGO0aBWoYvkMIkeH3 HvM6xLEGn/uvNstQc4i/A2KD2IuizdC348XORMyPwOmzfbVTmc+ro6kw6RjD0lhB M1ZXizjOOSRKWpxSGN+iQ+xBEPbBlDUOjOgJfNN/6lR4hJRF78mFY9laxCH7rdnm /9Xq4HugMKYg3dr1hiZsFSz8lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlAaHQz XrIlj3zJIsKX5Aw/GBU+MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjyihXBOzpgF321AjTgXnqlBGjnOxqlr4xwkL6JRYEfgt4z4g2ubnt hhbGzReIg1cPSMA9IofbA6AWSoKc9KGcBnPA74f2vJNk1OgV/VHHgBP6NOceRIOU eDU/uJwGcWLFVA71ZfdxN5laCO+Q2vtTHPnclXko+Jz375lvH/XCyphX1Rfd+hHf 9wj48YivtxYgqqR067K6S7fkO5GJ9jBZ971U4bQHDxyY6GyF444HeyPBvLWkbobi yd5TZP+LjR6q53Zen/HbXjDPSvT1QIs25DIwpCPMk5BTidY1fFgxKxdu3Bl9sAnT CHDm5hPXqjy4qilcdxWRE3LoI4kYDJVM -----END CERTIFICATE-----Generated at Fri May 31 08:38:59 2024 by rpki-client on console-fra.rpki-client.org