$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft File: hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json) Hash identifier: ZUfpmAeh9r4EWim6ARAGgvsgUjRnyannAJpWDVlzeDE= Subject key identifier: 8E:BB:3E:ED:68:98:9C:BB:BB:3C:EE:F1:C3:3C:A3:A2:7B:B6:7C:68 Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Certificate serial: 0ECF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft Manifest number: 0EBD Signing time: Sat 18 May 2024 18:19:15 +0000 Manifest this update: Sat 18 May 2024 18:19:14 +0000 Manifest next update: Sat 25 May 2024 18:19:14 +0000 Files and hashes: 1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: TfyqD8cwYviHOp7iziu5TE9IKbSIouS9FOG3knv0LQY=) 2: 0DC698EAAEF011E99D5EFB71C4F9AE02.roa (hash: +8RYSK6eqNDlGYWF5tbnRI9iU6P3WM/j6T4xLBka0V8=) 3: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: CzIfDi1evZoMUynT4uI9PBfLSN/5SoHurhEB1kJAMBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3791 (0xecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Validity Not Before: May 18 18:19:14 2024 GMT Not After : May 25 18:19:14 2024 GMT Subject: CN=6648f122-7012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6b:ee:99:f0:87:b8:96:7f:53:be:11:26:27: 7c:5b:77:28:00:d7:ae:d1:7a:87:64:9b:42:8c:b9: 3d:1c:db:89:93:23:1c:e8:0d:04:e7:e8:f2:b4:54: 2a:a9:cc:97:a5:b0:ee:85:da:39:49:ea:96:fb:91: 16:0e:cf:db:cf:72:ca:c7:b6:73:7f:e7:6f:11:45: 6e:a6:f9:2c:12:c7:e6:55:d1:ce:17:23:d4:1f:fe: 06:21:43:33:10:5d:69:e0:20:bd:31:68:3a:05:9d: 87:5e:e1:fd:90:0a:c3:ee:67:04:c5:85:ef:69:60: ba:e6:a8:87:44:f6:2c:c1:63:21:99:03:16:39:a7: 54:b3:bc:3c:e6:4f:97:3e:86:c4:c4:d8:9c:6f:93: ad:42:05:bd:f1:51:34:bb:c8:41:76:8e:dd:6a:4d: 66:93:e5:48:10:13:5b:0a:ba:22:4e:9f:24:03:bf: 34:77:a9:39:45:00:29:a3:0e:52:f8:73:24:7e:e8: 11:da:81:d2:a6:d4:7e:84:9b:d8:25:35:bb:62:01: 65:8e:06:87:67:43:98:76:1f:e0:d0:56:74:b6:75: 6d:53:2e:f7:fc:48:76:a0:13:19:4d:1c:95:d0:7c: 3a:c2:6d:b8:1d:f3:d7:93:03:69:0a:03:aa:dd:18: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BB:3E:ED:68:98:9C:BB:BB:3C:EE:F1:C3:3C:A3:A2:7B:B6:7C:68 X509v3 Authority Key Identifier: keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1a:c9:87:96:58:38:fc:5a:95:6b:99:2a:f0:41:ea:01:8b: a0:f7:bf:7f:57:f7:fa:ca:47:90:a3:eb:a8:59:3f:30:fb:30: 0c:64:61:3b:99:da:0a:e1:65:8e:da:5e:e2:3d:c7:06:1d:7c: 79:53:08:e3:eb:0f:d2:34:cb:17:70:fb:e9:4f:f5:7c:62:4b: c2:6e:82:6f:5d:c4:15:0a:5e:5a:f0:2c:15:cb:07:81:73:e5: 1d:97:f5:89:07:ba:2f:b0:a7:7a:d2:de:96:7f:30:7f:b1:27: af:c0:42:3f:6f:ad:bc:d1:7c:f7:ca:2f:02:f9:5b:44:ab:03: 4a:53:23:3e:45:3e:b3:61:6f:b6:8f:ed:32:16:cc:4c:5a:a1: d1:e4:03:91:5d:06:43:9e:17:67:0f:ca:9e:3b:c1:dd:0d:1e: ed:26:20:ca:d5:96:db:06:cc:47:dc:c7:b9:81:36:41:e7:8e: bf:cb:06:c4:a6:0c:09:66:7e:4d:08:92:b8:f9:85:78:c8:af: e6:53:ba:6e:e2:74:48:5c:91:6e:37:f7:2a:39:f9:9d:0c:86: 85:bd:e0:1d:56:0e:c9:d3:c9:4f:9f:55:33:a9:56:6f:b8:e0: 46:69:2a:c3:d5:bc:ec:23:5c:6b:cc:08:0d:52:53:9b:e1:44: 7e:20:21:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1 OEQ1NDg1NjUwHhcNMjQwNTE4MTgxOTE0WhcNMjQwNTI1MTgxOTE0WjAYMRYwFAYD VQQDEw02NjQ4ZjEyMi03MDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9WvumfCHuJZ/U74RJid8W3coANeu0XqHZJtCjLk9HNuJkyMc6A0E5+jytFQq qcyXpbDuhdo5SeqW+5EWDs/bz3LKx7Zzf+dvEUVupvksEsfmVdHOFyPUH/4GIUMz EF1p4CC9MWg6BZ2HXuH9kArD7mcExYXvaWC65qiHRPYswWMhmQMWOadUs7w85k+X PobExNicb5OtQgW98VE0u8hBdo7dak1mk+VIEBNbCroiTp8kA780d6k5RQApow5S +HMkfugR2oHSptR+hJvYJTW7YgFljgaHZ0OYdh/g0FZ0tnVtUy73/Eh2oBMZTRyV 0Hw6wm24HfPXkwNpCgOq3RjISwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI67Pu1o mJy7uzzu8cM8o6J7tnxoMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0 MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR clpBSHhDQTJkbUpZMVVoV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGsmHllg4/FqVa5kq8EHqAYug979/V/f6ykeQo+uoWT8w+zAMZGE7 mdoK4WWO2l7iPccGHXx5Uwjj6w/SNMsXcPvpT/V8YkvCboJvXcQVCl5a8CwVyweB c+Udl/WJB7ovsKd60t6WfzB/sSevwEI/b6280Xz3yi8C+VtEqwNKUyM+RT6zYW+2 j+0yFsxMWqHR5AORXQZDnhdnD8qeO8HdDR7tJiDK1ZbbBsxH3Me5gTZB546/ywbE pgwJZn5NCJK4+YV4yK/mU7pu4nRIXJFuN/cqOfmdDIaFveAdVg7J08lPn1UzqVZv uOBGaSrD1bzsI1xrzAgNUlOb4UR+ICGY -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org