$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: cnYX5fkbYRPZok5UjyafbXDAeatHOtucTe0TyCR8YpA= Subject key identifier: E5:84:93:16:F9:32:DA:64:FC:E8:FC:1D:A4:8D:83:03:EC:5A:C3:23 Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 52 Signing time: Sun 19 May 2024 07:54:27 +0000 Manifest this update: Sun 19 May 2024 07:54:26 +0000 Manifest next update: Sun 26 May 2024 07:54:26 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: UBuOT1EJ2OlKCJt5UMKZ9h5VUWc+bWrrkVq45ZQ4IMk=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: tzCx2cpMAr1xDe6bcG5xLFjaHWbUzHdoW0sCdmUCgGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: May 19 07:54:26 2024 GMT Not After : May 26 07:54:26 2024 GMT Subject: CN=6649b033-9745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:61:cd:12:68:b0:eb:96:3c:62:95:22:50: 49:98:29:66:74:f7:ce:61:a7:67:3f:eb:a3:bf:78: bf:71:31:79:83:f1:1b:1f:9e:9b:25:86:1a:58:39: eb:f4:4c:62:3b:7e:35:c2:40:84:df:ac:55:41:df: 31:0c:ed:ae:7e:71:94:08:9a:ad:7e:cf:aa:a8:38: 4e:b9:4a:2f:5b:13:d4:f3:66:a4:7f:72:c8:ca:d1: 64:d8:50:f1:57:b2:35:ce:e1:7d:36:d4:44:79:c7: ab:af:bc:ad:fe:be:a1:dc:2f:ea:12:94:eb:15:9b: 4c:a7:8d:03:07:39:95:19:cf:f6:d8:84:b4:62:4c: 1d:a3:22:53:5a:5f:b4:3d:5e:79:e3:d1:5f:96:07: c9:5e:56:06:bb:33:f5:bc:f1:ef:14:35:66:3e:88: 7b:94:5b:e2:69:5e:e2:36:aa:45:df:b8:e9:46:cd: 89:94:29:1d:80:b8:06:ef:80:d7:77:0f:e5:69:a0: 4e:27:9f:06:02:ea:74:5e:ec:9d:d2:22:b8:c5:c4: d3:33:7e:b4:35:f7:d2:a1:49:95:db:dd:ad:23:c9: 82:28:11:50:9e:3e:fa:44:ed:62:28:92:f2:a6:19: 1b:d8:60:f9:1b:8c:5b:b9:31:c2:67:71:9f:8d:cf: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:84:93:16:F9:32:DA:64:FC:E8:FC:1D:A4:8D:83:03:EC:5A:C3:23 X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:66:39:06:1e:51:cb:9d:d3:dd:2f:98:e5:5e:a7:c9:df:d1: f7:87:fa:1a:af:85:29:a4:7f:34:25:7e:b9:c2:1a:ab:0c:9a: e0:d4:49:69:1e:05:e9:0c:d6:a7:af:b9:be:59:03:86:13:ec: ac:b9:15:82:50:10:b6:98:e4:80:d7:22:7e:64:94:d4:26:e8: ab:73:74:b2:0b:5d:14:a9:06:d0:6b:4e:0c:88:2b:b3:c2:68: 88:6b:bc:c2:78:8b:1e:0c:c0:d5:ee:65:20:b3:ac:2c:cc:3b: aa:84:53:14:e9:34:7d:8b:fa:2c:17:45:77:94:1a:af:1d:33: 7b:2f:dd:c7:ac:89:5b:62:4f:85:73:8d:52:25:07:88:ed:61: 03:59:10:15:b5:1a:69:39:3d:99:75:27:ce:ec:94:8b:44:d9: 46:60:46:3b:05:9b:ab:2d:b2:5f:cc:55:ff:f4:6c:e6:16:54: 32:73:3b:05:ca:fb:da:d1:e6:5d:76:71:97:9c:5f:2e:63:01: 4a:4e:cf:fa:f6:3e:67:10:c2:33:74:e9:6e:c5:7b:36:e7:36: a0:39:c3:9a:27:30:2c:ef:8d:fd:4b:fa:48:f8:5c:49:cf:d2: 98:72:b1:24:a0:cd:6e:c1:2b:5f:13:5e:c4:54:92:c8:ea:20: 04:0f:04:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUM5QTExMC8GA1UEBRMoODcyOEI4MjhGMzE4NjAzRTQ0NzExMDcwQzI0RUNDMDg4 QTE5MDA2MDAeFw0yNDA1MTkwNzU0MjZaFw0yNDA1MjYwNzU0MjZaMBgxFjAUBgNV BAMTDTY2NDliMDMzLTk3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1iGHNEmiw65Y8YpUiUEmYKWZ0985hp2c/66O/eL9xMXmD8RsfnpslhhpYOev0 TGI7fjXCQITfrFVB3zEM7a5+cZQImq1+z6qoOE65Si9bE9TzZqR/csjK0WTYUPFX sjXO4X021ER5x6uvvK3+vqHcL+oSlOsVm0ynjQMHOZUZz/bYhLRiTB2jIlNaX7Q9 Xnnj0V+WB8leVga7M/W88e8UNWY+iHuUW+JpXuI2qkXfuOlGzYmUKR2AuAbvgNd3 D+VpoE4nnwYC6nRe7J3SIrjFxNMzfrQ199KhSZXb3a0jyYIoEVCePvpE7WIokvKm GRvYYPkbjFu5McJncZ+Nz4u/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5YSTFvky 2mT86PwdpI2DA+xawyMwHwYDVR0jBBgwFoAUhyi4KPMYYD5EcRBwwk7MCIoZAGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBQzlBL0UxOUEyNTc4OTdG NDExRUVCQ0VEQzM0RkM0RjlBRTAyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHlpNEtQTVlZRDVFY1JCd3drN01DSW9aQUdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB QzlBL0UxOUEyNTc4OTdGNDExRUVCQ0VEQzM0RkM0RjlBRTAyL2h5aTRLUE1ZWUQ1 RWNSQnd3azdNQ0lvWkFHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9mOQYeUcud090vmOVep8nf0feH+hqvhSmkfzQlfrnCGqsMmuDUSWke BekM1qevub5ZA4YT7Ky5FYJQELaY5IDXIn5klNQm6KtzdLILXRSpBtBrTgyIK7PC aIhrvMJ4ix4MwNXuZSCzrCzMO6qEUxTpNH2L+iwXRXeUGq8dM3sv3cesiVtiT4Vz jVIlB4jtYQNZEBW1Gmk5PZl1J87slItE2UZgRjsFm6stsl/MVf/0bOYWVDJzOwXK +9rR5l12cZecXy5jAUpOz/r2PmcQwjN06W7FezbnNqA5w5onMCzvjf1L+kj4XEnP 0physSSgzW7BK18TXsRUksjqIAQPBOs= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org