$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: MSFgYo57BzwLmuylZM1yAHUYCMD/cccXU8i/W6N/hdM= Subject key identifier: 4F:5B:C0:6B:05:0B:7A:77:2D:4E:FA:FF:97:D7:9F:11:8F:ED:2A:FB Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 05B1 Signing time: Sun 19 May 2024 00:14:47 +0000 Manifest this update: Sun 19 May 2024 00:14:46 +0000 Manifest next update: Sun 26 May 2024 00:14:46 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: T2avXhsGNTRUZree4+UhENmxMrkqvKyuMQ8nY6wBOy8=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: MjGRO3lGQcG/iTMmDl7Y68mkqT70b4a+bCduYwFQk88=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: 7MaUzQhZsa3uPxpFsNO7MuIfiU5GowBL3sSUe1QC4ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: May 19 00:14:46 2024 GMT Not After : May 26 00:14:46 2024 GMT Subject: CN=66494476-ee8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:b8:58:aa:9e:4a:ac:50:6b:63:8b:22:41: 91:e3:dd:77:54:99:5c:49:57:67:30:84:84:a7:d2: b8:55:39:63:1c:ab:b3:d7:e1:fb:5d:10:8e:49:1b: 49:48:35:ed:0c:32:54:b7:ea:75:92:c7:60:f3:ef: b9:d4:4f:94:8a:dd:a3:eb:48:42:19:5d:db:3d:63: ff:ef:2f:49:6a:0c:2c:f8:66:f2:6d:e4:e5:b0:a1: 8b:6a:0d:f2:22:93:90:fe:81:d4:cb:76:c6:ac:18: ac:73:a9:08:a9:f2:9a:0d:4c:e2:d9:75:49:32:36: 1c:28:11:7c:65:20:f6:38:e6:86:f5:f2:7a:58:38: 57:d2:60:a6:c5:cc:75:0d:65:f9:03:e9:a9:f3:7d: ec:06:77:6b:5e:61:ec:5e:2c:4c:dc:98:e9:09:f2: 29:14:07:a7:d9:23:c6:2f:44:6f:1c:bd:26:81:9c: b0:41:4f:07:94:2b:f9:64:7c:6c:e1:1a:13:40:51: 60:d1:b8:d3:68:a2:ba:12:d0:66:35:79:ed:83:74: fc:d1:23:63:ad:06:7d:9d:25:f6:64:34:32:b0:52: 90:56:e0:aa:9f:7e:e0:e3:6b:d3:d3:62:69:f4:f2: b2:f0:dd:57:e8:ee:92:61:21:cb:be:23:c9:be:4c: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5B:C0:6B:05:0B:7A:77:2D:4E:FA:FF:97:D7:9F:11:8F:ED:2A:FB X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:d3:9a:e3:10:41:d7:33:a1:f1:ae:67:6d:7e:60:3a:5c: 58:3c:34:8a:18:40:6d:50:cd:99:47:0f:c1:68:2a:32:57:1c: af:da:4b:e6:7f:d7:15:70:c4:ee:03:5d:38:ce:50:70:46:41: f7:f0:12:00:e6:45:07:80:84:38:5d:dd:6b:0a:24:70:3b:b6: d2:73:3c:76:52:7b:f3:92:e5:3e:23:1b:f4:49:c1:b4:13:e6: 69:23:6a:39:0e:0f:cf:a1:fb:43:3f:8d:e8:90:c4:17:3f:d1: bf:a3:72:d2:6f:07:6f:7c:bb:13:c8:d1:7e:b5:67:1a:e9:e4: c9:19:8a:02:4e:58:d3:bb:e7:8c:cf:a0:40:b8:02:6c:0d:76: 2c:0b:d5:91:3a:55:06:ba:b3:4d:63:07:4d:e8:c5:3f:d6:31: ce:66:68:92:87:ac:b7:0a:77:34:e1:b1:e0:2b:ce:60:1a:bf: 60:91:f0:f5:43:64:c6:b5:a3:44:89:68:9a:b6:9f:c4:fe:08: aa:33:02:2f:58:68:bf:78:34:cb:82:30:1e:20:77:14:35:da: 64:cb:7f:a1:b6:49:07:50:88:a2:25:2a:de:44:5e:28:00:30: 58:04:7c:0c:5b:ba:ae:24:e6:53:30:c7:19:4f:25:54:c5:dc: d6:7f:ca:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjQwNTE5MDAxNDQ2WhcNMjQwNTI2MDAxNDQ2WjAYMRYwFAYD VQQDEw02NjQ5NDQ3Ni1lZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUi4WKqeSqxQa2OLIkGR4913VJlcSVdnMISEp9K4VTljHKuz1+H7XRCOSRtJ SDXtDDJUt+p1ksdg8++51E+Uit2j60hCGV3bPWP/7y9Jagws+GbybeTlsKGLag3y IpOQ/oHUy3bGrBisc6kIqfKaDUzi2XVJMjYcKBF8ZSD2OOaG9fJ6WDhX0mCmxcx1 DWX5A+mp833sBndrXmHsXixM3JjpCfIpFAen2SPGL0RvHL0mgZywQU8HlCv5ZHxs 4RoTQFFg0bjTaKK6EtBmNXntg3T80SNjrQZ9nSX2ZDQysFKQVuCqn37g42vT02Jp 9PKy8N1X6O6SYSHLviPJvkxkjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9bwGsF C3p3LU76/5fXnxGP7Sr7MB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFEtOa4xBB1zOh8a5nbX5gOlxYPDSKGEBtUM2ZRw/BaCoyVxyv2kvm f9cVcMTuA104zlBwRkH38BIA5kUHgIQ4Xd1rCiRwO7bSczx2UnvzkuU+Ixv0ScG0 E+ZpI2o5Dg/PoftDP43okMQXP9G/o3LSbwdvfLsTyNF+tWca6eTJGYoCTljTu+eM z6BAuAJsDXYsC9WROlUGurNNYwdN6MU/1jHOZmiSh6y3Cnc04bHgK85gGr9gkfD1 Q2TGtaNEiWiatp/E/giqMwIvWGi/eDTLgjAeIHcUNdpky3+htkkHUIiiJSreRF4o ADBYBHwMW7quJOZTMMcZTyVUxdzWf8pG -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org