$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: S6gJCNg0mdLPvJsjIUBr5cKh9Y7/KpgHNPY01dkTP24= Subject key identifier: 4F:CF:B4:7C:45:D0:E7:83:F1:AC:29:35:8F:DC:FB:D5:04:8C:AA:63 Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: FB Signing time: Sun 19 May 2024 05:43:29 +0000 Manifest this update: Sun 19 May 2024 05:43:29 +0000 Manifest next update: Sun 26 May 2024 05:43:29 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: mnKHV4wopsuHe9K3n7hEv7pgg3PDUGg9ml1BMJCDaVg=) 2: C2D5B85E9BFC11ED99828F6BC4F9AE02.roa (hash: mHmZau6G9yGcJOFiIh10/4qmNuJVGBI87JICqiEhFs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: May 19 05:43:29 2024 GMT Not After : May 26 05:43:29 2024 GMT Subject: CN=66499181-8dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:fe:64:05:74:36:8a:e0:c8:64:99:71:a0: cd:a3:2d:5e:e9:f8:bb:0f:bb:0a:95:fa:1a:7d:f0: 46:bc:80:ef:ae:5f:4b:2b:82:5c:b0:e5:0a:37:80: cc:aa:42:26:6d:d1:11:18:97:f0:a5:59:b1:68:3d: 6d:2f:6e:98:c4:aa:2e:59:db:d9:77:0f:4f:70:4d: 1b:20:5b:5e:52:a2:5e:0f:c3:eb:38:01:59:d2:0c: 5d:ff:06:fd:02:aa:c2:9b:4b:cd:0a:d3:5e:28:47: cd:b4:c4:4d:6d:53:cf:fc:a0:f0:3f:fd:46:d3:7a: 3d:55:dd:4c:8e:20:de:95:29:ac:69:d3:f0:aa:90: 53:4d:ce:cf:3c:96:e6:17:23:ba:b6:5d:7f:84:6c: 5d:27:b3:5a:f0:a1:51:e4:dd:aa:f4:bd:81:fa:99: 86:c0:a4:1f:ae:d6:28:fa:4a:91:97:12:93:db:fa: cf:47:76:2e:53:13:9f:4a:bd:7e:16:b4:98:e4:1e: 56:7b:bc:e0:ca:a4:82:dd:d3:f6:97:2f:5b:04:0d: 62:c5:b1:65:20:df:9c:1e:27:4f:b5:0c:17:06:30: d5:00:64:a6:69:76:a2:66:8c:2a:58:68:0e:7a:83: 06:a9:9f:87:59:a0:d2:ea:01:7c:ff:af:e8:fa:d6: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:B4:7C:45:D0:E7:83:F1:AC:29:35:8F:DC:FB:D5:04:8C:AA:63 X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b6:cf:03:8d:77:50:8d:71:24:fd:0a:bb:90:b2:34:6f:99: 8c:c9:18:47:a2:f7:a2:92:09:12:bf:a1:63:c9:6e:19:cc:08: cd:70:6a:b8:fb:3a:b9:7f:ef:bd:9d:32:9d:33:f6:56:a2:f3: b6:7c:21:83:b6:94:41:fe:b2:d3:0c:02:04:6e:49:a7:4b:12: db:70:20:98:96:86:fe:48:4e:2f:77:37:72:8c:4c:9a:20:08: 23:4a:89:52:38:3e:66:ed:bc:34:08:d6:38:94:f6:69:09:45: c1:63:31:1c:06:4b:72:00:c5:1e:86:80:2d:8d:f2:49:c8:4a: 0e:30:8c:cf:e5:da:92:22:1c:06:53:d4:4d:1f:51:6e:d9:6f: 8a:a6:ef:d9:86:64:08:a7:cf:92:17:df:0b:b5:50:df:6a:d1: 67:8b:97:fb:d6:d5:5e:f9:d9:b1:87:94:a0:d3:36:b1:c7:ad: 27:5d:0b:49:e7:cc:35:33:30:6f:ed:4c:36:45:bf:34:53:49: 54:00:c5:05:c8:84:92:4c:cf:f7:89:5e:d7:26:de:25:d9:43: 04:ec:26:a9:b9:a4:19:21:c7:bf:15:14:ac:d6:f0:ce:ff:7e: a1:24:eb:99:17:51:bf:15:61:ae:7c:d4:30:f4:a9:37:48:ae: 04:26:39:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjQwNTE5MDU0MzI5WhcNMjQwNTI2MDU0MzI5WjAYMRYwFAYD VQQDEw02NjQ5OTE4MS04ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g/+ZAV0NorgyGSZcaDNoy1e6fi7D7sKlfoaffBGvIDvrl9LK4JcsOUKN4DM qkImbdERGJfwpVmxaD1tL26YxKouWdvZdw9PcE0bIFteUqJeD8PrOAFZ0gxd/wb9 AqrCm0vNCtNeKEfNtMRNbVPP/KDwP/1G03o9Vd1MjiDelSmsadPwqpBTTc7PPJbm FyO6tl1/hGxdJ7Na8KFR5N2q9L2B+pmGwKQfrtYo+kqRlxKT2/rPR3YuUxOfSr1+ FrSY5B5We7zgyqSC3dP2ly9bBA1ixbFlIN+cHidPtQwXBjDVAGSmaXaiZowqWGgO eoMGqZ+HWaDS6gF8/6/o+tYjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/PtHxF 0OeD8awpNY/c+9UEjKpjMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCts8DjXdQjXEk/Qq7kLI0b5mMyRhHoveikgkSv6FjyW4ZzAjNcGq4 +zq5f++9nTKdM/ZWovO2fCGDtpRB/rLTDAIEbkmnSxLbcCCYlob+SE4vdzdyjEya IAgjSolSOD5m7bw0CNY4lPZpCUXBYzEcBktyAMUehoAtjfJJyEoOMIzP5dqSIhwG U9RNH1Fu2W+Kpu/ZhmQIp8+SF98LtVDfatFni5f71tVe+dmxh5Sg0zaxx60nXQtJ 58w1MzBv7Uw2Rb80U0lUAMUFyISSTM/3iV7XJt4l2UME7CapuaQZIce/FRSs1vDO /36hJOuZF1G/FWGufNQw9Kk3SK4EJjm/ -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org