$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: tkwnm85Jx8dAacOQxM74oN+7SB6Yxb3NCcJZWatwZc4= Subject key identifier: CF:45:47:3E:32:0F:4F:23:51:03:2C:3D:E7:76:2E:5A:41:6D:0F:F7 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0DE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0DCB Signing time: Sat 18 May 2024 18:30:34 +0000 Manifest this update: Sat 18 May 2024 18:30:33 +0000 Manifest next update: Sat 25 May 2024 18:30:33 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: 4WWsPLLEDS8I/gL0GIU38xBsiYOAIGiFcuq4tXdPGcI=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: BeDMtd/gRIXBSzEH/HcRt8FWJFY+DpYk+aIKlrxH1X0=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: Ge9gx9oFQ9N2EYDpZxaRD3LOXxPGqIUx2VuLgiI1oUU=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: zKRcCckVz57z0VxNoDUTAF4AYak1diEBJ0bZxZgdtMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3561 (0xde9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: May 18 18:30:33 2024 GMT Not After : May 25 18:30:33 2024 GMT Subject: CN=6648f3c9-97da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:ca:89:cb:65:1f:0a:83:db:37:f7:2b:e9: a1:04:57:65:7b:f3:13:51:ad:51:1d:e2:38:dc:1c: 98:57:7e:ee:ed:d8:89:5d:75:0a:5a:35:b2:95:cb: b0:e6:a6:1f:ff:87:40:e3:80:8e:2b:2a:c4:60:6c: 03:4a:a4:73:62:5d:13:82:65:a3:cf:5e:61:d3:84: 63:3c:eb:d5:6b:67:db:b3:82:48:e5:cb:3f:89:ec: 3c:9e:be:67:6f:e4:01:61:5d:f2:59:79:4b:30:71: 9d:bb:64:36:aa:64:8a:4f:aa:86:c4:30:20:a3:62: 9d:47:db:53:33:7e:51:51:13:bf:bc:c4:77:af:c0: 12:20:dc:ac:c9:f1:f6:a7:e4:1b:af:58:35:f8:88: 43:34:74:55:d5:4e:40:3f:74:c0:76:fb:ca:69:99: f5:5a:56:24:22:75:fa:07:94:9a:a4:1b:af:8b:1a: 4a:1d:77:ae:3e:96:3d:62:b6:84:e6:98:70:54:99: 37:dd:00:35:93:5a:b9:55:cb:b3:6d:52:73:04:49: 37:58:f7:24:cd:0b:d2:84:55:a7:d3:11:57:73:cf: de:d5:76:9c:b3:a6:c8:a4:4c:a6:b1:18:26:8c:7c: 66:e7:c0:46:be:11:f0:5a:27:99:db:91:87:23:08: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:45:47:3E:32:0F:4F:23:51:03:2C:3D:E7:76:2E:5A:41:6D:0F:F7 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:74:4e:29:b9:ab:77:8a:6e:29:e0:78:1f:3d:dc:07:c8:36: 6a:cd:8d:e3:39:c8:2e:dc:5a:12:c8:c7:05:7a:15:81:d7:7d: e1:20:a1:82:de:1a:f8:da:db:f3:18:66:fe:ed:e3:70:09:99: cf:5c:d8:4d:83:14:ed:b4:92:70:03:62:80:c0:00:96:c4:58: da:f2:bf:81:76:93:61:be:65:d6:fc:4e:04:59:26:f3:24:e2: 97:81:0f:3b:40:8a:49:9b:8a:66:a5:06:d6:cf:a8:fe:fa:4b: d7:60:cb:3c:db:f2:d3:44:f2:15:69:a1:9b:73:b8:15:3a:8c: f9:4a:52:a7:7e:b2:de:eb:91:4b:19:34:d8:00:34:7e:c3:1f: cb:b6:34:dc:51:49:86:bf:70:d4:c8:5f:59:9b:a2:4a:ee:d3: 6f:5c:4a:00:aa:82:14:80:81:1d:2f:57:72:18:e6:d5:10:22: e5:ea:1f:1d:2a:9c:df:a3:4f:aa:d9:6e:bf:05:6a:d1:0d:9c: 46:8a:c7:5d:5f:4a:fd:53:41:16:73:40:b4:f2:c0:27:67:b5: 2c:bf:32:97:30:05:46:6b:a7:c6:04:ea:ca:ab:e9:be:77:91: 55:f6:1a:e4:14:85:08:9a:ef:e8:70:1e:e9:60:96:3d:cd:43: b8:a2:b3:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjQwNTE4MTgzMDMzWhcNMjQwNTI1MTgzMDMzWjAYMRYwFAYD VQQDEw02NjQ4ZjNjOS05N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaHKictlHwqD2zf3K+mhBFdle/MTUa1RHeI43ByYV37u7diJXXUKWjWylcuw 5qYf/4dA44COKyrEYGwDSqRzYl0TgmWjz15h04RjPOvVa2fbs4JI5cs/iew8nr5n b+QBYV3yWXlLMHGdu2Q2qmSKT6qGxDAgo2KdR9tTM35RURO/vMR3r8ASINysyfH2 p+Qbr1g1+IhDNHRV1U5AP3TAdvvKaZn1WlYkInX6B5SapBuvixpKHXeuPpY9YraE 5phwVJk33QA1k1q5VcuzbVJzBEk3WPckzQvShFWn0xFXc8/e1Xacs6bIpEymsRgm jHxm58BGvhHwWieZ25GHIwhvnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9FRz4y D08jUQMsPed2LlpBbQ/3MB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjdE4puat3im4p4HgfPdwHyDZqzY3jOcgu3FoSyMcFehWB133hIKGC 3hr42tvzGGb+7eNwCZnPXNhNgxTttJJwA2KAwACWxFja8r+BdpNhvmXW/E4EWSbz JOKXgQ87QIpJm4pmpQbWz6j++kvXYMs82/LTRPIVaaGbc7gVOoz5SlKnfrLe65FL GTTYADR+wx/LtjTcUUmGv3DUyF9Zm6JK7tNvXEoAqoIUgIEdL1dyGObVECLl6h8d Kpzfo0+q2W6/BWrRDZxGisddX0r9U0EWc0C08sAnZ7UsvzKXMAVGa6fGBOrKq+m+ d5FV9hrkFIUImu/ocB7pYJY9zUO4orPv -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org