$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: 8LJyz2mj+gtDXb6Za5T5DF/tX3QyBiEcLTEan4bBDnc= Subject key identifier: 73:C6:83:42:92:20:19:38:A5:03:B1:2D:83:DE:38:09:75:83:B1:BB Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 340D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 33E9 Signing time: Sat 18 May 2024 14:37:37 +0000 Manifest this update: Sat 18 May 2024 14:37:36 +0000 Manifest next update: Sat 25 May 2024 14:37:36 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: tVX/IVuRFAIuCzqa0ZaQvVcHnRDxRrTJ7N8Cp8aTazw=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: OSYJd6iARCRZpbvh5LZxgFxfFVKwYwFFW+shwqVkG10=) 3: 42F41E56B0D011E5A58E097CC4F9AE02.roa (hash: uS7mm4nJeuJObvS/1zoAs7w7Tk8NzuTKO3u3JE9tzqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13325 (0x340d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: May 18 14:37:36 2024 GMT Not After : May 25 14:37:36 2024 GMT Subject: CN=6648bd30-3eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:08:cf:7e:43:38:c4:f1:2e:66:27:db:60: 76:27:ef:d4:b2:dc:d1:0f:a8:d1:19:f2:32:8b:f1: 36:c4:7b:71:d8:54:66:0d:11:6e:c2:13:15:0f:b2: 6b:ef:1b:12:a2:c4:5f:87:2c:b6:78:cb:48:5b:39: b9:88:2f:b8:bf:ae:29:24:77:93:37:f2:6f:e8:1c: 28:b5:0c:52:6d:57:19:e4:f2:09:7a:18:ce:be:df: 3b:b4:55:10:ac:43:ae:c1:1e:45:31:a2:14:f9:a6: 52:86:5f:df:9f:d9:73:ab:7d:9e:44:3c:52:35:5c: 0e:17:e3:33:91:2c:09:04:93:b9:83:dc:6e:d4:02: 16:7b:26:ea:ea:28:cd:b5:6b:a8:df:56:12:cf:34: bb:85:61:12:c0:29:f6:45:94:82:a6:ee:9e:df:6e: 09:99:1b:15:b7:74:52:bc:31:97:f7:cc:fe:ab:5a: c3:b5:9a:2f:e1:dd:88:0b:14:c9:87:29:22:25:99: 73:3d:1a:9c:8c:11:ad:98:c6:bb:4b:b8:6d:43:24: 44:af:6b:19:33:3f:93:9a:fb:d9:64:4e:83:b4:44: fc:ec:0b:bb:ec:0d:a3:56:c3:ca:4d:71:e9:e0:d3: 1a:4e:36:3a:c3:79:7f:06:02:f2:45:aa:d7:f5:2e: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C6:83:42:92:20:19:38:A5:03:B1:2D:83:DE:38:09:75:83:B1:BB X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:33:f7:34:15:b3:99:5f:31:53:e0:39:b2:2d:1d:99:80:db: b4:90:ff:cf:d3:6f:3b:d2:74:2f:08:8a:af:a8:63:30:80:23: b8:38:73:da:59:13:ca:63:8d:d4:5d:a7:70:59:2c:49:58:7e: 26:3f:9f:10:d1:8a:e7:ac:e1:1f:41:bf:a6:b7:4c:1c:bc:6e: 71:3d:07:5d:e8:e9:63:5b:5e:33:5f:52:12:cb:6d:f7:15:77: cc:60:25:44:d3:1e:20:64:48:1f:5e:84:ea:c4:ae:43:48:e4: ee:13:75:b6:71:46:f5:54:67:e9:d4:1f:e7:60:82:f1:d2:b6: f9:b2:70:cf:8a:7c:2e:81:65:f0:8e:a1:e6:de:b3:24:ee:dc: c2:cb:53:5c:6d:87:f0:e7:c4:cb:36:5c:71:64:40:8b:f9:f2: 4e:1a:0a:cf:76:89:7c:e7:85:8f:ae:5f:3c:e1:f2:70:b4:14: f9:5d:e9:00:0e:d6:65:db:98:51:71:23:27:3c:81:16:25:ad: 16:78:85:0e:64:2d:33:61:a8:da:9e:c0:b7:60:8f:a5:8c:5c: 58:81:4b:d8:4e:7f:62:e1:ac:dc:07:2b:fb:ee:39:f7:b8:c0: 95:4d:3e:ec:98:6d:a1:a9:d9:68:7c:61:7b:3f:50:de:07:9b: 82:e2:c8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjQwNTE4MTQzNzM2WhcNMjQwNTI1MTQzNzM2WjAYMRYwFAYD VQQDEw02NjQ4YmQzMC0zZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04YIz35DOMTxLmYn22B2J+/UstzRD6jRGfIyi/E2xHtx2FRmDRFuwhMVD7Jr 7xsSosRfhyy2eMtIWzm5iC+4v64pJHeTN/Jv6BwotQxSbVcZ5PIJehjOvt87tFUQ rEOuwR5FMaIU+aZShl/fn9lzq32eRDxSNVwOF+MzkSwJBJO5g9xu1AIWeybq6ijN tWuo31YSzzS7hWESwCn2RZSCpu6e324JmRsVt3RSvDGX98z+q1rDtZov4d2ICxTJ hykiJZlzPRqcjBGtmMa7S7htQyREr2sZMz+TmvvZZE6DtET87Au77A2jVsPKTXHp 4NMaTjY6w3l/BgLyRarX9S6qpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPGg0KS IBk4pQOxLYPeOAl1g7G7MB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcM/c0FbOZXzFT4DmyLR2ZgNu0kP/P02870nQvCIqvqGMwgCO4OHPa WRPKY43UXadwWSxJWH4mP58Q0YrnrOEfQb+mt0wcvG5xPQdd6OljW14zX1ISy233 FXfMYCVE0x4gZEgfXoTqxK5DSOTuE3W2cUb1VGfp1B/nYILx0rb5snDPinwugWXw jqHm3rMk7tzCy1NcbYfw58TLNlxxZECL+fJOGgrPdol854WPrl884fJwtBT5XekA DtZl25hRcSMnPIEWJa0WeIUOZC0zYajansC3YI+ljFxYgUvYTn9i4azcByv77jn3 uMCVTT7smG2hqdlofGF7P1DeB5uC4sjD -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org