$ rpki-client -vvf rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft File: Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft (raw, json) Hash identifier: vHw8N3i7w16vSS9IV7z4Sx8VS6X2mYG40BVD0GV8heE= Subject key identifier: 74:CE:16:69:01:04:80:B7:7B:F7:25:D8:07:04:4D:20:3B:ED:0B:8B Authority key identifier: 1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4 Certificate issuer: /CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4 Certificate serial: 0E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft Manifest number: 0E80 Signing time: Fri 31 May 2024 18:50:55 +0000 Manifest this update: Fri 31 May 2024 18:50:55 +0000 Manifest next update: Fri 07 Jun 2024 18:50:55 +0000 Files and hashes: 1: Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl (hash: LACnRAwGxLzMTDPCfqMFThVlBFKrP30xjYmK5HyCdgY=) 2: AD8C3CF46FC111E9B6D55F15C4F9AE02.roa (hash: eK3TIXZU++KT77U0gOV6eFDrKQRn1O/nNJMoTFYBGpc=) 3: AECBAA0A6FC111E9B6D55F15C4F9AE02.roa (hash: gOGeTyq0y8qliMLsYXjJfoXemDXj/2xSpizuevOuzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4 Validity Not Before: May 31 18:50:55 2024 GMT Not After : Jun 7 18:50:55 2024 GMT Subject: CN=665a1c0f-9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:12:29:06:a4:a7:9c:4f:54:20:63:9f:8d: 32:6d:cb:08:2b:55:c6:3a:e0:e1:87:c1:9d:5b:c2: 47:64:fc:c0:d1:84:e7:96:04:a5:68:bd:74:73:9e: eb:25:34:a6:83:5b:02:fb:eb:af:6c:d6:76:02:04: 70:f2:df:0e:b2:c3:80:2a:dc:41:5f:11:61:3a:dc: e1:19:10:6c:72:ee:f8:b1:27:e2:e8:13:82:1f:f1: d0:ce:0b:d2:1d:1e:cd:a2:b7:5a:33:13:1e:0a:01: 0d:69:92:72:3a:55:ca:c0:50:82:fa:69:fa:01:ba: 47:f8:68:ab:c0:98:70:2d:a6:b6:c7:6c:ad:96:e1: c3:aa:09:6a:02:eb:aa:93:c8:aa:21:19:a6:00:1b: 63:b7:04:5a:c2:9f:e0:7b:c6:5b:e2:a2:e4:0b:26: 4b:6f:16:2e:b4:eb:a5:ce:46:71:0e:e6:5c:b5:dc: 8a:82:a3:b5:98:b9:40:25:74:f3:6c:b7:c6:6d:51: ea:5a:40:80:0c:79:fc:25:6e:53:c8:e7:0c:6e:17: 15:db:2e:cf:6e:ec:d3:c5:68:da:ed:f3:08:b6:95: c9:94:5c:05:35:6a:f0:40:60:34:1a:18:c2:01:a5: dc:a3:e3:39:7c:a0:8d:d0:b5:7b:c6:79:5c:95:5d: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CE:16:69:01:04:80:B7:7B:F7:25:D8:07:04:4D:20:3B:ED:0B:8B X509v3 Authority Key Identifier: keyid:1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:23:da:ba:84:05:6e:cf:ce:41:4d:6f:c8:58:3d:aa:d7: a5:ea:d2:ce:31:a3:cf:a0:a2:a8:d2:a3:c8:a7:94:3e:64:b7: 72:66:da:49:8b:57:46:d3:6a:a1:9b:7b:d8:9f:d8:c4:d0:4e: aa:4a:da:45:78:c3:9f:24:7e:62:89:51:66:36:45:e7:a2:c7: c7:70:db:8a:ba:e9:7f:13:53:b7:df:cd:bb:4c:24:07:9f:d3: 70:5d:66:7b:90:d3:48:31:5d:82:0c:35:78:5b:ef:98:2b:39: 4e:60:3a:b3:0c:82:47:8d:92:72:25:e8:0c:2d:7e:c8:89:f6: 5b:9d:bf:15:dc:a0:e6:d9:1d:fd:26:21:bb:27:9c:e7:ee:30: 37:2f:4d:e3:ae:6d:70:cc:21:a5:b3:4a:75:fd:44:71:0b:03: 13:54:81:4f:9e:87:59:6e:73:12:c2:5f:2c:49:20:ad:81:aa: 95:38:c2:98:7b:4c:61:7d:51:e0:73:e8:6d:50:02:b7:0d:fd: 85:31:2c:59:5c:6e:51:3d:85:96:15:98:8a:0c:dd:8e:7f:75: 8b:08:68:27:77:44:90:03:08:2b:70:a2:0f:39:83:d4:2c:cc: 73:c4:f3:07:8d:ab:a5:a3:c2:f8:93:6f:d4:70:ea:0b:70:dd: 22:a3:55:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4OUQxMTAvBgNVBAUTKDFGMjgxRUZBNDA1QzhCQkIzRDlERjhENTgxRDhDNTgz MUFBMTlBRTQwHhcNMjQwNTMxMTg1MDU1WhcNMjQwNjA3MTg1MDU1WjAYMRYwFAYD VQQDEw02NjVhMWMwZi05YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8d0SKQakp5xPVCBjn40ybcsIK1XGOuDhh8GdW8JHZPzA0YTnlgSlaL10c57r JTSmg1sC++uvbNZ2AgRw8t8OssOAKtxBXxFhOtzhGRBscu74sSfi6BOCH/HQzgvS HR7NordaMxMeCgENaZJyOlXKwFCC+mn6AbpH+GirwJhwLaa2x2ytluHDqglqAuuq k8iqIRmmABtjtwRawp/ge8Zb4qLkCyZLbxYutOulzkZxDuZctdyKgqO1mLlAJXTz bLfGbVHqWkCADHn8JW5TyOcMbhcV2y7PbuzTxWja7fMItpXJlFwFNWrwQGA0GhjC AaXco+M5fKCN0LV7xnlclV2zAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTOFmkB BIC3e/cl2AcETSA77QuLMB8GA1UdIwQYMBaAFB8oHvpAXIu7PZ341YHYxYMaoZrk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg5RC8yMDBEM0U2QTZG QzAxMUU5QTA3RDFCMTJDNEY5QUUwMi9IeWdlLWtCY2k3czluZmpWZ2RqRmd4cWht dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5Z2Uta0JjaTdzOW5malZnZGpGZ3hxaG11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg5RC8yMDBEM0U2QTZGQzAxMUU5QTA3RDFCMTJDNEY5QUUwMi9IeWdlLWtCY2k3 czluZmpWZ2RqRmd4cWhtdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ZCPauoQFbs/OQU1vyFg9qtel6tLOMaPPoKKo0qPIp5Q+ZLdyZtpJ i1dG02qhm3vYn9jE0E6qStpFeMOfJH5iiVFmNkXnosfHcNuKuul/E1O33827TCQH n9NwXWZ7kNNIMV2CDDV4W++YKzlOYDqzDIJHjZJyJegMLX7IifZbnb8V3KDm2R39 JiG7J5zn7jA3L03jrm1wzCGls0p1/URxCwMTVIFPnodZbnMSwl8sSSCtgaqVOMKY e0xhfVHgc+htUAK3Df2FMSxZXG5RPYWWFZiKDN2Of3WLCGgnd0SQAwgrcKIPOYPU LMxzxPMHjaulo8L4k2/UcOoLcN0io1W6 -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org