$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: R7jGcaFZDgHHL37UnjJeAVnZQpPe+Ix4oel4GmaUA5s= Subject key identifier: 08:0F:64:38:A9:E0:45:86:73:09:DF:27:69:01:BC:1A:90:48:1C:0C Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 33FA Signing time: Fri 31 May 2024 14:45:00 +0000 Manifest this update: Fri 31 May 2024 14:45:00 +0000 Manifest next update: Fri 07 Jun 2024 14:45:00 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: sz6Wdh6FljRA1v0ZU00CsE5rEq6J7KZpptM8OaOPP8s=) 2: 80F60C0AB36A11EEAE9FF05FC4F9AE02.roa (hash: mPmPvCdQywstYRyflEV6nN7rcE2aRGyDBbdAty6Jy8I=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: kzT9PE+ISZhmu9QjsD3tdtrmlnh7588zEREXQScG2n4=) 4: 0D118DDEBD0D11EA84F7547CC4F9AE02.roa (hash: NctznYW59zz0wNMgwX+WIqt4ooFB6yjq/+SlSBBYAMQ=) 5: 00EDEFD4B45411EDA65D8845C4F9AE02.roa (hash: p+IiBi8p41Xaw/zr8LzUyZCn1S4agZdJFYBd3Xe6JKs=) 6: DC4CF7C4BECE11EA9F27811CC4F9AE02.roa (hash: EOIU3SGjaG3yoWQkMK90rrbkd5uHcov0oh9wII9VG+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: May 31 14:45:00 2024 GMT Not After : Jun 7 14:45:00 2024 GMT Subject: CN=6659e26c-ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:26:ed:60:e5:a1:30:4e:e7:c6:03:61:a0: 93:b7:55:9e:26:f8:ca:ac:1d:7a:5f:25:e0:06:27: f2:d7:12:a7:48:77:23:a1:fd:45:11:4b:1a:d7:6f: 87:d0:f0:c8:1e:ca:a8:cf:79:6c:ca:7c:e1:96:41: c8:df:5d:52:1c:dc:3e:c8:ad:c0:91:61:29:2c:2e: ba:27:86:40:95:d3:27:ad:a6:92:f8:8b:90:1d:99: a1:7a:c4:f1:2c:6c:74:37:87:0d:55:0c:cd:14:07: 16:e1:5b:eb:41:eb:42:00:d8:54:90:35:db:34:d8: d8:fc:03:6b:0b:79:7a:ee:e1:a7:5c:af:9e:e4:d8: 8a:84:60:66:f6:8f:80:25:38:a7:62:db:fb:91:17: b7:56:23:ee:cc:56:f3:f2:5e:7c:79:26:18:58:86: 43:1f:54:5b:e5:d7:3c:3b:a8:17:28:57:cf:24:0c: e7:d0:1f:70:13:ac:62:07:72:b3:1c:65:2f:64:ff: 9f:48:9d:d9:ac:37:8e:ed:6e:cc:14:ef:13:95:72: d1:d6:c3:64:31:d3:85:35:44:a8:0e:b8:30:a4:8f: 1e:3a:68:d2:96:02:20:6e:e7:01:bb:b8:9e:97:10: 22:78:4a:05:19:42:46:64:1a:7b:f7:14:d2:26:96: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:64:38:A9:E0:45:86:73:09:DF:27:69:01:BC:1A:90:48:1C:0C X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:71:78:71:74:bb:ef:af:7b:d7:2b:28:8e:a9:b9:f7:cd:51: ec:c4:00:af:d7:b3:a7:18:80:42:8b:08:98:7c:62:27:f6:a6: e4:01:42:90:79:a8:0d:63:2a:00:64:7a:15:ac:88:c8:4c:fd: 8a:d0:b0:f8:13:5a:4f:03:26:44:bc:7f:c2:4d:59:06:0b:e9: 61:52:76:64:82:31:52:5a:21:9b:0a:61:96:62:18:2d:1b:3a: 1d:10:f1:a3:a6:c2:e9:42:d9:e1:82:11:93:75:07:f0:ba:82: 9a:0e:8d:16:52:d0:eb:3b:bd:16:5b:6b:20:71:0b:08:f6:e0: 6a:c4:97:f5:55:73:c7:58:a8:c4:83:d9:8f:f3:3b:27:3d:65: 4c:47:ed:cb:f6:ac:9a:38:a8:66:34:5e:b1:60:63:db:30:90: d2:94:fd:79:5d:43:5e:de:2e:22:70:93:f2:b9:03:53:99:82: b2:ac:b8:3c:63:90:f4:a7:62:6f:e4:0d:27:99:b3:6a:db:ff: 77:a3:5a:46:f9:d6:94:73:35:8b:0c:c0:fb:09:e1:8d:2f:ca: 0c:53:9b:2c:98:50:bb:73:c4:5d:b8:ec:44:4b:c4:38:ed:e6: 7d:37:2c:d2:9d:47:8b:a3:bb:04:23:4f:12:14:24:19:6c:63: 27:e2:d6:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNTMxMTQ0NTAwWhcNMjQwNjA3MTQ0NTAwWjAYMRYwFAYD VQQDEw02NjU5ZTI2Yy1mZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0Em7WDloTBO58YDYaCTt1WeJvjKrB16XyXgBify1xKnSHcjof1FEUsa12+H 0PDIHsqoz3lsynzhlkHI311SHNw+yK3AkWEpLC66J4ZAldMnraaS+IuQHZmhesTx LGx0N4cNVQzNFAcW4VvrQetCANhUkDXbNNjY/ANrC3l67uGnXK+e5NiKhGBm9o+A JTinYtv7kRe3ViPuzFbz8l58eSYYWIZDH1Rb5dc8O6gXKFfPJAzn0B9wE6xiB3Kz HGUvZP+fSJ3ZrDeO7W7MFO8TlXLR1sNkMdOFNUSoDrgwpI8eOmjSlgIgbucBu7ie lxAieEoFGUJGZBp79xTSJpYNzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgPZDip 4EWGcwnfJ2kBvBqQSBwMMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIcXhxdLvvr3vXKyiOqbn3zVHsxACv17OnGIBCiwiYfGIn9qbkAUKQ eagNYyoAZHoVrIjITP2K0LD4E1pPAyZEvH/CTVkGC+lhUnZkgjFSWiGbCmGWYhgt GzodEPGjpsLpQtnhghGTdQfwuoKaDo0WUtDrO70WW2sgcQsI9uBqxJf1VXPHWKjE g9mP8zsnPWVMR+3L9qyaOKhmNF6xYGPbMJDSlP15XUNe3i4icJPyuQNTmYKyrLg8 Y5D0p2Jv5A0nmbNq2/93o1pG+daUczWLDMD7CeGNL8oMU5ssmFC7c8RduOxES8Q4 7eZ9NyzSnUeLo7sEI08SFCQZbGMn4tYD -----END CERTIFICATE-----Generated at Fri May 31 16:41:42 2024 by rpki-client on console-ams.rpki-client.org