$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: w1COx7TnHxBsp4XK4mAm4+w7BqhKcm5SD0gKkxxQikw= Subject key identifier: ED:FA:10:F9:AD:7B:FA:37:5A:37:EF:8B:EB:39:90:D7:B2:9E:E4:D2 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 12A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 1280 Signing time: Sat 18 May 2024 17:40:22 +0000 Manifest this update: Sat 18 May 2024 17:40:21 +0000 Manifest next update: Sat 25 May 2024 17:40:21 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: 3lqk1H5jwce7QbgTRXmUjpVjUPjhBwHQToeXMdLttg4=) 2: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: 8hyXNYESkSjUrpbYxaS/qkwp3HcVC+EurBWeQvWRtvM=) 3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: Ahmq+kO6A0bgXkAjwTqcQfdgpiGuxiz20RpREd5Xycs=) 4: 538F7B12B1D711EBB3C0A24AC4F9AE02.roa (hash: lphxg6l5kCfwED0OWn5gQnqtc1lhTVAr6wMcBhF8yGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4775 (0x12a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: May 18 17:40:21 2024 GMT Not After : May 25 17:40:21 2024 GMT Subject: CN=6648e806-64d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:36:99:28:2c:fc:ba:7b:d8:bd:68:a3:c7: e2:9b:d6:9c:6a:81:28:24:0c:31:e0:4a:1f:0e:89: e3:2e:ee:45:f0:4a:71:b9:29:b7:a6:df:06:a0:8d: 54:41:ef:fc:c2:37:b2:d6:5e:ea:0c:9f:b1:9c:76: 8a:41:50:e2:44:40:be:ff:99:aa:f9:b0:6e:f6:3d: 8f:0e:39:4d:86:97:d4:6b:6b:7f:1f:a3:50:95:9b: e4:29:84:89:a1:7b:a0:a0:b9:8c:5b:18:da:fa:e3: 6e:e8:36:2b:12:84:9f:9e:08:76:79:44:06:f8:04: 9f:a6:46:ac:70:94:28:72:5f:f7:60:f0:28:62:57: 84:96:ba:e4:5d:2f:7f:9e:f9:bf:a9:82:cf:e0:16: 14:c6:c1:64:9b:ec:0c:5d:44:a2:f4:cb:0c:5e:6d: 3d:c2:d8:f7:ea:c0:5f:21:cf:ef:fb:fe:14:4d:3a: 2d:20:83:40:ce:dc:5f:b3:8a:de:2d:e3:e8:96:19: 09:70:0e:fa:40:82:f0:43:7c:0a:9a:56:be:13:88: be:af:b2:e3:d6:78:0e:43:ac:98:47:47:56:dc:5d: 35:d0:10:04:6b:15:18:51:f4:ab:bd:1a:1a:2b:72: df:30:93:e6:fd:80:f7:1c:dd:67:a0:e1:34:a1:d5: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:10:F9:AD:7B:FA:37:5A:37:EF:8B:EB:39:90:D7:B2:9E:E4:D2 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5f:45:dd:60:91:5f:43:d4:69:61:be:bf:7f:5c:b6:f3:d4: 64:c3:94:5c:d3:13:2c:11:38:a8:08:0b:b5:26:a8:3e:da:bb: 2f:66:e9:79:63:dc:67:ed:4c:3f:1c:19:dd:5d:ad:e8:80:f3: 8a:ca:11:bc:4c:1b:7f:e2:da:0e:2b:0c:e0:4d:54:27:f9:49: 14:48:18:3b:4a:ab:c2:56:1a:d5:1c:ae:e3:84:4f:20:4e:69: c1:d8:af:64:a7:a1:2f:9f:59:f1:c2:d6:cf:97:58:6b:58:2e: 57:4f:22:bb:3d:49:81:77:e0:3a:92:8e:12:04:2b:93:0f:f8: 0c:86:55:10:92:5f:23:89:8a:d0:6d:7c:7c:e9:86:a9:8e:fb: 28:72:f3:20:b8:36:b4:a4:ec:2d:46:5d:c6:8d:84:76:a2:9c: 43:1f:30:da:14:d6:e4:1a:41:44:3f:98:00:06:47:a2:6a:04: b3:48:b9:bf:00:ba:65:85:f7:1d:92:f8:e1:04:7f:f2:40:58: 67:86:63:db:77:1d:9f:09:42:a3:67:4c:55:fd:6f:1a:b4:59: ff:5b:17:fc:2a:a1:84:6d:ee:03:40:cf:ce:2a:e3:ae:5b:d1: fe:9c:a4:a6:93:77:58:5f:66:a9:46:a8:20:3b:40:ca:34:30: 8e:cc:9a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjQwNTE4MTc0MDIxWhcNMjQwNTI1MTc0MDIxWjAYMRYwFAYD VQQDEw02NjQ4ZTgwNi02NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+A2mSgs/Lp72L1oo8fim9acaoEoJAwx4EofDonjLu5F8EpxuSm3pt8GoI1U Qe/8wjey1l7qDJ+xnHaKQVDiREC+/5mq+bBu9j2PDjlNhpfUa2t/H6NQlZvkKYSJ oXugoLmMWxja+uNu6DYrEoSfngh2eUQG+ASfpkascJQocl/3YPAoYleElrrkXS9/ nvm/qYLP4BYUxsFkm+wMXUSi9MsMXm09wtj36sBfIc/v+/4UTTotIINAztxfs4re LePolhkJcA76QILwQ3wKmla+E4i+r7Lj1ngOQ6yYR0dW3F010BAEaxUYUfSrvRoa K3LfMJPm/YD3HN1noOE0odX0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO36EPmt e/o3Wjfvi+s5kNeynuTSMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClX0XdYJFfQ9RpYb6/f1y289Rkw5Rc0xMsETioCAu1Jqg+2rsvZul5 Y9xn7Uw/HBndXa3ogPOKyhG8TBt/4toOKwzgTVQn+UkUSBg7SqvCVhrVHK7jhE8g TmnB2K9kp6Evn1nxwtbPl1hrWC5XTyK7PUmBd+A6ko4SBCuTD/gMhlUQkl8jiYrQ bXx86YapjvsocvMguDa0pOwtRl3GjYR2opxDHzDaFNbkGkFEP5gABkeiagSzSLm/ ALplhfcdkvjhBH/yQFhnhmPbdx2fCUKjZ0xV/W8atFn/Wxf8KqGEbe4DQM/OKuOu W9H+nKSmk3dYX2apRqggO0DKNDCOzJq7 -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org