$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: Z7QK59honbuQ3v9hKCb7J7Tn6zyLL2PY890I0DKeohA= Subject key identifier: 22:FC:AA:81:CE:F9:2E:BD:74:30:FE:17:9D:EB:D6:F0:6B:A2:F5:60 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0581 Signing time: Sun 19 May 2024 00:35:07 +0000 Manifest this update: Sun 19 May 2024 00:35:06 +0000 Manifest next update: Sun 26 May 2024 00:35:06 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: qU7EreCfrqd8EsmWnXBNn5iYX7B/ePxxS1ZV8+y2SD0=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: OLspspuiYrz/OqVyu239/Uv2o5RZLNXuEYcQjrgRvGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: May 19 00:35:06 2024 GMT Not After : May 26 00:35:06 2024 GMT Subject: CN=6649493a-98f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:3b:61:dd:a0:3f:14:38:75:5f:54:66:0b: 58:f3:4e:44:d0:49:7d:41:f3:d8:5f:a5:d2:1b:d7: 3e:6b:c3:ae:68:fa:aa:49:bf:0d:c5:e3:ec:9b:36: 7f:88:56:90:47:40:e2:7a:67:be:d2:cd:8a:7c:4d: 67:84:16:d1:2f:3c:22:c1:15:bc:c7:b8:6c:b5:53: 32:92:5d:df:a8:2e:7b:25:0e:7b:26:0e:44:b9:9c: 12:c6:40:d4:3d:42:85:d7:3a:a4:70:7e:d1:72:7a: 91:7d:4f:17:c8:c6:42:bc:99:d6:a8:27:e4:cf:ca: f1:d6:aa:04:0d:a4:f6:66:6f:f3:5e:1a:c0:14:26: 44:c7:e8:1d:7b:c3:df:47:0a:cc:ec:4b:d5:e9:cc: 84:fb:c7:93:7d:06:f5:50:f3:f3:4b:4c:a4:50:6c: c5:86:6e:e7:a4:54:fb:6c:7d:89:a4:2a:bd:e0:05: b8:e8:f3:3a:5a:fe:ed:da:16:ac:38:58:52:9d:6e: ec:2b:44:e9:7d:24:36:45:dd:80:c6:eb:b1:d9:fd: 37:50:fc:62:d9:05:cc:cc:be:90:5a:1a:4f:9d:8b: 05:d4:df:9c:b4:19:ea:6d:d6:de:42:46:51:1e:9d: cb:65:12:6e:a0:6b:6b:e4:3d:c6:2e:6d:4f:99:81: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:AA:81:CE:F9:2E:BD:74:30:FE:17:9D:EB:D6:F0:6B:A2:F5:60 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f4:5f:fb:7e:6e:09:e3:0f:ee:96:b5:1e:aa:95:cf:13:24: 3f:19:f2:4d:3f:41:ad:05:d9:a8:fb:9e:d7:a2:ef:8e:06:36: 6f:5f:0f:c5:30:d4:9c:28:ea:28:7e:f4:56:7c:8d:59:ec:2d: c7:fc:01:e5:43:e8:d5:b8:c3:57:05:14:97:8d:bb:0d:a7:c6: 63:1d:69:65:6b:59:9c:f9:f5:06:98:f6:9d:c9:20:84:f4:f6: 02:88:a9:7c:00:b2:2e:4d:5d:94:f6:b5:81:f0:8b:63:29:b2: e1:39:83:9d:15:28:21:38:06:36:bc:0e:7c:2b:7b:f0:6a:0a: 26:56:4a:c3:15:9a:4a:38:2f:ce:16:b3:fd:5b:88:4b:33:5c: e4:55:38:00:8d:ac:a7:60:35:43:d6:48:b7:1f:66:28:36:c6: cb:e7:4e:ff:99:77:ec:2a:97:e7:64:7f:fa:e6:32:ab:fe:09: 7f:4d:98:32:4d:2e:47:63:ba:ba:9b:f8:3c:be:27:09:3c:6c: 34:ab:c7:52:87:27:01:a7:5a:d2:51:73:44:3f:cc:e2:1e:e4: 6d:b8:48:7b:42:59:3e:d2:6b:69:2d:19:54:1e:7e:8a:d6:e8: 89:b0:c7:41:39:5d:93:37:92:ed:e5:41:be:37:b9:b5:a4:a4: d8:e2:76:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjQwNTE5MDAzNTA2WhcNMjQwNTI2MDAzNTA2WjAYMRYwFAYD VQQDEw02NjQ5NDkzYS05OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYQ7Yd2gPxQ4dV9UZgtY805E0El9QfPYX6XSG9c+a8OuaPqqSb8NxePsmzZ/ iFaQR0Dieme+0s2KfE1nhBbRLzwiwRW8x7hstVMykl3fqC57JQ57Jg5EuZwSxkDU PUKF1zqkcH7RcnqRfU8XyMZCvJnWqCfkz8rx1qoEDaT2Zm/zXhrAFCZEx+gde8Pf RwrM7EvV6cyE+8eTfQb1UPPzS0ykUGzFhm7npFT7bH2JpCq94AW46PM6Wv7t2has OFhSnW7sK0TpfSQ2Rd2Axuux2f03UPxi2QXMzL6QWhpPnYsF1N+ctBnqbdbeQkZR Hp3LZRJuoGtr5D3GLm1PmYGyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL8qoHO +S69dDD+F53r1vBrovVgMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd9F/7fm4J4w/ulrUeqpXPEyQ/GfJNP0GtBdmo+57Xou+OBjZvXw/F MNScKOoofvRWfI1Z7C3H/AHlQ+jVuMNXBRSXjbsNp8ZjHWlla1mc+fUGmPadySCE 9PYCiKl8ALIuTV2U9rWB8ItjKbLhOYOdFSghOAY2vA58K3vwagomVkrDFZpKOC/O FrP9W4hLM1zkVTgAjaynYDVD1ki3H2YoNsbL507/mXfsKpfnZH/65jKr/gl/TZgy TS5HY7q6m/g8vicJPGw0q8dShycBp1rSUXNEP8ziHuRtuEh7Qlk+0mtpLRlUHn6K 1uiJsMdBOV2TN5Lt5UG+N7m1pKTY4nZb -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org