$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json) Hash identifier: FcnSKQSCJz8aK2wKYpvo+DqkNGbaCOtU1WAomxkK+YY= Subject key identifier: EA:7C:C9:32:C3:5E:A1:01:14:4D:E4:DD:CE:F9:A2:DF:0D:F4:55:30 Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 3440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft Manifest number: 3408 Signing time: Sat 18 May 2024 14:16:13 +0000 Manifest this update: Sat 18 May 2024 14:16:13 +0000 Manifest next update: Sat 25 May 2024 14:16:13 +0000 Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: fQuWm4NSqvoNc7VDgUOl7Gx7C506g2/31bBst3+Yj6c=) 2: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: Qr1umLE0vGNYDcFCj4JGniza3Z/n039H/0fkW5DjBi0=) 3: 0F5C892289B011EE886DD13CC4F9AE02.roa (hash: P7T/Kyhw5TZwt7crMvsR07Hrr9/lVYnxVfdEI7ejLEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13376 (0x3440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: May 18 14:16:13 2024 GMT Not After : May 25 14:16:13 2024 GMT Subject: CN=6648b82d-a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:d6:8b:c4:cb:6f:dd:39:61:83:0c:d9:a2: 95:fc:eb:06:21:12:e9:f7:b0:20:71:06:d4:40:8b: 70:46:1f:63:47:cc:c1:0e:e9:33:c2:50:05:b5:f5: a4:c3:3b:93:60:69:e1:69:65:0c:90:07:bf:fb:73: da:13:13:1c:9d:18:c9:1b:93:4d:a7:88:27:16:dd: 1f:f1:5d:d0:6f:63:b3:f8:da:ea:22:28:ba:a4:da: 1d:53:5b:19:8c:28:f2:57:dc:d8:07:4f:20:9d:d1: cd:0e:b7:dc:a0:fe:34:99:93:d9:c8:0e:ba:93:cb: 39:e0:2a:98:ce:ec:ba:50:99:3d:60:e5:ff:2f:11: d8:27:23:cc:1f:aa:31:dd:f4:e8:59:83:66:d4:1e: 9d:61:08:50:83:22:8f:f9:e5:d8:ed:cf:4a:b5:c5: 8d:3e:56:e7:c5:12:d2:da:b5:37:11:a8:11:68:62: 09:5b:3c:54:6d:f5:4f:f7:b9:60:37:10:80:d2:53: 40:26:4e:13:df:d7:33:11:cb:3c:2e:0e:6d:b8:fd: ac:26:59:17:71:f3:a2:85:a7:6f:83:f2:01:95:04: 7f:45:9f:8d:4f:67:2c:3e:4f:89:23:82:f5:3c:f8: ab:32:9b:65:0a:68:be:4e:d2:2c:dc:eb:32:00:98: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7C:C9:32:C3:5E:A1:01:14:4D:E4:DD:CE:F9:A2:DF:0D:F4:55:30 X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0b:55:7d:03:10:bb:3c:49:3b:c5:a3:59:65:f8:5c:7a:45: ea:2b:a4:dd:c7:e6:b1:f0:9c:58:f8:d3:16:4b:06:2d:43:57: 20:96:d1:d7:8d:7b:7f:5b:13:a0:83:9c:a8:9e:c4:5a:3f:9f: a9:55:3e:a9:4e:ab:0c:2e:6e:8b:c4:af:38:a3:a5:7e:b9:58: a1:eb:7d:17:2b:28:1b:17:9c:5a:22:55:75:6b:fb:23:3e:41: d4:45:97:d9:35:63:d4:ea:e7:d4:3e:6e:f5:b3:92:56:dc:39: 95:bf:8d:da:1f:78:aa:7c:35:e0:ce:99:db:71:0f:78:48:fd: 31:dc:74:19:b3:80:a1:3e:24:db:50:d5:b6:a8:eb:50:47:a5: 8f:63:71:0e:95:6b:a6:b3:f5:a1:e1:aa:bf:90:18:5e:4d:d5: 5b:6d:c4:dd:8a:cc:c2:7c:0f:92:04:c6:ad:2c:ca:af:67:d3: 62:ba:cd:f3:6e:41:9a:63:5b:d9:96:1b:5e:f6:a2:89:f9:81: 30:7b:97:29:cb:e0:ba:26:4a:28:ca:c0:df:7f:d3:cb:6f:d0: b4:b1:fb:80:49:3d:84:f5:52:a7:fd:99:ae:53:e8:e4:ba:7f: 27:13:35:f8:8d:c7:82:54:d6:ec:c3:43:17:e3:2b:12:59:e5: fc:db:32:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjQwNTE4MTQxNjEzWhcNMjQwNTI1MTQxNjEzWjAYMRYwFAYD VQQDEw02NjQ4YjgyZC1hOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnrWi8TLb905YYMM2aKV/OsGIRLp97AgcQbUQItwRh9jR8zBDukzwlAFtfWk wzuTYGnhaWUMkAe/+3PaExMcnRjJG5NNp4gnFt0f8V3Qb2Oz+NrqIii6pNodU1sZ jCjyV9zYB08gndHNDrfcoP40mZPZyA66k8s54CqYzuy6UJk9YOX/LxHYJyPMH6ox 3fToWYNm1B6dYQhQgyKP+eXY7c9KtcWNPlbnxRLS2rU3EagRaGIJWzxUbfVP97lg NxCA0lNAJk4T39czEcs8Lg5tuP2sJlkXcfOihadvg/IBlQR/RZ+NT2csPk+JI4L1 PPirMptlCmi+TtIs3OsyAJhj2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp8yTLD XqEBFE3k3c75ot8N9FUwMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPC1V9AxC7PEk7xaNZZfhcekXqK6Tdx+ax8JxY+NMWSwYtQ1cgltHX jXt/WxOgg5yonsRaP5+pVT6pTqsMLm6LxK84o6V+uVih630XKygbF5xaIlV1a/sj PkHURZfZNWPU6ufUPm71s5JW3DmVv43aH3iqfDXgzpnbcQ94SP0x3HQZs4ChPiTb UNW2qOtQR6WPY3EOlWums/Wh4aq/kBheTdVbbcTdiszCfA+SBMatLMqvZ9Nius3z bkGaY1vZlhte9qKJ+YEwe5cpy+C6JkooysDff9PLb9C0sfuAST2E9VKn/ZmuU+jk un8nEzX4jceCVNbsw0MX4ysSWeX82zJi -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org