$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: La+NvzPqgJPFoSePq8bvqbnujeDdW0qd8N5MHApun6c= Subject key identifier: 33:1A:61:A4:CF:84:B7:9C:D8:BC:FA:F0:DA:0D:14:D8:9B:90:87:3F Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0257 Signing time: Sun 19 May 2024 03:54:36 +0000 Manifest this update: Sun 19 May 2024 03:54:35 +0000 Manifest next update: Sun 26 May 2024 03:54:35 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: r8+mJ4YUmpr6FWFzttIthe91GjnhtxVabIlsI4f2yhk=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: xmSC1I95NNr3jrbRQDh+kkda5BLaYr0RdDSNgUkCrGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: May 19 03:54:35 2024 GMT Not After : May 26 03:54:35 2024 GMT Subject: CN=664977fc-8afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:14:9c:e7:dc:44:f8:7b:0b:5c:7a:c6:f0: 2c:cb:97:82:54:74:13:21:63:b1:df:f2:fc:fc:fa: 3e:e5:8a:ac:00:9b:37:41:f8:cd:fe:e8:53:a2:c9: 65:b3:d7:5f:ab:40:dd:41:c6:1d:d7:34:8d:38:1b: 48:1a:70:d5:b6:d3:cf:b9:c6:29:50:19:5b:6f:24: 85:9e:45:5a:23:38:25:d2:e6:b9:ca:cc:9b:78:06: 8e:bc:24:3c:19:6b:a3:cc:8a:ba:09:b3:b5:20:1d: ea:48:08:e2:d2:87:60:0e:79:33:6c:75:f7:34:07: 4e:65:e1:8a:2f:12:28:94:60:c2:81:9f:f6:4d:c5: 18:99:dd:ef:bd:d3:77:4c:18:d1:38:d0:41:f1:b6: 33:29:e1:26:39:06:6a:dd:f6:67:b3:76:47:63:71: 2f:d8:d6:73:c3:76:f3:3f:92:3f:ca:eb:a1:4f:14: 86:c5:30:7d:29:0d:cb:85:3b:db:3b:95:b2:ff:83: 93:fa:7b:2d:8f:cd:1c:8f:d8:c1:c8:c0:fb:62:70: ca:ad:14:97:e2:4f:95:56:96:86:c5:99:96:55:27: 5a:9f:62:07:85:1c:9c:27:bb:58:6f:11:54:c2:7d: 68:9d:88:40:18:10:6d:82:38:cf:06:45:bd:2d:a4: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1A:61:A4:CF:84:B7:9C:D8:BC:FA:F0:DA:0D:14:D8:9B:90:87:3F X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:14:99:74:a0:fe:af:d6:7b:2a:73:07:ba:20:d3:ea:bc:27: 4a:6f:7b:3f:4c:58:9a:31:1a:a1:b9:e2:5b:82:11:e5:78:41: 87:44:0d:d0:b5:c3:64:b5:b2:c4:d1:4a:2d:1a:98:63:91:d2: 3c:ed:3b:5d:b2:8a:d5:23:93:f6:2f:7a:d7:9c:30:48:c9:40: 78:63:59:b4:3e:fb:52:fa:24:35:b1:b8:03:42:3e:15:39:0c: b8:86:7d:23:27:26:32:d0:a0:fa:1b:e4:61:8c:2e:cf:66:41: e6:93:07:d1:9d:61:46:29:ec:ff:64:96:84:d1:8e:8b:2e:01: d9:b9:35:b8:e3:84:a2:90:77:03:5b:a6:aa:f7:7f:b4:70:89: 10:6c:35:53:de:e6:19:96:6f:d6:00:9c:85:6e:74:c6:63:e0: 91:74:fa:3d:75:e4:1b:94:58:8a:2a:eb:20:61:53:f0:ab:d8: 4f:0b:15:ce:c0:05:64:fc:54:f0:a4:4f:4a:34:7e:94:52:bb: 20:93:00:54:1d:e7:7e:e0:b3:43:ec:70:cb:7c:68:02:49:a8: b3:52:54:e0:83:ce:06:0e:62:ab:88:2e:55:d4:7c:6c:4d:55: 42:b9:54:bf:e1:01:62:5a:32:10:89:cf:dd:3a:74:ad:37:f0: 44:19:f5:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjQwNTE5MDM1NDM1WhcNMjQwNTI2MDM1NDM1WjAYMRYwFAYD VQQDEw02NjQ5NzdmYy04YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI0UnOfcRPh7C1x6xvAsy5eCVHQTIWOx3/L8/Po+5YqsAJs3QfjN/uhTosll s9dfq0DdQcYd1zSNOBtIGnDVttPPucYpUBlbbySFnkVaIzgl0ua5ysybeAaOvCQ8 GWujzIq6CbO1IB3qSAji0odgDnkzbHX3NAdOZeGKLxIolGDCgZ/2TcUYmd3vvdN3 TBjRONBB8bYzKeEmOQZq3fZns3ZHY3Ev2NZzw3bzP5I/yuuhTxSGxTB9KQ3LhTvb O5Wy/4OT+nstj80cj9jByMD7YnDKrRSX4k+VVpaGxZmWVSdan2IHhRycJ7tYbxFU wn1onYhAGBBtgjjPBkW9LaR+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMaYaTP hLec2Lz68NoNFNibkIc/MB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFFJl0oP6v1nsqcwe6INPqvCdKb3s/TFiaMRqhueJbghHleEGHRA3Q tcNktbLE0UotGphjkdI87TtdsorVI5P2L3rXnDBIyUB4Y1m0PvtS+iQ1sbgDQj4V OQy4hn0jJyYy0KD6G+RhjC7PZkHmkwfRnWFGKez/ZJaE0Y6LLgHZuTW444SikHcD W6aq93+0cIkQbDVT3uYZlm/WAJyFbnTGY+CRdPo9deQblFiKKusgYVPwq9hPCxXO wAVk/FTwpE9KNH6UUrsgkwBUHed+4LND7HDLfGgCSaizUlTgg84GDmKriC5V1Hxs TVVCuVS/4QFiWjIQic/dOnStN/BEGfXu -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org