$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json) Hash identifier: FXZ71OplfkMwRo7kyd2k7kfDO4/pDZcRw83WQ0N46dY= Subject key identifier: 6F:C1:EC:75:FE:23:29:80:E9:AB:26:8F:6D:1E:AA:AE:55:8D:C8:06 Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft Manifest number: 060E Signing time: Sat 18 May 2024 23:52:06 +0000 Manifest this update: Sat 18 May 2024 23:52:06 +0000 Manifest next update: Sat 25 May 2024 23:52:06 +0000 Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: KibTKJI+4Dr7zgeJrtQ7Bzj2itu8KzupPZI5IcgJKQE=) 2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: D45gCx25p55ZdSrenESWExC8wZeu5xeOajPz7tvTQDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Validity Not Before: May 18 23:52:06 2024 GMT Not After : May 25 23:52:06 2024 GMT Subject: CN=66493f26-b1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:4f:34:f6:ab:ea:31:b2:b9:81:02:e2:d3: ab:84:ec:d4:ee:67:73:52:56:55:6a:e5:e2:f4:d1: fc:a5:50:6c:a1:3c:32:a3:10:a4:85:17:c4:2e:c4: bd:13:d6:7a:2c:af:e9:ac:bb:5f:96:db:32:6c:d0: fe:99:e4:f8:89:1e:be:15:bb:38:bc:24:bd:88:e4: f2:32:55:85:46:88:8b:9f:75:f7:4e:e0:b8:bf:37: 34:c7:08:9c:7e:35:ea:85:4a:70:cd:72:28:43:39: 9c:e4:ca:93:7d:bc:cd:95:73:58:76:55:61:39:b2: 50:45:77:91:ef:bb:84:5f:79:12:f3:d3:e1:6f:9b: 2d:f2:d3:93:ef:0a:f5:d6:d8:5f:cc:61:7a:a9:bd: 5a:76:ce:7d:3f:a5:9e:0b:4c:e9:f4:64:29:75:1f: 4f:8e:5e:09:2f:0f:16:aa:ab:e8:93:fb:76:6f:2f: ff:c3:6b:2f:5f:2a:d7:e1:7f:af:a3:28:2c:1b:5a: bc:e1:ab:7c:bc:ac:3a:21:a6:22:b3:34:5d:b9:fa: 9b:66:f9:cc:68:1c:bb:65:66:65:3c:a5:ce:ea:34: 8e:5b:e6:49:ca:d1:be:75:30:02:05:92:0a:44:c4: 48:3e:5a:5b:7c:67:2a:95:8f:08:39:79:0b:57:e6: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C1:EC:75:FE:23:29:80:E9:AB:26:8F:6D:1E:AA:AE:55:8D:C8:06 X509v3 Authority Key Identifier: keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:38:4e:e6:f2:96:3c:84:62:9f:40:7b:32:4e:5c:67:8c:8b: 1a:ae:ac:3e:76:3e:b8:ec:42:f7:d9:b4:80:ec:4d:05:5e:d6: e3:b4:52:de:4e:7f:fe:6e:06:94:39:0a:2f:d0:94:30:f4:03: a3:c9:45:fe:e0:69:64:21:d5:e1:38:6c:5a:bb:3b:4c:65:bf: 04:b5:47:96:b8:d7:0f:2b:2a:a9:2f:f8:79:2d:0b:b8:c8:0b: 7a:e9:be:7a:fd:9b:ce:59:11:8f:b9:a0:cd:f9:a5:1a:e5:f2: 72:0f:13:65:47:ae:18:8f:7b:a6:51:b4:1d:6d:fd:13:5a:08: 7e:9d:ed:5d:78:0b:b1:83:ff:1a:d3:29:7f:0c:5f:03:92:88: db:d0:61:61:45:9c:be:bd:4e:c0:ad:0f:b0:69:89:ee:6f:30: 67:f2:1d:12:ef:63:e7:c1:b8:dd:97:ec:41:46:1c:85:27:a6: 9d:e5:f1:75:d4:98:ca:c5:bd:09:c1:b9:7d:e9:a7:31:07:08: 29:20:4d:c4:ef:8e:20:aa:9c:87:ef:b4:f2:2f:21:82:61:4c: b0:01:11:6b:da:49:85:5c:a9:16:0e:54:a5:9f:e5:85:95:da: 0e:13:09:10:a0:99:b7:2a:57:c0:2b:41:ea:72:b1:2e:3f:f3: 35:6b:da:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5 Q0YzODhENUQwHhcNMjQwNTE4MjM1MjA2WhcNMjQwNTI1MjM1MjA2WjAYMRYwFAYD VQQDEw02NjQ5M2YyNi1iMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa1PNPar6jGyuYEC4tOrhOzU7mdzUlZVauXi9NH8pVBsoTwyoxCkhRfELsS9 E9Z6LK/prLtfltsybND+meT4iR6+Fbs4vCS9iOTyMlWFRoiLn3X3TuC4vzc0xwic fjXqhUpwzXIoQzmc5MqTfbzNlXNYdlVhObJQRXeR77uEX3kS89Phb5st8tOT7wr1 1thfzGF6qb1ads59P6WeC0zp9GQpdR9Pjl4JLw8Wqqvok/t2by//w2svXyrX4X+v oygsG1q84at8vKw6IaYiszRdufqbZvnMaBy7ZWZlPKXO6jSOW+ZJytG+dTACBZIK RMRIPlpbfGcqlY8IOXkLV+axLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/B7HX+ IymA6asmj20eqq5VjcgGMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2 NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3 bnpxUWJyQjlXUnljODRqVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMOE7m8pY8hGKfQHsyTlxnjIsarqw+dj647EL32bSA7E0FXtbjtFLe Tn/+bgaUOQov0JQw9AOjyUX+4GlkIdXhOGxauztMZb8EtUeWuNcPKyqpL/h5LQu4 yAt66b56/ZvOWRGPuaDN+aUa5fJyDxNlR64Yj3umUbQdbf0TWgh+ne1deAuxg/8a 0yl/DF8Dkojb0GFhRZy+vU7ArQ+waYnubzBn8h0S72Pnwbjdl+xBRhyFJ6ad5fF1 1JjKxb0Jwbl96acxBwgpIE3E744gqpyH77TyLyGCYUywARFr2kmFXKkWDlSln+WF ldoOEwkQoJm3KlfAK0HqcrEuP/M1a9rz -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org