$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json) Hash identifier: Rn96lMkax4PFZtH92zIe3P18oy02PO+6XWRjHGfmD+I= Subject key identifier: 94:43:9B:36:FA:B8:D8:E6:3E:F8:FC:38:26:C0:8F:B1:92:E7:86:39 Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft Manifest number: 081F Signing time: Thu 30 May 2024 22:17:32 +0000 Manifest this update: Thu 30 May 2024 22:17:32 +0000 Manifest next update: Thu 06 Jun 2024 22:17:32 +0000 Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: W/To7T6WTQ3Bw+Ri4VpIuv0McWDH14KObluJzrXWq1w=) 2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: 0bgef1HoOJUlJF+Pq5efX6bYiWvNFCdJrO6WEDGbgUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Validity Not Before: May 30 22:17:32 2024 GMT Not After : Jun 6 22:17:32 2024 GMT Subject: CN=6658fafc-cf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:aa:aa:db:31:b1:c0:b5:aa:44:ae:0a:45: 32:f2:80:45:fd:fc:e0:ab:9b:dc:0c:eb:83:f2:a9: d8:d5:54:2b:f4:b8:1b:db:3d:f2:ec:b6:c0:83:ad: 34:9d:7d:70:fa:1f:4e:35:d6:e0:c4:67:3b:0e:1c: 61:70:a8:ce:e4:5d:56:2e:4d:ad:95:28:a0:98:72: 6e:9b:ee:3a:1f:c8:43:99:d8:66:ad:2b:89:6c:a9: ab:f5:df:95:ff:03:85:48:6e:f5:7d:fa:7b:1c:15: 2f:2a:f8:14:62:16:03:84:26:68:78:3e:d7:50:25: 41:41:24:ee:5a:d4:3f:f1:5a:24:53:f9:31:09:a1: 7a:5b:ad:59:34:1c:03:d3:ad:43:46:85:ad:bd:5e: c2:70:23:76:2c:17:d4:2b:a8:36:78:e0:41:13:47: 28:19:e8:45:1a:5e:c1:a4:11:55:5c:75:df:d0:b4: d1:a7:a8:4c:c7:05:51:d9:ce:9d:a5:90:ac:f2:88: c4:a2:c6:21:71:9e:3e:10:ad:8c:cc:13:b7:6f:27: 3f:c0:7d:9d:27:e6:ad:6f:d7:bb:dd:31:32:b2:1e: 16:69:a0:e8:ad:5c:30:09:84:1b:f7:13:09:82:87: dd:f9:f9:a2:5a:3a:05:51:c5:07:04:79:14:67:18: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:9B:36:FA:B8:D8:E6:3E:F8:FC:38:26:C0:8F:B1:92:E7:86:39 X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f1:46:6e:16:8b:08:65:2b:d4:0b:6e:dd:09:00:e1:36:07: e6:7e:a0:eb:5c:1b:bb:3a:c0:7b:b3:af:fd:a7:ec:34:58:11: d5:a0:66:a4:52:4d:28:55:4e:3a:9e:5f:31:ce:68:0e:fc:d0: c8:00:40:e8:04:6e:44:b5:0c:a4:44:92:6d:92:21:79:16:96: f2:42:65:76:c7:d7:7a:70:86:ff:73:ad:99:11:5e:45:9e:e5: 63:aa:78:fe:f8:f8:1c:4f:b6:44:0f:13:16:51:21:e8:0a:d1: 27:05:17:d1:ff:40:dd:91:f7:4d:2c:f7:e1:d6:f3:65:ff:d2: b0:9f:f1:4d:11:9e:8c:97:00:9c:48:28:2c:d0:74:46:5a:11: 32:19:8f:8a:eb:a7:b7:51:80:ef:ea:0e:4c:c8:d7:75:6c:ec: 5a:a9:d4:9f:df:33:56:3b:16:05:f2:de:20:dd:4b:ea:f1:5f: 55:6d:4d:05:49:04:2a:09:e8:b5:86:51:7d:3c:d8:05:38:73: 71:61:56:c1:6e:60:e5:f8:b0:00:33:45:18:7a:d8:dd:f2:2d: ef:12:ef:a0:c6:e1:42:e2:0e:73:9a:7b:3e:d0:40:e1:87:3a: 4d:75:7f:80:86:5e:1f:92:e0:1f:f5:24:35:d2:dd:05:d8:48: 70:ad:8e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjQwNTMwMjIxNzMyWhcNMjQwNjA2MjIxNzMyWjAYMRYwFAYD VQQDEw02NjU4ZmFmYy1jZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveyqqtsxscC1qkSuCkUy8oBF/fzgq5vcDOuD8qnY1VQr9Lgb2z3y7LbAg600 nX1w+h9ONdbgxGc7DhxhcKjO5F1WLk2tlSigmHJum+46H8hDmdhmrSuJbKmr9d+V /wOFSG71ffp7HBUvKvgUYhYDhCZoeD7XUCVBQSTuWtQ/8VokU/kxCaF6W61ZNBwD 061DRoWtvV7CcCN2LBfUK6g2eOBBE0coGehFGl7BpBFVXHXf0LTRp6hMxwVR2c6d pZCs8ojEosYhcZ4+EK2MzBO3byc/wH2dJ+atb9e73TEysh4WaaDorVwwCYQb9xMJ gofd+fmiWjoFUcUHBHkUZxjk7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRDmzb6 uNjmPvj8OCbAj7GS54Y5MB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB68UZuFosIZSvUC27dCQDhNgfmfqDrXBu7OsB7s6/9p+w0WBHVoGak Uk0oVU46nl8xzmgO/NDIAEDoBG5EtQykRJJtkiF5FpbyQmV2x9d6cIb/c62ZEV5F nuVjqnj++PgcT7ZEDxMWUSHoCtEnBRfR/0DdkfdNLPfh1vNl/9Kwn/FNEZ6MlwCc SCgs0HRGWhEyGY+K66e3UYDv6g5MyNd1bOxaqdSf3zNWOxYF8t4g3Uvq8V9VbU0F SQQqCei1hlF9PNgFOHNxYVbBbmDl+LAAM0UYetjd8i3vEu+gxuFC4g5zmns+0EDh hzpNdX+Ahl4fkuAf9SQ10t0F2EhwrY4t -----END CERTIFICATE-----Generated at Thu May 30 23:02:16 2024 by rpki-client on console-fra.rpki-client.org