$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: on5cFjaB6J/LRC4US5leS4+XedqfbBOhrzDE/JTkQ60= Subject key identifier: 78:20:D5:7B:76:D6:F3:F3:8C:A9:F0:D7:4D:91:E1:4A:3D:5A:CD:52 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 05FD Signing time: Sat 18 May 2024 23:59:33 +0000 Manifest this update: Sat 18 May 2024 23:59:33 +0000 Manifest next update: Sat 25 May 2024 23:59:33 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: Jt8rQFCdDb4gOA47vht2nJhAo8CXL0352bgFGYwlR1Y=) 2: 38AA54903B1311ED8383933FC4F9AE02.roa (hash: 4O1C9pNEJNniPeZ+H7XJNe0P8LxiTCMr9Khl4XthK/w=) 3: A012E0B617C811ED95FB874FC4F9AE02.roa (hash: F3eGce0lTbww1uwyDWzWlNRW0CEK/RivZec6OVafsys=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: nXxKl6zFfdEe4k+gVcqQx7nn/aVlIAOi20Fz1uOFqNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: May 18 23:59:33 2024 GMT Not After : May 25 23:59:33 2024 GMT Subject: CN=664940e5-1006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:d3:c5:42:c1:f7:68:b5:03:f0:b1:2a:e0: a7:c5:b6:51:61:aa:96:be:36:96:77:43:ee:5c:0a: 70:0a:ef:2e:e8:d5:8f:0e:ef:94:69:62:9c:08:81: 89:65:9f:77:27:ff:eb:b0:aa:57:8d:f4:2a:5e:c3: 5d:60:6c:88:47:9b:b7:d5:35:48:56:70:be:a2:84: df:d5:b9:24:ad:73:95:9f:df:93:3a:e3:49:43:78: 6f:f1:63:48:f2:2a:0d:ac:23:ab:76:e5:82:58:7a: 9e:87:5a:a9:32:6a:c9:98:2a:55:ef:3b:9b:92:b1: c1:a9:ab:13:84:a1:8b:5b:15:24:e9:91:5c:60:52: 98:d7:be:41:d8:f0:b8:86:0f:ea:42:fb:0f:f5:2e: 76:62:53:e5:69:2f:12:96:43:74:8b:0e:63:e4:56: 17:36:22:26:af:99:8d:bf:fc:1d:1c:0d:15:eb:a1: 42:ec:fe:c6:f2:70:06:ab:c6:68:e7:6b:a4:e1:a5: 01:fa:0f:b6:22:af:d2:49:16:5a:42:7d:ee:7e:bc: c6:f0:39:84:45:14:73:3d:22:5f:59:39:8a:44:ca: ef:ab:97:47:7b:ac:da:da:9f:2a:90:df:06:7f:d7: 9f:6a:c4:da:ec:fd:07:f7:46:25:31:82:25:9e:1f: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:D5:7B:76:D6:F3:F3:8C:A9:F0:D7:4D:91:E1:4A:3D:5A:CD:52 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:01:3f:a7:82:e3:d3:ab:39:d9:b2:5a:52:77:27:55:e9:6b: 3e:64:e2:5f:b3:e6:a4:bb:d2:61:29:5e:b9:68:92:67:66:65: e4:ff:73:02:1d:a5:a6:ca:78:14:ec:bd:c3:8e:d2:ec:a7:66: 39:b4:8b:25:4b:e1:44:4f:55:f2:c5:8f:c9:5a:1f:37:ff:3c: 12:a8:8f:bf:32:df:f0:81:fe:d8:c0:f3:51:0e:9d:01:52:0e: e4:49:09:c7:60:ea:43:ee:6e:fc:3a:a4:83:c3:38:7f:aa:a2: 54:19:53:5d:3e:18:41:e1:25:a7:1d:ef:2a:3f:37:bc:d0:14: 33:60:08:12:e5:db:5b:37:35:5c:7c:d4:b7:9b:c7:7e:1b:01: c4:2c:a4:bb:ca:99:5e:0b:70:b1:50:16:d2:d4:a3:64:0e:a9: e8:93:c0:d3:a6:7c:43:fc:95:4f:ab:4e:f6:2d:41:a4:23:68: 63:ad:a0:14:b2:74:d0:34:98:73:60:bf:cb:7f:c2:ac:ea:d6: 0c:73:49:a6:e5:a4:90:8f:64:84:97:8d:48:c8:42:a9:5a:5e: 44:40:19:72:06:ae:66:60:b3:5f:c8:2f:23:cf:e7:22:05:7b: a4:7e:32:67:15:5a:c4:08:4e:58:f4:d0:45:b8:9b:e5:4d:37: 6a:de:3a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjQwNTE4MjM1OTMzWhcNMjQwNTI1MjM1OTMzWjAYMRYwFAYD VQQDEw02NjQ5NDBlNS0xMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcvTxULB92i1A/CxKuCnxbZRYaqWvjaWd0PuXApwCu8u6NWPDu+UaWKcCIGJ ZZ93J//rsKpXjfQqXsNdYGyIR5u31TVIVnC+ooTf1bkkrXOVn9+TOuNJQ3hv8WNI 8ioNrCOrduWCWHqeh1qpMmrJmCpV7zubkrHBqasThKGLWxUk6ZFcYFKY175B2PC4 hg/qQvsP9S52YlPlaS8SlkN0iw5j5FYXNiImr5mNv/wdHA0V66FC7P7G8nAGq8Zo 52uk4aUB+g+2Iq/SSRZaQn3ufrzG8DmERRRzPSJfWTmKRMrvq5dHe6za2p8qkN8G f9efasTa7P0H90YlMYIlnh++MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgg1Xt2 1vPzjKnw102R4Uo9Ws1SMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTAT+nguPTqznZslpSdydV6Ws+ZOJfs+aku9JhKV65aJJnZmXk/3MC HaWmyngU7L3DjtLsp2Y5tIslS+FET1XyxY/JWh83/zwSqI+/Mt/wgf7YwPNRDp0B Ug7kSQnHYOpD7m78OqSDwzh/qqJUGVNdPhhB4SWnHe8qPze80BQzYAgS5dtbNzVc fNS3m8d+GwHELKS7ypleC3CxUBbS1KNkDqnok8DTpnxD/JVPq072LUGkI2hjraAU snTQNJhzYL/Lf8Ks6tYMc0mm5aSQj2SEl41IyEKpWl5EQBlyBq5mYLNfyC8jz+ci BXukfjJnFVrECE5Y9NBFuJvlTTdq3jpE -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org