$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: CX3eHh7GAh9l7uc9ajaMAEqPKElsTCuCJ/vRv5sit3g= Subject key identifier: 87:DA:C2:55:42:4B:A9:03:6A:D5:4B:EF:B3:57:21:D5:02:42:F8:92 Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 33DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 33D1 Signing time: Sat 18 May 2024 15:04:56 +0000 Manifest this update: Sat 18 May 2024 15:04:55 +0000 Manifest next update: Sat 25 May 2024 15:04:55 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: JEFm5ZrnDLKCpI21SuxlDl4VMGKXM+nuRDS+oN8Vj3g=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: T75Xn5q38IyRZJxAou7/JQR0ilXBMCjkhF2gJFQ0K3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13274 (0x33da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: May 18 15:04:55 2024 GMT Not After : May 25 15:04:55 2024 GMT Subject: CN=6648c398-7bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:48:14:48:8b:2e:d5:81:99:b3:6c:c1:77: 44:bb:1f:20:ef:f4:81:db:d9:98:52:a8:f3:4a:b1: 87:a7:85:05:8b:6c:01:30:a8:0f:f2:e5:47:13:e2: 70:0b:78:c9:c7:28:53:6d:68:4d:a0:0a:69:48:8c: 5f:b9:cd:91:e7:a8:23:1d:d1:ef:b9:3e:40:58:b9: 1d:8d:98:e3:97:4e:ee:f1:16:66:88:5b:43:02:02: e0:18:9a:3e:c2:f0:05:17:72:0d:fb:03:91:6b:65: 80:53:ce:f2:08:b4:d1:f0:69:69:ed:5d:05:1a:d3: 77:61:8e:18:72:4d:b1:e5:1c:7a:1b:d1:2e:53:a7: 9d:2a:27:d3:b2:30:d3:79:7f:3d:f0:1a:ba:6f:f8: 4e:af:e7:ec:62:4e:01:fd:a4:0d:41:51:00:ac:34: de:36:d4:1e:a9:79:68:f0:1a:8d:e1:d5:d7:47:67: e0:ac:d3:0b:9e:9c:1e:0e:a4:fc:17:2c:a7:19:e9: bf:46:24:ae:60:e1:59:cd:1d:b9:ae:fc:5e:f5:46: fb:18:ba:7a:2a:13:28:a8:23:89:ac:74:95:98:ae: fa:b8:0e:87:ad:fa:e5:77:42:4c:48:be:c6:9a:c3: ee:e6:84:28:86:dc:b7:ed:fe:b1:0a:2d:17:15:6e: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:C2:55:42:4B:A9:03:6A:D5:4B:EF:B3:57:21:D5:02:42:F8:92 X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:9f:3c:5b:4d:87:eb:bd:df:a9:d3:42:e8:d7:a4:ff:b6: 12:f7:5c:24:48:b9:0a:eb:1d:fc:ae:3c:22:cb:9b:4a:9e:df: 87:42:81:fa:2a:10:b0:60:7d:99:3c:ec:dc:b9:54:fa:1f:10: d7:2e:bc:10:aa:0d:ba:a6:82:f2:34:80:dd:89:c3:55:86:bc: 11:cf:cf:e8:d3:36:d7:07:5c:a9:07:7b:59:71:cd:a0:d6:50: 0b:f3:0f:6d:c8:62:5a:30:d4:cd:03:a2:f6:39:1f:8f:3c:95: 59:33:ce:7c:d3:e2:38:c8:81:bd:ec:c7:a6:0f:5d:cd:6a:93: 9b:1c:81:f7:28:58:4f:50:56:be:24:b7:df:8d:b5:7b:39:10: be:5c:95:fb:1d:ff:af:46:e5:ef:09:8c:b7:bd:e6:7e:61:30: b6:12:36:96:6e:00:4e:7a:9d:57:b9:12:8d:79:ad:e0:e2:7e: 81:d1:07:af:8b:a5:06:08:f1:61:73:9f:52:79:f6:da:9e:e7: 36:23:f9:b4:51:24:76:06:fc:72:ac:2b:44:1e:85:1f:f3:38: 60:68:48:6a:52:f8:d9:db:1b:5b:ee:5c:f5:e5:42:a6:34:6f: 4d:c1:fc:f1:f5:46:20:4c:46:12:f8:49:cf:a8:6d:4e:4b:14: 64:f7:17:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjQwNTE4MTUwNDU1WhcNMjQwNTI1MTUwNDU1WjAYMRYwFAYD VQQDEw02NjQ4YzM5OC03YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JlIFEiLLtWBmbNswXdEux8g7/SB29mYUqjzSrGHp4UFi2wBMKgP8uVHE+Jw C3jJxyhTbWhNoAppSIxfuc2R56gjHdHvuT5AWLkdjZjjl07u8RZmiFtDAgLgGJo+ wvAFF3IN+wORa2WAU87yCLTR8Glp7V0FGtN3YY4Yck2x5Rx6G9EuU6edKifTsjDT eX898Bq6b/hOr+fsYk4B/aQNQVEArDTeNtQeqXlo8BqN4dXXR2fgrNMLnpweDqT8 FyynGem/RiSuYOFZzR25rvxe9Ub7GLp6KhMoqCOJrHSVmK76uA6Hrfrld0JMSL7G msPu5oQohty37f6xCi0XFW7JjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfawlVC S6kDatVL77NXIdUCQviSMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAevp88W02H673fqdNC6Nek/7YS91wkSLkK6x38rjwiy5tKnt+HQoH6 KhCwYH2ZPOzcuVT6HxDXLrwQqg26poLyNIDdicNVhrwRz8/o0zbXB1ypB3tZcc2g 1lAL8w9tyGJaMNTNA6L2OR+PPJVZM8580+I4yIG97MemD13NapObHIH3KFhPUFa+ JLffjbV7ORC+XJX7Hf+vRuXvCYy3veZ+YTC2EjaWbgBOep1XuRKNea3g4n6B0Qev i6UGCPFhc59Sefbanuc2I/m0USR2BvxyrCtEHoUf8zhgaEhqUvjZ2xtb7lz15UKm NG9Nwfzx9UYgTEYS+EnPqG1OSxRk9xcC -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org