$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: C51Zjbv8TdUhn6mlvPFHtcoT7hMuZR6EFnNSmcqYY7g= Subject key identifier: FE:EC:B2:0F:73:10:3E:7D:F0:AC:A1:9E:57:78:B7:4A:B7:F0:21:51 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 036A Signing time: Sun 19 May 2024 02:50:57 +0000 Manifest this update: Sun 19 May 2024 02:50:56 +0000 Manifest next update: Sun 26 May 2024 02:50:56 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: 5KAF4SBhOKlikbs+XbX/mDdg9v9sddaSmfLxFN+z4Q8=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: gmAKTnkoBJEmeqKGoCzX2HBg7rYRJBOwpBq/YNgBUCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: May 19 02:50:56 2024 GMT Not After : May 26 02:50:56 2024 GMT Subject: CN=66496910-cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:32:6d:c6:5d:20:2a:b2:b1:2c:4b:43:32: 28:6d:b0:ee:51:cb:ff:5b:1c:de:8e:1b:fe:74:89: 17:31:27:72:63:19:12:09:92:fe:4a:fc:b4:26:ca: 92:5e:73:87:7c:50:b0:b6:9c:0e:b7:21:81:22:58: d6:cf:53:03:4e:e4:a3:d5:c9:e8:f8:0e:b5:58:30: 3d:df:fb:bf:08:0a:3e:6f:59:eb:6f:c9:ca:1a:f2: fe:10:9c:cb:40:6f:98:ea:2b:3a:b1:46:bf:2c:10: 67:6e:a3:28:9f:e6:24:d9:f7:18:c9:0e:20:5c:ac: 76:4a:c0:83:75:c5:c9:9c:0f:6c:fe:c7:c3:02:ef: 32:6e:62:33:f6:62:a6:99:ba:78:51:19:c0:2f:93: 19:ff:0c:d0:49:a2:77:ed:11:12:b4:0f:36:fb:a8: 05:f6:8e:60:1d:ed:26:08:e4:26:af:b1:41:68:99: 56:6e:50:3d:d1:9e:21:27:51:da:06:47:c8:40:ab: 00:a9:de:0f:f8:4e:3b:19:01:ee:c0:47:a9:07:8e: 1a:f9:fe:64:97:f6:cf:b6:3d:92:d6:d4:9f:60:a7: 98:6a:70:1d:49:f5:57:45:32:f5:68:3f:0e:c0:cf: 37:31:21:cf:cf:b3:57:a6:60:d9:33:20:c5:6d:fc: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EC:B2:0F:73:10:3E:7D:F0:AC:A1:9E:57:78:B7:4A:B7:F0:21:51 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ba:ac:3b:a5:03:57:e0:f6:f3:d0:f8:bd:16:13:33:ce:b5: 30:b1:a9:b4:98:d6:a2:a3:cd:06:6f:4e:fb:56:f0:a7:b3:ba: da:af:a4:49:35:fa:c5:5f:94:72:8b:2f:13:ff:92:86:57:10: 3b:22:6c:ad:ae:80:d1:16:0e:14:c7:11:e0:78:84:3d:26:c2: 15:8e:3b:ca:2c:eb:d3:a7:81:f4:81:8c:ec:6a:75:ab:3f:2a: 83:ae:85:7e:bb:ce:93:99:c0:95:42:70:65:e5:81:ec:30:95: 76:1f:32:ed:a5:1b:35:e3:9c:96:1c:a9:ac:61:53:25:7e:2b: e5:47:87:da:b3:97:bc:09:5b:f7:ad:25:38:25:cf:92:52:28: c6:9f:94:3f:05:af:57:f7:85:1c:d3:52:4a:9e:51:48:f4:52: 9e:9d:93:05:01:1e:8f:b5:ca:2d:e6:4f:78:70:18:7e:71:b1: 11:1c:ee:cb:36:ef:cb:d7:74:16:32:69:d7:51:8b:71:1a:62: 08:0d:6d:fa:bb:e1:53:41:8b:29:68:76:a3:d2:75:c7:fd:31: 4e:4c:98:27:cc:96:47:3b:97:b6:e3:2b:73:8e:a2:8e:99:93: 61:e9:1a:e9:11:c6:dc:07:3f:20:39:7c:e2:91:88:50:28:f7: 75:02:9f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjQwNTE5MDI1MDU2WhcNMjQwNTI2MDI1MDU2WjAYMRYwFAYD VQQDEw02NjQ5NjkxMC1jYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo4ybcZdICqysSxLQzIobbDuUcv/Wxzejhv+dIkXMSdyYxkSCZL+Svy0JsqS XnOHfFCwtpwOtyGBIljWz1MDTuSj1cno+A61WDA93/u/CAo+b1nrb8nKGvL+EJzL QG+Y6is6sUa/LBBnbqMon+Yk2fcYyQ4gXKx2SsCDdcXJnA9s/sfDAu8ybmIz9mKm mbp4URnAL5MZ/wzQSaJ37REStA82+6gF9o5gHe0mCOQmr7FBaJlWblA90Z4hJ1Ha BkfIQKsAqd4P+E47GQHuwEepB44a+f5kl/bPtj2S1tSfYKeYanAdSfVXRTL1aD8O wM83MSHPz7NXpmDZMyDFbfxizwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7ssg9z ED598Kyhnld4t0q38CFRMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHuqw7pQNX4Pbz0Pi9FhMzzrUwsam0mNaio80Gb077VvCns7rar6RJ NfrFX5Ryiy8T/5KGVxA7ImytroDRFg4UxxHgeIQ9JsIVjjvKLOvTp4H0gYzsanWr PyqDroV+u86TmcCVQnBl5YHsMJV2HzLtpRs145yWHKmsYVMlfivlR4fas5e8CVv3 rSU4Jc+SUijGn5Q/Ba9X94Uc01JKnlFI9FKenZMFAR6Ptcot5k94cBh+cbERHO7L Nu/L13QWMmnXUYtxGmIIDW36u+FTQYspaHaj0nXH/TFOTJgnzJZHO5e24ytzjqKO mZNh6RrpEcbcBz8gOXzikYhQKPd1Ap+U -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org