$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: mixz/v1Hbe/ZMiOzCv8eHdXkCWh/thIH/u4eVl4Dw1M= Subject key identifier: 49:9F:92:6F:1B:09:B8:70:43:0F:82:E4:85:57:69:30:51:66:9C:50 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0AFF Signing time: Sat 18 May 2024 19:56:39 +0000 Manifest this update: Sat 18 May 2024 19:56:38 +0000 Manifest next update: Sat 25 May 2024 19:56:38 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: Fwa1PoPSNmE/GP5cExZPQpl2cqRaAnFtRnZWEc/7IXs=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: 0WIkVZHvHbfmhmhB6oHd8+/9+OomrnZmxz2SYuZCV+g=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: ggnPzvv3qd1Nj2UZ19i5QZeSlHSatF+uNOmRUyudW3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: May 18 19:56:38 2024 GMT Not After : May 25 19:56:38 2024 GMT Subject: CN=664907f7-9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:24:70:c0:9c:69:1d:d5:12:ec:23:12:f8: 48:13:d9:84:fb:d3:55:31:cf:b8:11:59:9c:a8:73: 0a:2a:9e:ea:c7:57:57:57:51:69:3d:20:22:af:a8: 5f:95:14:2f:86:46:d1:7e:9e:ef:c1:69:66:1a:8d: a0:64:ea:85:db:85:6d:80:76:18:ab:3d:61:9c:2c: ea:97:33:c4:59:db:0b:b6:aa:3c:c9:fa:2f:9a:5b: f3:02:b3:42:6a:33:5b:27:61:e4:ec:ef:a1:f4:b2: f7:b9:05:b7:5f:0b:3e:8f:22:81:f9:e7:22:74:27: 52:db:a0:b5:0e:62:3d:74:38:c3:c2:53:ac:d9:d4: 2d:8a:d2:9f:32:4c:a9:58:05:dc:eb:95:3f:b9:68: 16:81:7f:45:c5:36:bc:28:96:94:8d:ba:23:77:fa: be:f0:d6:a3:79:1d:6b:fe:93:8d:4f:68:20:60:00: dc:27:4a:f1:28:65:85:d2:91:c2:8e:11:e2:63:ba: 08:32:30:0e:5c:99:b0:ea:ae:b9:38:06:93:c2:d1: 42:91:12:43:fc:29:12:12:0a:bb:dc:67:08:c7:e6: 11:e9:9b:ff:2d:c5:f7:55:56:75:fd:60:d2:68:e5: b6:87:9b:10:c5:14:d1:fa:2e:40:96:15:e8:71:f2: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9F:92:6F:1B:09:B8:70:43:0F:82:E4:85:57:69:30:51:66:9C:50 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7d:45:5c:f2:40:7f:89:8f:e3:6d:b3:9b:35:f6:ce:97:fb: a7:31:a4:16:66:e1:a2:c5:79:62:52:81:de:8a:8e:ce:2c:38: ee:f5:eb:17:5e:78:7a:e9:c3:d4:49:26:d0:bd:e8:8c:3e:6b: 45:1e:f5:91:87:f0:a8:43:69:86:e1:a9:1a:0d:68:b5:09:bb: b5:11:c3:5e:c8:26:00:0f:aa:64:63:7c:27:96:25:51:fc:4e: f7:80:55:3c:c4:02:87:4d:33:c4:ed:03:61:b9:db:f9:46:47: 4a:a8:4c:0f:00:02:c8:24:9c:94:b5:78:f6:a4:28:91:b7:97: bc:24:d2:1e:33:5b:78:2c:00:cd:c7:f1:da:44:a6:9c:16:cf: a2:e9:20:d7:8b:f8:91:e5:7d:2a:db:ec:ac:8e:e9:db:93:3a: 12:de:52:c9:bf:ae:ff:d1:ca:a6:39:c1:69:93:6d:53:22:3a: 20:cd:05:56:20:a8:a1:48:ab:ce:3c:32:0f:cf:82:07:d1:8b: 38:f9:2e:62:79:5a:4f:4b:0f:e4:05:54:c3:df:d8:78:b8:8d: 17:10:22:65:cd:99:48:d2:06:3f:b3:7c:e3:48:ea:13:bf:fb: d5:6f:86:3f:c5:dc:d4:ca:5c:f0:f2:e9:25:f4:39:c3:e9:4a: b0:27:a7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjQwNTE4MTk1NjM4WhcNMjQwNTI1MTk1NjM4WjAYMRYwFAYD VQQDEw02NjQ5MDdmNy05YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujckcMCcaR3VEuwjEvhIE9mE+9NVMc+4EVmcqHMKKp7qx1dXV1FpPSAir6hf lRQvhkbRfp7vwWlmGo2gZOqF24VtgHYYqz1hnCzqlzPEWdsLtqo8yfovmlvzArNC ajNbJ2Hk7O+h9LL3uQW3Xws+jyKB+ecidCdS26C1DmI9dDjDwlOs2dQtitKfMkyp WAXc65U/uWgWgX9FxTa8KJaUjbojd/q+8NajeR1r/pONT2ggYADcJ0rxKGWF0pHC jhHiY7oIMjAOXJmw6q65OAaTwtFCkRJD/CkSEgq73GcIx+YR6Zv/LcX3VVZ1/WDS aOW2h5sQxRTR+i5AlhXocfL9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmfkm8b CbhwQw+C5IVXaTBRZpxQMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fUVc8kB/iY/jbbObNfbOl/unMaQWZuGixXliUoHeio7OLDju9esX Xnh66cPUSSbQveiMPmtFHvWRh/CoQ2mG4akaDWi1Cbu1EcNeyCYAD6pkY3wnliVR /E73gFU8xAKHTTPE7QNhudv5RkdKqEwPAALIJJyUtXj2pCiRt5e8JNIeM1t4LADN x/HaRKacFs+i6SDXi/iR5X0q2+ysjunbkzoS3lLJv67/0cqmOcFpk21TIjogzQVW IKihSKvOPDIPz4IH0Ys4+S5ieVpPSw/kBVTD39h4uI0XECJlzZlI0gY/s3zjSOoT v/vVb4Y/xdzUylzw8ukl9DnD6UqwJ6e0 -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org