$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json) Hash identifier: OScxL9knQDgKswse+IRfOpJXelY8dy7agjm4uf2xyLM= Subject key identifier: FB:07:65:E2:2C:C7:DF:94:99:A8:0C:0A:8C:BC:12:E8:47:95:3B:C6 Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Certificate serial: 1665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft Manifest number: 164F Signing time: Sat 04 May 2024 17:17:42 +0000 Manifest this update: Sat 04 May 2024 17:17:42 +0000 Manifest next update: Sat 11 May 2024 17:17:42 +0000 Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: MJG/SeisWgELmaQCPA9CnSwMB49vQXkO0DV/IQb21Ys=) 2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: c9V0OKjObllh0ln/sU0Zqo3I++qHALn97HqJbLrW7+c=) 3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: Ewt0Ar7KJkQxN5byhTXePm4DHDfxyfNxCXU+UNcbzV0=) 4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: l62B5tdMY8bfDp8pbGSQx39dSNquBGA6RfWOE9pPFfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5733 (0x1665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Validity Not Before: May 4 17:17:42 2024 GMT Not After : May 11 17:17:42 2024 GMT Subject: CN=66366db6-862d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:d1:b3:62:f6:48:5b:44:35:36:c1:11:88: 9a:55:77:da:be:e1:74:0b:61:9e:7e:99:90:16:49: e5:18:89:3f:b5:ab:20:1f:2a:3d:a3:0e:59:7d:2b: 0a:51:0c:39:50:92:6a:fb:90:16:d6:dd:d3:52:3a: 1b:ee:1b:5e:b7:6f:6b:50:96:54:4e:49:f3:7f:eb: eb:88:c9:14:d7:43:72:44:35:e4:f1:9f:f3:fe:f0: 6a:4e:88:76:56:02:7b:68:8a:4c:41:74:85:29:85: 8b:7e:63:b9:ef:05:32:6b:e5:aa:1a:ab:1e:99:68: f4:ef:1f:5d:36:7d:c8:4f:1d:9d:7c:f3:9d:43:c4: 63:bd:a8:b3:e7:81:09:3a:62:6e:4b:69:c1:7b:a6: e9:cc:5d:1a:8d:2d:3d:9e:ee:69:ea:08:45:4b:67: d2:59:61:c1:ce:85:f1:13:4c:0f:ac:8e:e1:b0:17: 92:15:ce:5f:35:88:53:ed:ae:ae:99:34:76:07:ed: 9c:38:8b:6d:e6:a9:ef:86:ea:54:80:4d:be:0b:b7: d7:f4:a9:80:5e:83:b0:92:be:33:a5:eb:53:59:26: 93:07:ee:91:57:a6:1f:a9:ea:91:ad:df:60:db:40: bc:bb:2d:59:44:ac:03:60:6e:3e:9b:ed:d9:d9:7e: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:07:65:E2:2C:C7:DF:94:99:A8:0C:0A:8C:BC:12:E8:47:95:3B:C6 X509v3 Authority Key Identifier: keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0d:63:d7:14:08:3d:c7:53:8d:47:1f:29:3b:1f:20:81:68: dd:d8:a2:e1:8c:4a:5f:ff:20:b0:58:b6:a4:2f:18:11:60:e2: c8:c7:76:96:aa:01:79:d2:64:12:6e:88:02:d1:95:43:07:4d: e0:70:fd:b0:29:c0:d2:f0:0e:ca:35:24:92:e2:3e:84:dd:43: a3:de:fe:88:5e:ff:63:ec:18:ec:f8:f7:96:ef:18:b4:66:f2: aa:1e:e7:3d:82:13:16:04:5a:15:a8:2c:ed:9a:5c:c2:d4:e6: ed:b9:62:5c:37:84:29:f8:9b:b7:d7:46:dc:a5:6d:ae:3b:45: e8:5e:b6:44:e8:d1:3a:d1:86:93:c5:31:a3:74:c4:0a:95:a3: 3c:a5:51:09:e2:46:45:52:fb:6e:fd:4a:af:d4:6a:5c:85:92: 64:81:8b:e5:de:5f:ab:a7:e1:51:25:86:5f:b2:18:55:d8:43: cb:34:b1:81:67:3a:af:30:0e:e8:c8:84:08:53:b5:69:7a:04: ae:74:f9:5d:82:9e:2f:f4:a8:8a:8e:01:d8:ea:43:dc:a8:a4: ed:c0:a9:06:ed:e8:d1:2c:a2:f7:a6:c4:e6:b5:1a:49:fe:c4: 60:a1:e2:54:cc:69:ab:ec:64:70:a8:25:97:c5:04:c8:76:9b: b4:f8:61:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3OTUxMTAvBgNVBAUTKDg3MEFFNTlBNEIzOERBRkM2QTMxQUJFMzI5Q0NGODc4 RkRGNzJBOEMwHhcNMjQwNTA0MTcxNzQyWhcNMjQwNTExMTcxNzQyWjAYMRYwFAYD VQQDEw02NjM2NmRiNi04NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qzRs2L2SFtENTbBEYiaVXfavuF0C2GefpmQFknlGIk/tasgHyo9ow5ZfSsK UQw5UJJq+5AW1t3TUjob7htet29rUJZUTknzf+vriMkU10NyRDXk8Z/z/vBqToh2 VgJ7aIpMQXSFKYWLfmO57wUya+WqGqsemWj07x9dNn3ITx2dfPOdQ8Rjvaiz54EJ OmJuS2nBe6bpzF0ajS09nu5p6ghFS2fSWWHBzoXxE0wPrI7hsBeSFc5fNYhT7a6u mTR2B+2cOItt5qnvhupUgE2+C7fX9KmAXoOwkr4zpetTWSaTB+6RV6YfqeqRrd9g 20C8uy1ZRKwDYG4+m+3Z2X5szQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsHZeIs x9+UmagMCoy8EuhHlTvGMB8GA1UdIwQYMBaAFIcK5ZpLONr8ajGr4ynM+Hj99yqM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDc5NS85OTI5NjlGQUU2 QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2eHFNYXZqS2N6NGVQMzNL b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3cmxta3M0MnZ4cU1hdmpLY3o0ZVAzM0tvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDc5NS85OTI5NjlGQUU2QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2 eHFNYXZqS2N6NGVQMzNLb3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCADWPXFAg9x1ONRx8pOx8ggWjd2KLhjEpf/yCwWLakLxgRYOLIx3aW qgF50mQSbogC0ZVDB03gcP2wKcDS8A7KNSSS4j6E3UOj3v6IXv9j7Bjs+PeW7xi0 ZvKqHuc9ghMWBFoVqCztmlzC1ObtuWJcN4Qp+Ju310bcpW2uO0XoXrZE6NE60YaT xTGjdMQKlaM8pVEJ4kZFUvtu/Uqv1GpchZJkgYvl3l+rp+FRJYZfshhV2EPLNLGB ZzqvMA7oyIQIU7VpegSudPldgp4v9KiKjgHY6kPcqKTtwKkG7ejRLKL3psTmtRpJ /sRgoeJUzGmr7GRwqCWXxQTIdpu0+GHX -----END CERTIFICATE-----Generated at Sat May 4 18:00:10 2024 by rpki-client on console-fra.rpki-client.org