$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: oNy+rSv2czUWJW00skwkEFw0EwrnNk1ZDPUzAEkysY0= Subject key identifier: 1B:38:8D:E2:93:EF:99:E0:4B:9F:7D:F5:18:95:57:EB:7F:2B:3D:0F Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 48 Signing time: Fri 17 May 2024 08:19:58 +0000 Manifest this update: Fri 17 May 2024 08:19:57 +0000 Manifest next update: Fri 24 May 2024 08:19:57 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: T9TfS+tSzV3hnDSPCrB2ZM/ZMx700Rkdz/S6o5LrfWg=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: puVUpX6BUEtmCkkNCTB3vhHnm2QcVSaiXOBe2bg8km8=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: AxmM4uXwWp1gj6vr9AE5UA2acdyFvQJrumr3Qxho0EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: May 17 08:19:57 2024 GMT Not After : May 24 08:19:57 2024 GMT Subject: CN=6647132d-23fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:d0:fb:4c:34:29:95:62:af:45:9b:4c:c2: 1b:c8:2d:16:fe:55:d1:5b:25:bf:8e:28:7d:65:60: e2:09:df:dc:2f:9f:9f:21:f7:01:c8:e9:c8:b1:5e: 18:fd:2c:2e:23:c8:c1:c1:9b:2d:55:5d:05:2f:b3: 34:a5:83:4f:6a:61:0f:20:c0:1a:07:ce:f3:e2:4f: 34:05:88:96:fb:a4:bb:7b:3c:7b:bb:49:43:d7:b5: 0e:db:bf:c5:53:5a:d7:9b:a3:b6:89:e4:4e:b2:d1: 88:1b:90:4a:98:d9:ea:e0:8b:7b:b7:dd:48:ea:96: e5:2f:38:ab:a0:2e:b3:11:90:24:e0:11:f3:02:ed: 05:7d:4b:e9:fc:4d:29:72:9f:26:96:3c:36:75:2d: 33:09:23:8e:a3:96:ac:70:cc:d0:0e:38:96:19:e8: c1:f3:fe:f4:6e:82:c2:27:89:59:b8:b9:29:49:d5: 6d:f4:34:ad:12:67:6a:51:2e:b9:01:5b:19:96:32: a4:e0:a5:0f:45:e4:f5:b6:14:e0:49:28:73:b8:88: 54:45:d3:7b:53:1f:1f:cc:3b:f5:9a:9d:e3:c9:09: 80:7b:3b:81:34:15:6c:eb:e2:21:7a:63:c7:f1:1e: ee:1b:11:1b:da:b3:64:a2:e0:cd:70:16:f8:53:21: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:38:8D:E2:93:EF:99:E0:4B:9F:7D:F5:18:95:57:EB:7F:2B:3D:0F X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e6:c1:f0:7f:e4:69:82:26:68:64:d9:1d:50:14:ed:ec:6f: 3c:13:17:29:f8:fc:a9:7c:e9:7e:24:11:76:02:38:ee:4d:83: 65:45:2c:04:30:36:24:e9:65:6a:8e:4b:7e:af:f4:9f:f7:19: c0:ff:66:a9:6d:9b:d3:b0:da:14:6c:e4:e6:04:5b:68:c3:dc: 0d:a1:62:85:66:52:de:ea:96:dc:04:13:f7:3d:2b:ea:b5:c8: 14:48:72:0e:1e:d1:62:ec:0a:64:f3:3a:d0:64:fa:13:55:bc: 1e:f2:f5:94:0d:92:2c:60:5a:f0:53:b5:c5:cb:ec:0a:87:86: eb:85:f3:1b:a5:4a:14:07:b0:78:85:87:19:f8:f4:33:35:5d: 15:24:9c:c1:03:be:62:7e:fa:b4:72:46:17:12:d2:85:17:43: 17:68:74:6f:27:47:ef:6e:87:60:ed:89:14:9f:00:9b:02:59: 49:db:6e:84:5c:05:bf:01:d7:e9:da:50:8e:d8:40:3a:32:2e: 47:ca:aa:9f:71:3a:b1:e0:da:cb:e9:e0:b8:62:7a:29:e3:39: cc:70:62:cc:54:16:06:46:77:33:af:ad:de:af:a6:5d:9a:7d: 18:4a:e0:6e:92:18:41:d1:b7:f0:63:c3:ff:9f:11:b9:98:c9: 3b:e0:04:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTEyRjExMC8GA1UEBRMoMUU1N0I0M0YwNDRENEFCQTgyMjJBNDA5Nzg2NjE0Mjgw QUE3MzlBMTAeFw0yNDA1MTcwODE5NTdaFw0yNDA1MjQwODE5NTdaMBgxFjAUBgNV BAMTDTY2NDcxMzJkLTIzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkIdD7TDQplWKvRZtMwhvILRb+VdFbJb+OKH1lYOIJ39wvn58h9wHI6cixXhj9 LC4jyMHBmy1VXQUvszSlg09qYQ8gwBoHzvPiTzQFiJb7pLt7PHu7SUPXtQ7bv8VT Wtebo7aJ5E6y0YgbkEqY2ergi3u33UjqluUvOKugLrMRkCTgEfMC7QV9S+n8TSly nyaWPDZ1LTMJI46jlqxwzNAOOJYZ6MHz/vRugsIniVm4uSlJ1W30NK0SZ2pRLrkB WxmWMqTgpQ9F5PW2FOBJKHO4iFRF03tTHx/MO/WanePJCYB7O4E0FWzr4iF6Y8fx Hu4bERvas2Si4M1wFvhTIUWzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGziN4pPv meBLn331GJVX638rPQ8wHwYDVR0jBBgwFoAUHle0PwRNSrqCIqQJeGYUKAqnOaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExMTJGLzk2NERDNjlBQkE4 RDExRUU4MjhBODk0NkM0RjlBRTAyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9h RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxlMFB3Uk5TcnFDSXFRSmVHWVVLQXFuT2FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx MTJGLzk2NERDNjlBQkE4RDExRUU4MjhBODk0NkM0RjlBRTAyL0hsZTBQd1JOU3Jx Q0lxUUplR1lVS0Fxbk9hRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/mwfB/5GmCJmhk2R1QFO3sbzwTFyn4/Kl86X4kEXYCOO5Ng2VFLAQw NiTpZWqOS36v9J/3GcD/Zqltm9Ow2hRs5OYEW2jD3A2hYoVmUt7qltwEE/c9K+q1 yBRIcg4e0WLsCmTzOtBk+hNVvB7y9ZQNkixgWvBTtcXL7AqHhuuF8xulShQHsHiF hxn49DM1XRUknMEDvmJ++rRyRhcS0oUXQxdodG8nR+9uh2DtiRSfAJsCWUnbboRc Bb8B1+naUI7YQDoyLkfKqp9xOrHg2svp4LhieinjOcxwYsxUFgZGdzOvrd6vpl2a fRhK4G6SGEHRt/Bjw/+fEbmYyTvgBG0= -----END CERTIFICATE-----Generated at Fri May 17 08:52:43 2024 by rpki-client on console-ams.rpki-client.org