$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: /NzQWLcLFHbuwczfzlahNmMPs6dc+UOUKEe0F/+w90M= Subject key identifier: 8A:66:41:DB:28:BF:9E:2D:4E:88:21:D4:27:CE:F5:0D:3B:29:9A:ED Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 0106 Signing time: Sat 27 Apr 2024 05:24:09 +0000 Manifest this update: Sat 27 Apr 2024 05:24:08 +0000 Manifest next update: Sat 04 May 2024 05:24:08 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: qeoHV/Y8h8ovW7ko1mxaEkgy8sB2y5+nbi7tKhLxub0=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: 1F0H2dbwEQAZ11mjRklbJAe3otm+tJQyGGpBTqSZ0C0=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: yUnpz9eBONeeUf/ARcjSeazIrSPZziYwbK0ejyuueSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Apr 27 05:24:08 2024 GMT Not After : May 4 05:24:08 2024 GMT Subject: CN=662c8bf9-a939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:5c:b0:86:9a:35:f4:d3:a7:73:e1:84:fa: 23:1b:e7:7e:1c:f2:70:20:0a:07:74:56:be:6f:26: 8f:d5:91:95:c0:c3:fd:59:a4:b0:a3:14:0a:b5:ad: cd:79:31:6c:ef:63:9c:1d:d6:6f:4d:83:42:05:d0: 0c:42:73:49:0c:68:4f:4a:85:6d:b3:94:85:06:21: 55:48:37:ac:95:2e:c0:6d:11:e1:44:5b:83:7a:28: 55:6a:17:d4:c6:97:70:7c:57:6e:f9:96:39:45:6d: 10:e4:b8:5d:2a:9d:63:a4:ce:fd:bf:3e:27:fa:a6: 75:9c:36:7b:36:df:8e:bc:18:45:80:b9:cb:f6:1f: d2:a3:7d:92:fa:0e:c6:76:fc:dd:b7:e1:5a:ff:3b: d5:ac:b1:3d:6b:7b:96:87:22:c3:17:2e:e5:a4:37: b8:2d:45:7c:08:26:92:83:d2:49:f0:9c:93:3b:7e: a2:c6:6f:bb:96:a9:59:46:3a:39:a5:ab:17:39:6c: 0a:c0:3d:6d:fb:0f:1f:9c:4c:7a:bb:cf:1d:0b:72: cc:01:73:37:19:8d:48:6c:2f:50:cf:d8:bc:4f:49: 68:fe:06:56:c2:78:32:9b:51:11:d4:0f:a1:e3:35: 6c:15:16:10:ca:9a:b3:8c:d7:e1:78:5d:ef:fa:f9: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:41:DB:28:BF:9E:2D:4E:88:21:D4:27:CE:F5:0D:3B:29:9A:ED X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:67:12:ce:e7:ad:1a:47:37:c6:8a:38:e4:2b:50:23:33:74: d9:50:0a:1b:83:76:01:66:cc:9c:b4:6b:ec:30:d1:99:b6:6f: 56:44:7e:15:57:11:4f:90:39:8a:92:1a:be:46:34:23:aa:a3: b0:76:8a:52:0d:19:f7:aa:5a:b9:58:05:69:2c:1a:7e:f3:8e: 52:93:1d:fe:9d:af:a0:f9:a8:93:a8:ad:df:1e:29:ff:fc:03: 4d:ff:1e:15:f1:ae:22:01:43:09:7f:d0:24:7d:6a:1a:be:40: 9b:87:66:61:0d:0d:3e:4d:ed:dc:10:1c:f9:34:23:a4:d5:ad: 24:1c:69:39:89:d9:e7:36:ec:85:2a:5a:8f:2f:d3:2f:0b:30: df:5f:09:b3:05:c9:3d:8c:bc:3c:f6:f5:19:ac:4b:6a:c4:8b: ca:d7:34:6d:05:c7:60:a6:2d:e7:13:b4:6c:b8:8c:85:f1:e2: 83:69:e8:8d:95:ea:55:e5:a9:f9:d5:d3:b4:8d:83:ad:86:59: 74:ba:3e:30:0e:13:42:61:41:8f:0a:c5:a1:e0:5e:6e:6b:ba: 57:b0:24:2b:2f:de:77:10:07:a4:73:78:38:6f:94:00:9a:f4: 4e:fe:81:d6:de:b8:da:ae:8b:c1:d4:21:e1:1c:61:fd:ce:38: 79:6b:47:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjQwNDI3MDUyNDA4WhcNMjQwNTA0MDUyNDA4WjAYMRYwFAYD VQQDEw02NjJjOGJmOS1hOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/tcsIaaNfTTp3PhhPojG+d+HPJwIAoHdFa+byaP1ZGVwMP9WaSwoxQKta3N eTFs72OcHdZvTYNCBdAMQnNJDGhPSoVts5SFBiFVSDeslS7AbRHhRFuDeihVahfU xpdwfFdu+ZY5RW0Q5LhdKp1jpM79vz4n+qZ1nDZ7Nt+OvBhFgLnL9h/So32S+g7G dvzdt+Fa/zvVrLE9a3uWhyLDFy7lpDe4LUV8CCaSg9JJ8JyTO36ixm+7lqlZRjo5 pasXOWwKwD1t+w8fnEx6u88dC3LMAXM3GY1IbC9Qz9i8T0lo/gZWwngym1ER1A+h 4zVsFRYQypqzjNfheF3v+vn7CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpmQdso v54tTogh1CfO9Q07KZrtMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxZxLO560aRzfGijjkK1AjM3TZUAobg3YBZsyctGvsMNGZtm9WRH4V VxFPkDmKkhq+RjQjqqOwdopSDRn3qlq5WAVpLBp+845Skx3+na+g+aiTqK3fHin/ /ANN/x4V8a4iAUMJf9AkfWoavkCbh2ZhDQ0+Te3cEBz5NCOk1a0kHGk5idnnNuyF KlqPL9MvCzDfXwmzBck9jLw89vUZrEtqxIvK1zRtBcdgpi3nE7RsuIyF8eKDaeiN lepV5an51dO0jYOthll0uj4wDhNCYUGPCsWh4F5ua7pXsCQrL953EAekc3g4b5QA mvRO/oHW3rjarovB1CHhHGH9zjh5a0cR -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:24 2024 by rpki-client on console-ams.rpki-client.org