$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: G5+qklaJPLUQrH2G7cMGx9iqB51x2OB9G55MNL5f0ow= Subject key identifier: A9:AF:64:86:5A:95:78:97:66:C3:0F:10:E1:69:7D:00:F1:F5:E9:7F Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0529 Signing time: Fri 19 Apr 2024 00:56:47 +0000 Manifest this update: Fri 19 Apr 2024 00:56:46 +0000 Manifest next update: Fri 26 Apr 2024 00:56:46 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: KGTZ1+fGiNFXlhzgxaWrMy6kbGPiWsySoMTeRGKFh70=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: czOX77QmnoYQ86gEkshKffr/lBAz+b6Ploh7ySLgMZI=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: nG8dhm1q3L++ES0WQRN6xojkz6KUmVSvlmSISAYAtqE=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: ncWmPesYGpPJogWkuFv/DK1hL+ud1swZfRktXgcskDg=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: DwrNBZp8WUAAA9IRg9207KjKNdeoDhrCJtnH7w3vl8A=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: v6vSOH0rqyYgsG7N36kdAx8zB/al41ZsKl5I1kZQlxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 00:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Apr 19 00:56:46 2024 GMT Not After : Apr 26 00:56:46 2024 GMT Subject: CN=6621c14e-071c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:8a:9b:ce:68:36:19:d4:bb:b7:05:c7:30: 6f:39:e4:d4:dd:36:cd:5c:05:e8:74:d9:ad:a4:32: a7:f3:bf:6c:a7:ae:22:94:3a:f0:2f:25:cb:1e:da: b4:f3:2a:bf:e2:16:16:16:ac:d3:5c:82:41:00:83: c5:da:19:9f:e5:96:fb:27:c7:b7:12:e7:e5:fe:17: eb:87:68:85:ea:22:28:40:66:06:3a:f2:ff:c2:e9: 65:63:a3:78:af:a8:6d:55:2b:2b:a2:43:3f:c2:31: 5d:ef:71:b0:19:dc:bc:31:1a:9a:a5:98:d3:50:0f: 22:0f:ab:a7:0c:61:f7:fb:44:52:82:7e:da:4d:6e: c5:e2:3a:d1:46:d4:11:5b:87:ba:c2:ee:7d:ce:f8: 63:07:cc:cb:e0:d3:97:ed:b2:6d:20:7d:dc:b3:0d: cd:97:b9:e0:e9:d4:e7:38:b5:da:01:f7:94:05:2d: 70:d0:26:2e:d3:cf:32:d3:a6:be:99:c5:4f:49:55: d2:e2:6a:92:8e:38:43:bb:95:ae:38:18:1c:a7:6a: 0e:3d:9b:be:8c:64:48:01:d0:df:ff:33:25:ee:52: d4:32:c2:e4:91:57:29:ce:66:4f:8d:e7:25:29:2a: a3:f0:92:c9:50:28:d9:f0:ee:53:9a:12:da:28:7b: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:64:86:5A:95:78:97:66:C3:0F:10:E1:69:7D:00:F1:F5:E9:7F X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:72:bf:a7:f2:e5:ea:ac:81:05:4c:d1:3b:e1:51:19:ec:7f: bb:97:5e:ae:9e:8f:83:7d:1e:b8:7f:7c:0e:5b:8a:d7:19:0d: 54:76:26:af:15:96:05:52:67:63:8b:57:a6:a6:46:56:35:90: c8:63:69:a3:85:f8:49:e5:4b:83:8d:85:85:98:ae:97:17:78: 7f:a9:0b:e9:04:e3:3f:b6:a6:40:1b:9c:24:b3:03:cd:ff:8f: 77:8d:65:c7:ae:f7:8d:1e:3f:b7:d5:5c:68:01:5e:6b:50:2e: 5a:97:9e:44:60:e2:77:ae:54:3c:60:df:e2:a7:36:3e:48:67: 37:19:15:37:e3:b8:f2:4f:eb:cb:05:c5:77:25:14:96:28:ea: ff:a6:2d:33:28:4d:73:ac:77:61:97:7e:8c:d5:c9:06:bc:27: e5:64:9e:c4:1e:55:f2:31:f5:e2:c9:aa:70:9e:71:2a:8f:9e: 5d:93:58:cf:b3:ec:18:82:b0:65:ed:03:32:41:0c:cc:d0:52: d1:5f:c4:69:35:b6:8a:17:28:6a:dc:da:5d:b6:19:9d:21:a8: 47:0f:8f:aa:7c:62:cf:6a:b7:4d:c5:ab:c0:27:50:7c:81:df: 9a:dd:c1:9a:5b:d2:cf:12:12:16:16:09:4f:2f:54:42:4b:36: 83:d6:1e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjQwNDE5MDA1NjQ2WhcNMjQwNDI2MDA1NjQ2WjAYMRYwFAYD VQQDEw02NjIxYzE0ZS0wNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08WKm85oNhnUu7cFxzBvOeTU3TbNXAXodNmtpDKn879sp64ilDrwLyXLHtq0 8yq/4hYWFqzTXIJBAIPF2hmf5Zb7J8e3Eufl/hfrh2iF6iIoQGYGOvL/wullY6N4 r6htVSsrokM/wjFd73GwGdy8MRqapZjTUA8iD6unDGH3+0RSgn7aTW7F4jrRRtQR W4e6wu59zvhjB8zL4NOX7bJtIH3csw3Nl7ng6dTnOLXaAfeUBS1w0CYu088y06a+ mcVPSVXS4mqSjjhDu5WuOBgcp2oOPZu+jGRIAdDf/zMl7lLUMsLkkVcpzmZPjecl KSqj8JLJUCjZ8O5TmhLaKHsyKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmvZIZa lXiXZsMPEOFpfQDx9el/MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVcr+n8uXqrIEFTNE74VEZ7H+7l16uno+DfR64f3wOW4rXGQ1Udiav FZYFUmdji1empkZWNZDIY2mjhfhJ5UuDjYWFmK6XF3h/qQvpBOM/tqZAG5wkswPN /493jWXHrveNHj+31VxoAV5rUC5al55EYOJ3rlQ8YN/ipzY+SGc3GRU347jyT+vL BcV3JRSWKOr/pi0zKE1zrHdhl36M1ckGvCflZJ7EHlXyMfXiyapwnnEqj55dk1jP s+wYgrBl7QMyQQzM0FLRX8RpNbaKFyhq3NpdthmdIahHD4+qfGLPardNxavAJ1B8 gd+a3cGaW9LPEhIWFglPL1RCSzaD1h4X -----END CERTIFICATE-----Generated at Fri Apr 19 01:45:07 2024 by rpki-client on console-ams.rpki-client.org