$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: L4RsxZlDnNc/SoBqTcDnOZK2LfREJP5ma90sU9oCPjA= Subject key identifier: 0E:5B:A1:06:70:F3:18:DE:B1:AF:FB:E0:EB:4D:6C:6E:1A:4A:1E:86 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 16 Signing time: Mon 27 May 2024 09:09:02 +0000 Manifest this update: Mon 27 May 2024 09:09:01 +0000 Manifest next update: Mon 03 Jun 2024 09:09:01 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: M8a+qs0mCtoxid5PlHll2Mzq+B8symnJ7iqngY+7On8=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 8H22KmugR0VQLPnUNTLwn0bSZG3gtKvbOm8UkicLC8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: May 27 09:09:01 2024 GMT Not After : Jun 3 09:09:01 2024 GMT Subject: CN=66544dad-7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:ef:ee:c2:6f:2b:4f:92:dc:40:c3:11:5c: f6:b2:7c:31:73:a4:14:74:5b:4e:54:1c:14:10:24: 65:17:1b:9b:15:b3:a1:8c:85:45:54:ea:4f:bf:82: cc:43:68:6a:cd:ff:68:57:fd:9b:fa:4d:81:d8:21: d1:47:7b:cc:03:78:b8:eb:37:7e:a9:0b:b6:a6:d5: 5f:2d:22:78:de:39:62:66:e2:d5:da:7e:99:65:8d: fd:03:3c:8b:ae:6f:55:64:97:19:38:cf:60:24:eb: b6:9a:9d:70:6d:65:09:af:28:9e:84:45:0f:a6:a4: 29:42:9d:ea:84:eb:d0:01:56:ee:d3:77:c9:0f:2d: 50:a2:89:c9:4e:39:c5:d5:7c:1e:fd:cb:a0:b0:45: 33:5c:52:97:69:56:04:fe:41:29:1b:43:30:07:83: 89:0f:20:54:fa:89:69:50:c9:f4:3e:84:ad:16:67: d0:2f:be:6f:23:34:c1:23:cd:f4:23:e3:fd:53:e9: 69:fa:14:d7:31:ea:59:b5:7d:1a:35:81:aa:ff:0a: 8e:2a:34:b2:cc:57:e6:7a:04:a5:59:5d:79:32:11: fa:3f:c5:1c:ad:d4:e5:1d:4f:16:28:5f:24:7c:46: 05:4b:eb:1a:37:83:05:e2:3c:b8:7d:52:73:a4:96: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5B:A1:06:70:F3:18:DE:B1:AF:FB:E0:EB:4D:6C:6E:1A:4A:1E:86 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:71:b3:ad:ab:f2:1d:ee:c5:04:8d:26:d1:e0:bd:f3:71:d9: e9:c5:a1:78:cc:1a:92:ff:19:97:cd:4e:e2:04:d1:aa:fe:8e: 5a:da:c4:e3:af:4a:e9:ad:5e:d1:70:17:64:ad:02:1a:70:eb: 92:ef:dd:d3:72:9e:ec:e2:10:c7:b4:d3:be:1c:af:9f:1a:ea: 3e:e5:d0:44:c1:61:50:da:18:c4:0d:41:34:09:30:59:25:86: bc:40:12:f2:b9:17:fa:5e:90:c0:53:19:25:a6:37:90:2c:4b: db:c7:9f:e0:54:ae:16:6b:75:36:a9:54:24:a8:de:8a:43:d9: 93:d4:af:ce:4a:08:66:d3:37:81:12:79:f7:3f:40:8d:7d:56: 00:c8:c9:3b:ca:98:87:2a:a1:a1:5b:f7:77:f9:ac:d2:a7:55: 26:ce:d4:04:72:6a:d5:e3:74:49:b6:b2:51:3d:65:c7:cf:ba: 77:43:c7:54:be:8f:e1:cd:18:c9:39:fe:b4:0d:bc:00:05:8b: e1:b6:63:45:db:4f:0b:1f:b6:c0:e2:ca:86:46:0a:54:72:29: 30:8a:e4:2a:9e:c7:b1:98:c8:28:bc:66:4d:69:ea:05:42:18: 89:a7:20:0c:64:0c:1d:91:c3:34:6a:32:f8:f2:af:bb:7e:ec: 9e:59:9f:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDQTExMC8GA1UEBRMoMUM3QjMwNTc2RUIxODUwOEVGMjc3OUM0RUY1QkI1NzI0 OTJERDI5OTAeFw0yNDA1MjcwOTA5MDFaFw0yNDA2MDMwOTA5MDFaMBgxFjAUBgNV BAMTDTY2NTQ0ZGFkLTdlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9W+/uwm8rT5LcQMMRXPayfDFzpBR0W05UHBQQJGUXG5sVs6GMhUVU6k+/gsxD aGrN/2hX/Zv6TYHYIdFHe8wDeLjrN36pC7am1V8tInjeOWJm4tXafplljf0DPIuu b1Vklxk4z2Ak67aanXBtZQmvKJ6ERQ+mpClCneqE69ABVu7Td8kPLVCiiclOOcXV fB79y6CwRTNcUpdpVgT+QSkbQzAHg4kPIFT6iWlQyfQ+hK0WZ9Avvm8jNMEjzfQj 4/1T6Wn6FNcx6lm1fRo1gar/Co4qNLLMV+Z6BKVZXXkyEfo/xRyt1OUdTxYoXyR8 RgVL6xo3gwXiPLh9UnOklrdLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDluhBnDz GN6xr/vg601sbhpKHoYwHwYDVR0jBBgwFoAUHHswV26xhQjvJ3nE71u1ckkt0pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUNBL0E2OTE1QjM0MDI0 RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSEhzd1YyNnhoUWp2SjNuRTcxdTFja2t0MHBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NUNBL0E2OTE1QjM0MDI0RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFq dkozbkU3MXUxY2trdDBway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9xs62r8h3uxQSNJtHgvfNx2enFoXjMGpL/GZfNTuIE0ar+jlraxOOv SumtXtFwF2StAhpw65Lv3dNynuziEMe0074cr58a6j7l0ETBYVDaGMQNQTQJMFkl hrxAEvK5F/pekMBTGSWmN5AsS9vHn+BUrhZrdTapVCSo3opD2ZPUr85KCGbTN4ES efc/QI19VgDIyTvKmIcqoaFb93f5rNKnVSbO1ARyatXjdEm2slE9ZcfPundDx1S+ j+HNGMk5/rQNvAAFi+G2Y0XbTwsftsDiyoZGClRyKTCK5Cqex7GYyCi8Zk1p6gVC GImnIAxkDB2RwzRqMvjyr7t+7J5Zn1Q= -----END CERTIFICATE-----Generated at Mon May 27 10:24:58 2024 by rpki-client on console-fra.rpki-client.org