$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: UzkbDFR60EdC1WQq5YfSqnD+HjuDblk2XxQJNdIGk9I= Subject key identifier: FA:F4:29:66:CB:51:FD:95:5C:D7:95:67:62:0A:D1:82:65:E5:FB:81 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0AE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0AE1 Signing time: Thu 02 May 2024 20:08:28 +0000 Manifest this update: Thu 02 May 2024 20:08:27 +0000 Manifest next update: Thu 09 May 2024 20:08:27 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: o5PWWzgaWOq22zqkGTuccG/gXjnRZll/JcohhrUH2tI=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: 0vJsqwC5HbXsESUnxeD7JszICfvNMnf93j/cyz5W+wI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2790 (0xae6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: May 2 20:08:27 2024 GMT Not After : May 9 20:08:27 2024 GMT Subject: CN=6633f2bb-c7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:30:52:89:25:fb:16:a9:b9:b7:37:e6:9e: a3:07:1c:28:43:b4:32:a5:9e:e7:29:a5:45:54:07: a2:7c:ae:c1:eb:67:75:4a:8f:66:3f:f8:1b:eb:75: 1f:77:56:72:7e:80:83:8e:9c:6c:26:a8:88:ac:aa: 9f:b6:09:39:3c:dd:a2:7f:f4:54:04:d5:dc:d1:4b: 0c:34:3b:e5:95:82:71:f4:23:7b:7f:5c:69:d0:f2: 09:b3:eb:cd:a4:72:9e:23:ec:20:e3:2c:46:67:33: 18:d9:a3:06:19:cd:4f:14:cf:8f:0f:20:5e:f0:d3: e7:05:06:14:b4:fa:a1:4f:a5:57:13:a1:19:6e:8f: 28:96:9b:13:16:14:2d:ff:72:57:c3:55:41:7a:4b: ac:9f:ef:25:73:19:b3:03:92:5e:48:3a:10:fb:b6: dc:a5:e7:a5:9a:2e:36:c6:3d:11:a4:e7:d8:f1:53: 59:e3:99:ba:3e:5f:39:06:28:41:d4:a3:7a:ed:f4: 39:fe:9c:88:df:19:94:bf:03:27:15:24:2b:1f:80: 85:5e:56:7c:49:b5:91:a0:37:54:ca:6a:43:f7:b6: 6c:4a:3b:be:a2:5d:e0:c8:89:18:4d:0f:ab:f5:a6: 16:14:10:b1:37:3b:a0:95:8c:c6:b8:f3:76:e0:a9: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:29:66:CB:51:FD:95:5C:D7:95:67:62:0A:D1:82:65:E5:FB:81 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:62:e7:f1:15:6b:2c:e3:e4:4b:13:57:ce:4b:f4:ae:10:6b: 2c:ea:2c:06:3e:95:1c:f8:92:0e:79:f5:59:5e:6d:3b:ab:87: 7f:bb:de:e2:59:e6:17:ef:82:3f:c6:b9:01:d4:ac:6c:28:16: 78:14:56:10:a0:a0:4c:7e:71:18:67:de:0d:80:84:65:a1:4d: fb:03:18:e9:0b:f2:73:fa:f3:a0:86:26:e0:8b:26:43:93:84: 68:74:73:5c:0d:b5:79:eb:88:47:35:96:aa:c5:15:c9:7b:de: a0:f4:ab:fa:bc:8c:c6:2f:02:60:e1:cf:e1:f7:b3:e7:97:55: 2b:9e:91:97:6c:77:b1:a9:08:5e:b0:3d:71:91:44:37:42:bb: 63:b3:68:72:8c:0a:99:63:b3:04:32:10:57:8f:d3:1f:0e:aa: 73:96:53:5b:33:0a:30:b1:35:d0:a1:29:31:51:af:6c:b1:41: 2d:da:2a:97:a5:6d:f8:cb:cd:b6:e6:19:d5:d6:65:11:a7:ec: 0e:25:0f:34:65:4f:47:14:88:0e:26:64:10:4d:50:83:ea:f8: fc:b9:d8:4d:fc:df:8c:36:4f:74:71:5e:f0:03:4e:79:05:8e: 49:0f:81:f3:db:2d:c4:69:0f:44:42:6e:a8:d1:4f:97:1e:df: e0:cb:25:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjQwNTAyMjAwODI3WhcNMjQwNTA5MjAwODI3WjAYMRYwFAYD VQQDEw02NjMzZjJiYi1jN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14IwUokl+xapubc35p6jBxwoQ7QypZ7nKaVFVAeifK7B62d1So9mP/gb63Uf d1ZyfoCDjpxsJqiIrKqftgk5PN2if/RUBNXc0UsMNDvllYJx9CN7f1xp0PIJs+vN pHKeI+wg4yxGZzMY2aMGGc1PFM+PDyBe8NPnBQYUtPqhT6VXE6EZbo8olpsTFhQt /3JXw1VBekusn+8lcxmzA5JeSDoQ+7bcpeelmi42xj0RpOfY8VNZ45m6Pl85BihB 1KN67fQ5/pyI3xmUvwMnFSQrH4CFXlZ8SbWRoDdUympD97ZsSju+ol3gyIkYTQ+r 9aYWFBCxNzuglYzGuPN24Km5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr0KWbL Uf2VXNeVZ2IK0YJl5fuBMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGYufxFWss4+RLE1fOS/SuEGss6iwGPpUc+JIOefVZXm07q4d/u97i WeYX74I/xrkB1KxsKBZ4FFYQoKBMfnEYZ94NgIRloU37AxjpC/Jz+vOghibgiyZD k4RodHNcDbV564hHNZaqxRXJe96g9Kv6vIzGLwJg4c/h97Pnl1UrnpGXbHexqQhe sD1xkUQ3Qrtjs2hyjAqZY7MEMhBXj9MfDqpzllNbMwowsTXQoSkxUa9ssUEt2iqX pW34y8225hnV1mURp+wOJQ80ZU9HFIgOJmQQTVCD6vj8udhN/N+MNk90cV7wA055 BY5JD4Hz2y3EaQ9EQm6o0U+XHt/gyyXY -----END CERTIFICATE-----Generated at Thu May 2 22:28:49 2024 by rpki-client on console-ams.rpki-client.org