$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: bSnnVso6iQy9lWvdl5aMnxqXkdVf2GPO1r2NkIJnMFs= Subject key identifier: 84:BF:40:09:29:7A:D3:B2:E3:61:E7:16:72:1E:BD:42:3E:B2:93:C2 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 05F6 Signing time: Mon 06 May 2024 23:59:11 +0000 Manifest this update: Mon 06 May 2024 23:59:11 +0000 Manifest next update: Mon 13 May 2024 23:59:11 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: zLPmfUJBrUZUfuWjf2ngWSQZ8h2a0jnyG76fYLBZFy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: May 6 23:59:11 2024 GMT Not After : May 13 23:59:11 2024 GMT Subject: CN=66396ecf-11ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:4a:2c:79:be:f9:3e:4f:e3:d6:52:6b:e6: 9c:5a:cb:bf:24:4c:52:5d:18:1f:a8:e3:e2:29:fe: 68:0b:6f:4e:d5:89:48:2f:3e:06:33:8e:a9:8d:17: 65:e9:90:74:51:1f:95:82:40:d0:74:2d:f1:6b:a7: 3c:a8:08:2a:5d:2f:be:77:9e:b0:cc:6d:a4:ea:df: e3:0f:3b:f4:16:9b:2d:cf:59:29:62:e7:73:ad:36: 4a:e0:7f:e9:24:05:9f:f1:07:c2:6d:d0:da:f1:97: 6f:e2:5c:1d:d0:79:84:13:f1:2f:7a:ef:0a:e1:a8: d5:7a:7a:0e:18:7c:65:88:20:63:24:1f:06:ac:b5: 2c:93:40:27:da:e0:e4:aa:92:27:1f:13:fb:87:c4: 85:7d:fc:94:59:f5:f1:b3:0b:6d:e6:20:68:3c:d8: fb:84:ad:a6:e1:19:06:5a:f8:60:76:fe:7b:ca:e8: 30:92:fb:1c:46:64:b3:eb:a6:7b:3e:c9:9d:24:74: 48:b6:c7:3a:a9:26:86:c5:da:61:7e:7a:8e:ef:3f: e4:8e:a1:4d:2b:d2:27:9d:df:f8:c6:bc:b9:bf:f4: 22:d0:22:c1:8f:24:37:1e:ab:f0:7a:40:3d:0b:e4: c8:a3:1d:0d:b4:44:d2:13:e3:7b:47:04:ae:ef:2e: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:40:09:29:7A:D3:B2:E3:61:E7:16:72:1E:BD:42:3E:B2:93:C2 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:63:d2:b8:b5:5d:48:59:b2:4a:fe:4d:22:28:04:a7:1b:88: c9:a9:a1:bf:a1:c5:e3:09:2c:08:d6:7b:c0:6b:3c:ef:b9:82: ed:ec:7b:dc:e7:2d:75:a0:c2:64:81:3a:ad:7f:4c:cb:de:21: 5a:88:10:fb:03:0b:af:19:95:80:87:32:13:f8:29:ad:7b:dc: 6c:fb:ec:c9:4d:c0:60:66:7d:98:08:64:5a:01:b9:05:da:e8: b3:23:40:e2:01:73:21:42:60:d4:d9:2d:3c:fd:7f:65:50:cd: d6:65:11:2c:b0:df:b0:04:75:42:75:44:c1:58:43:b6:2d:11: 60:5b:22:7c:77:dd:57:2e:58:2d:43:2a:d3:be:8c:e8:ac:de: f0:ce:bd:dc:a6:30:b4:5c:09:b1:33:e9:20:6d:a2:38:58:82: e4:d1:ac:7c:4e:c3:50:76:ab:f0:63:4d:a4:e0:c9:0b:2f:83: a8:b4:1a:69:d4:c9:65:cb:1d:bf:89:2d:8a:b5:67:02:46:8f: 41:68:13:c5:c4:5f:1d:a1:80:f0:cc:23:aa:47:ff:f0:ba:13: 01:ad:fe:c5:d0:da:02:63:1f:68:9a:91:40:e9:2b:b0:9a:c9: 9e:b7:70:ca:ec:14:75:09:50:6d:33:48:b7:38:8c:f0:80:e4: 53:84:72:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjQwNTA2MjM1OTExWhcNMjQwNTEzMjM1OTExWjAYMRYwFAYD VQQDEw02NjM5NmVjZi0xMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OxKLHm++T5P49ZSa+acWsu/JExSXRgfqOPiKf5oC29O1YlILz4GM46pjRdl 6ZB0UR+VgkDQdC3xa6c8qAgqXS++d56wzG2k6t/jDzv0Fpstz1kpYudzrTZK4H/p JAWf8QfCbdDa8Zdv4lwd0HmEE/Eveu8K4ajVenoOGHxliCBjJB8GrLUsk0An2uDk qpInHxP7h8SFffyUWfXxswtt5iBoPNj7hK2m4RkGWvhgdv57yugwkvscRmSz66Z7 PsmdJHRItsc6qSaGxdphfnqO7z/kjqFNK9Innd/4xry5v/Qi0CLBjyQ3HqvwekA9 C+TIox0NtETSE+N7RwSu7y4+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS/QAkp etOy42HnFnIevUI+spPCMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChY9K4tV1IWbJK/k0iKASnG4jJqaG/ocXjCSwI1nvAazzvuYLt7Hvc 5y11oMJkgTqtf0zL3iFaiBD7AwuvGZWAhzIT+Cmte9xs++zJTcBgZn2YCGRaAbkF 2uizI0DiAXMhQmDU2S08/X9lUM3WZREssN+wBHVCdUTBWEO2LRFgWyJ8d91XLlgt QyrTvozorN7wzr3cpjC0XAmxM+kgbaI4WILk0ax8TsNQdqvwY02k4MkLL4OotBpp 1Mllyx2/iS2KtWcCRo9BaBPFxF8doYDwzCOqR//wuhMBrf7F0NoCYx9ompFA6Suw msmet3DK7BR1CVBtM0i3OIzwgORThHJf -----END CERTIFICATE-----Generated at Tue May 7 01:58:15 2024 by rpki-client on console-fra.rpki-client.org