$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: JAVfnf45KWlRNdVwqrzV1kkm5JHEm4kvObn/0yO3IlA= Subject key identifier: FF:71:DC:AC:5C:2F:43:9D:14:51:62:89:3F:77:B8:08:9B:55:FD:65 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: CB Signing time: Sat 27 Apr 2024 06:11:39 +0000 Manifest this update: Sat 27 Apr 2024 06:11:39 +0000 Manifest next update: Sat 04 May 2024 06:11:39 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: 5gcNf+TNWwyhYy+N3PFi2d+Hzs142teE7nBpO2mntZw=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: jI9DgyO9nPZTU77adb7EnFICPY5tfKDSQBv7HFvki3Q=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: +G3rVg2aBgeiYA0CP92/rWJd4/GMgxOcsD+FbNGPj5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Apr 27 06:11:39 2024 GMT Not After : May 4 06:11:39 2024 GMT Subject: CN=662c971b-527a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:b7:a1:d9:98:b9:fa:af:68:8a:6b:71:89: 93:9d:c6:7e:8c:da:c4:89:88:e0:e4:44:af:e0:40: 0b:29:32:4f:5f:ca:82:19:ee:09:f8:b5:10:37:1e: 9b:02:4c:85:c8:83:ea:df:60:c7:fd:e5:d0:e8:94: 21:4b:33:2b:89:ed:c7:be:9f:63:3a:95:be:bd:08: 78:0f:98:ef:4b:50:96:cb:bd:bd:fc:aa:20:b5:e0: b0:9d:ad:62:36:f4:56:03:19:62:55:36:6c:61:0e: e7:49:0d:e2:79:4a:78:86:ec:a7:97:df:76:75:54: d7:73:50:0b:be:0d:9a:4c:2b:1c:e0:70:80:d2:91: f5:69:b7:c9:49:ac:dc:d2:8a:31:2e:69:df:6e:0b: 4f:74:bc:ac:1f:e8:86:28:b5:e0:50:fd:a0:6e:7b: aa:0e:64:0f:54:51:e9:17:c5:c7:63:80:bc:11:a0: 81:43:9d:f7:1c:ec:de:06:11:bc:30:e6:5d:d0:7a: 23:bd:aa:aa:f1:6d:b2:56:2d:b7:eb:57:6a:7b:dd: 85:a3:ae:a4:77:7e:f9:9d:f6:40:aa:c1:f4:f0:1b: 68:14:89:2b:f5:9e:27:7b:d7:83:fb:ff:e4:ab:2e: ef:f8:6d:bc:70:19:41:55:31:16:67:c6:07:a6:32: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:DC:AC:5C:2F:43:9D:14:51:62:89:3F:77:B8:08:9B:55:FD:65 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6a:df:35:d0:f1:15:d6:11:02:73:ad:0e:e1:d5:11:69:69: 34:b8:3a:f0:90:aa:c6:ea:1b:4a:b5:3a:d6:07:0d:c3:47:06: 99:e0:30:75:87:08:b4:ec:95:7d:a2:db:25:f5:9a:fa:9d:dc: 6c:b4:c7:c1:5f:f8:4c:5d:2e:37:f7:31:b8:85:de:d8:c9:84: 7c:87:82:d3:58:34:82:30:a1:83:26:e4:0f:99:65:74:62:19: 5a:98:53:f5:74:42:9e:1a:31:28:3d:dc:09:dc:97:6f:77:01: df:12:9e:ca:8b:d2:3d:81:83:6b:49:ff:8e:ed:16:98:e8:86: 7e:c3:5d:90:12:c7:bb:1d:b4:b8:f8:d3:68:11:86:2c:e7:53: b0:8c:a9:e1:a8:91:82:39:40:73:55:34:c7:61:7f:29:57:e6: cb:67:8b:67:a6:f8:fc:95:c3:fb:8f:2a:a0:0e:06:d6:6c:3f: 6b:15:84:82:41:1f:2d:ff:d1:32:49:d0:91:a2:f0:b9:2c:f7: fb:d2:74:d8:18:79:c8:f1:5d:32:04:f2:1b:bb:86:b2:6b:b8: e2:ca:b3:4c:44:d1:6d:bb:1f:11:e8:3d:e7:02:9e:ef:89:ab: cc:9d:9a:58:10:df:18:ca:7b:c4:e0:7e:df:64:08:93:d4:c1: c3:e7:4b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjQwNDI3MDYxMTM5WhcNMjQwNTA0MDYxMTM5WjAYMRYwFAYD VQQDEw02NjJjOTcxYi01MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPC3odmYufqvaIprcYmTncZ+jNrEiYjg5ESv4EALKTJPX8qCGe4J+LUQNx6b AkyFyIPq32DH/eXQ6JQhSzMrie3Hvp9jOpW+vQh4D5jvS1CWy729/KogteCwna1i NvRWAxliVTZsYQ7nSQ3ieUp4huynl992dVTXc1ALvg2aTCsc4HCA0pH1abfJSazc 0ooxLmnfbgtPdLysH+iGKLXgUP2gbnuqDmQPVFHpF8XHY4C8EaCBQ533HOzeBhG8 MOZd0Hojvaqq8W2yVi2361dqe92Fo66kd375nfZAqsH08BtoFIkr9Z4ne9eD+//k qy7v+G28cBlBVTEWZ8YHpjLhXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9x3Kxc L0OdFFFiiT93uAibVf1lMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqat810PEV1hECc60O4dURaWk0uDrwkKrG6htKtTrWBw3DRwaZ4DB1 hwi07JV9otsl9Zr6ndxstMfBX/hMXS439zG4hd7YyYR8h4LTWDSCMKGDJuQPmWV0 YhlamFP1dEKeGjEoPdwJ3JdvdwHfEp7Ki9I9gYNrSf+O7RaY6IZ+w12QEse7HbS4 +NNoEYYs51OwjKnhqJGCOUBzVTTHYX8pV+bLZ4tnpvj8lcP7jyqgDgbWbD9rFYSC QR8t/9EySdCRovC5LPf70nTYGHnI8V0yBPIbu4aya7jiyrNMRNFtux8R6D3nAp7v iavMnZpYEN8YynvE4H7fZAiT1MHD50tb -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:53 2024 by rpki-client on console-ams.rpki-client.org