$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: FN3GNW75FuQxQl01DSVHKWphyG/awDa5zsFquwGRoSM= Subject key identifier: E7:63:28:7B:29:32:22:E9:F1:E0:EF:06:7B:7A:68:63:E9:14:F0:AE Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1CFC Signing time: Mon 06 May 2024 16:36:51 +0000 Manifest this update: Mon 06 May 2024 16:36:50 +0000 Manifest next update: Mon 13 May 2024 16:36:50 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: G7cH3XGUCAhtNdnWihwIUHXQzaSnPRNBdwcEWvIJvsQ=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: BLvI9bBUsLtYR2Pft0jwpM2SvcgK5YyBko45DtuXiUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7433 (0x1d09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: May 6 16:36:50 2024 GMT Not After : May 13 16:36:50 2024 GMT Subject: CN=66390722-9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:18:9c:0a:e5:ba:ae:70:7e:3b:34:a0:99:81: a9:17:37:47:32:07:38:62:ad:98:a7:9f:8a:55:6c: 23:97:d8:34:90:eb:02:a5:1b:70:83:27:f1:41:da: 93:ea:2c:3f:13:67:3b:c2:d3:8b:85:ea:04:e2:2e: 4d:ce:be:0b:74:43:17:e7:76:9f:d4:49:7a:49:e0: 9f:37:aa:31:94:39:47:08:2c:22:60:c0:ef:12:71: 7c:6f:9a:28:22:68:55:54:48:43:e4:4f:46:e2:6c: 63:e5:24:ae:52:13:50:7c:ad:31:d5:0c:d8:9e:ba: cd:98:41:03:ae:b1:f1:51:18:57:90:03:1a:70:f5: 0c:30:2f:1e:18:b9:4d:1b:7a:28:1b:be:0c:8b:8d: 2f:c3:90:32:97:71:d3:a2:39:f6:9c:f7:10:4e:92: de:af:95:7a:ce:86:c8:d5:d7:80:db:3e:9b:91:34: d4:02:e1:e0:b3:42:ad:d7:e0:6c:84:5f:01:b5:5b: d9:2e:c1:80:3c:1d:fb:d4:82:fa:bc:2a:fb:9a:bd: de:f2:39:74:02:f9:21:bf:d0:6f:06:76:88:b5:b1: 4b:24:4b:66:31:13:63:93:a6:64:5d:3d:f5:3e:01: d5:96:02:e9:a2:29:05:c0:8d:a1:3f:65:0d:a7:bd: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:63:28:7B:29:32:22:E9:F1:E0:EF:06:7B:7A:68:63:E9:14:F0:AE X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c2:c0:3f:05:2c:8c:3b:84:55:3d:ef:cf:ad:80:ad:4f:ae: 66:ea:75:1a:98:12:3d:99:f3:d5:fe:48:e5:4f:f4:ad:b7:bc: 39:18:c1:7e:4d:7d:ec:f1:13:e6:f9:8c:ab:e1:d1:13:1c:9b: 67:ff:2f:92:e0:12:c9:07:7a:ed:14:02:e7:80:ad:48:de:d6: 9f:62:30:f1:27:62:de:e0:85:3e:b6:7a:94:24:d5:38:7a:2c: 40:3c:02:0e:a7:e9:17:38:e5:5c:92:25:a9:7a:cc:3d:f6:c7: 4d:7f:c6:27:64:0d:da:99:46:d8:75:27:00:6e:70:e9:0e:4e: a8:5c:d1:0d:37:de:f4:b4:bf:e7:d2:90:8c:dd:08:75:28:46: 9d:bd:6b:f5:23:e5:0d:9b:99:b8:39:f1:a5:7e:31:37:de:d4: ff:7b:de:74:c0:50:d2:5e:9d:cf:35:d1:e8:2f:3c:d9:72:df: fe:8b:be:e4:4a:cc:8b:39:73:3a:cd:9e:a6:9e:f6:f6:d8:18: 81:40:16:44:cd:2f:3a:59:b7:11:dd:a4:48:f6:4c:99:07:fe: 18:75:45:b8:da:7f:3b:a3:98:83:38:ba:b3:02:4a:06:df:ba: de:56:c7:2c:cb:2f:6e:13:e5:c7:a1:ef:ff:1e:b0:3e:1c:2e: 8d:92:90:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjQwNTA2MTYzNjUwWhcNMjQwNTEzMTYzNjUwWjAYMRYwFAYD VQQDEw02NjM5MDcyMi05YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RicCuW6rnB+OzSgmYGpFzdHMgc4Yq2Yp5+KVWwjl9g0kOsCpRtwgyfxQdqT 6iw/E2c7wtOLheoE4i5Nzr4LdEMX53af1El6SeCfN6oxlDlHCCwiYMDvEnF8b5oo ImhVVEhD5E9G4mxj5SSuUhNQfK0x1QzYnrrNmEEDrrHxURhXkAMacPUMMC8eGLlN G3ooG74Mi40vw5Ayl3HTojn2nPcQTpLer5V6zobI1deA2z6bkTTUAuHgs0Kt1+Bs hF8BtVvZLsGAPB371IL6vCr7mr3e8jl0Avkhv9BvBnaItbFLJEtmMRNjk6ZkXT31 PgHVlgLpoikFwI2hP2UNp71U2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdjKHsp MiLp8eDvBnt6aGPpFPCuMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwwsA/BSyMO4RVPe/PrYCtT65m6nUamBI9mfPV/kjlT/Stt7w5GMF+ TX3s8RPm+Yyr4dETHJtn/y+S4BLJB3rtFALngK1I3tafYjDxJ2Le4IU+tnqUJNU4 eixAPAIOp+kXOOVckiWpesw99sdNf8YnZA3amUbYdScAbnDpDk6oXNENN970tL/n 0pCM3Qh1KEadvWv1I+UNm5m4OfGlfjE33tT/e950wFDSXp3PNdHoLzzZct/+i77k SsyLOXM6zZ6mnvb22BiBQBZEzS86WbcR3aRI9kyZB/4YdUW42n87o5iDOLqzAkoG 37reVscsyy9uE+XHoe//HrA+HC6NkpDj -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org