$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: 2TML2y1C6VZG1QWgDcMrYegeUcUAR/T3bdp8krZS1/k= Subject key identifier: 88:80:63:31:00:A9:24:9F:19:DA:6F:4B:ED:7E:B6:80:53:FD:41:FC Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 278E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 2747 Signing time: Mon 06 May 2024 15:59:34 +0000 Manifest this update: Mon 06 May 2024 15:59:33 +0000 Manifest next update: Mon 13 May 2024 15:59:33 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: 3vfCgj+lsiqp9Z0rSvBIg8/oeR/jB9+ssZrA22B92o8=) 2: 864CD63A752B11ED9675D15FC4F9AE02.roa (hash: SnJS90lH4PlvNGVA3KVUUsEh6JU+BPy8ZQq912PGXhU=) 3: 02E7C9A629AC11E793618B6BC4F9AE02.roa (hash: Zsv/kKMxG1Mg42/9wooAIhBTIkgYHLrAjvk1hPgEhZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10126 (0x278e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: May 6 15:59:33 2024 GMT Not After : May 13 15:59:33 2024 GMT Subject: CN=6638fe65-e8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:0d:a1:3b:8e:82:18:d0:c7:71:bb:d2:95: 1a:9b:be:89:3f:3d:ec:ca:eb:c9:ea:0f:ee:d1:83: 0a:ca:d3:b2:81:35:b6:2b:33:cf:41:ee:f3:d1:5e: 7c:e6:65:04:aa:67:d4:35:c2:b4:20:62:39:84:14: db:e1:37:11:b2:05:a6:30:0b:cc:3b:2c:60:f9:88: 48:9e:6f:b6:0f:66:13:9e:45:f3:f4:3a:af:a7:36: 88:0b:6d:4e:38:63:a0:98:71:84:99:be:5a:8e:f5: 7c:c7:64:2b:f3:56:b2:63:fb:22:fa:39:41:8b:f6: 6a:73:91:9a:d4:3c:da:57:88:ec:f6:61:61:94:d9: a8:fb:5f:51:28:71:74:5b:dd:67:d3:28:47:62:7a: b4:2a:c0:a8:21:f4:da:7c:d4:a5:3f:41:22:ac:e8: d1:65:eb:6e:0a:2a:37:b6:fb:f7:ec:82:99:c7:35: 55:9a:0a:79:e2:d8:d1:c1:67:45:99:08:58:19:c6: 71:32:91:b3:0c:5e:4b:7a:45:f8:f6:cc:e0:57:64: 7f:02:b1:6c:c1:33:a1:82:8f:aa:06:73:27:7f:94: b2:75:1e:07:75:c3:2e:75:20:d2:d6:cf:ba:79:ce: dd:83:3e:d6:9f:4c:3c:76:b6:3c:a9:69:ce:f5:06: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:80:63:31:00:A9:24:9F:19:DA:6F:4B:ED:7E:B6:80:53:FD:41:FC X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d2:3e:9b:61:73:d8:b1:7c:f9:8c:43:83:3e:9e:36:31:cb: d9:78:99:bf:7d:c8:d0:ad:c9:df:8a:29:37:9c:0e:c4:74:32: 49:a5:9d:27:00:4d:98:21:07:60:74:d7:a7:60:54:d9:39:81: c5:d4:0a:c1:fd:a2:16:a5:26:19:f5:8a:60:90:a4:27:b3:3e: d1:75:4b:4b:f7:9d:cc:1e:83:ec:82:a3:81:6e:c4:b9:0b:16: e8:a2:3b:dd:19:e1:13:7e:da:f0:e4:68:af:63:1c:af:45:c8: 53:7c:d4:ec:5d:c3:24:5e:c9:3b:b8:ad:2c:4d:e4:39:45:fa: 11:01:85:9e:9c:b2:34:d6:10:3b:27:24:1d:95:a8:95:73:5e: 0b:34:a2:e7:e1:d7:1a:64:93:87:c7:62:71:60:23:52:0a:ea: b0:31:50:55:eb:c2:19:6d:01:50:c1:19:60:47:d4:27:37:c8: ab:b6:7c:9d:ec:6c:88:d8:6f:38:48:aa:68:fa:98:ab:d7:eb: b6:a5:4e:f0:a0:b4:82:b3:a2:7c:f9:d6:74:00:84:f7:be:ad: 77:94:7d:2b:18:8c:5c:a2:2e:79:78:51:c8:79:d5:5a:4d:d0: b7:21:82:f5:49:26:0f:82:22:87:d2:41:9e:b9:8e:43:8a:49: 37:a1:f6:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjQwNTA2MTU1OTMzWhcNMjQwNTEzMTU1OTMzWjAYMRYwFAYD VQQDEw02NjM4ZmU2NS1lOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHENoTuOghjQx3G70pUam76JPz3syuvJ6g/u0YMKytOygTW2KzPPQe7z0V58 5mUEqmfUNcK0IGI5hBTb4TcRsgWmMAvMOyxg+YhInm+2D2YTnkXz9DqvpzaIC21O OGOgmHGEmb5ajvV8x2Qr81ayY/si+jlBi/Zqc5Ga1DzaV4js9mFhlNmo+19RKHF0 W91n0yhHYnq0KsCoIfTafNSlP0EirOjRZetuCio3tvv37IKZxzVVmgp54tjRwWdF mQhYGcZxMpGzDF5LekX49szgV2R/ArFswTOhgo+qBnMnf5SydR4HdcMudSDS1s+6 ec7dgz7Wn0w8drY8qWnO9Qa3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiAYzEA qSSfGdpvS+1+toBT/UH8MB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp0j6bYXPYsXz5jEODPp42McvZeJm/fcjQrcnfiik3nA7EdDJJpZ0n AE2YIQdgdNenYFTZOYHF1ArB/aIWpSYZ9YpgkKQnsz7RdUtL953MHoPsgqOBbsS5 CxboojvdGeETftrw5GivYxyvRchTfNTsXcMkXsk7uK0sTeQ5RfoRAYWenLI01hA7 JyQdlaiVc14LNKLn4dcaZJOHx2JxYCNSCuqwMVBV68IZbQFQwRlgR9QnN8irtnyd 7GyI2G84SKpo+pir1+u2pU7woLSCs6J8+dZ0AIT3vq13lH0rGIxcoi55eFHIedVa TdC3IYL1SSYPgiKH0kGeuY5Dikk3ofbX -----END CERTIFICATE-----Generated at Mon May 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org