$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: kKtF917+taBi7aWFf13KVyAmVCu+rst5+AOPX1pMqzI= Subject key identifier: 60:A5:70:F0:41:59:4A:AF:A2:B1:2C:88:8B:98:AF:D2:1C:97:8F:A3 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 040D Signing time: Fri 03 May 2024 02:13:59 +0000 Manifest this update: Fri 03 May 2024 02:13:59 +0000 Manifest next update: Fri 10 May 2024 02:13:59 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: P+HqwrnFv/zuHZ1+KGzCO3N8aZ8mYifF/d9JmBxm8Zo=) 2: 6608D04620E911EC891FA162C4F9AE02.roa (hash: lrbydhSrpno0Ynb5k1Wi71w0BmNH6uvgTMCbCFodlLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: May 3 02:13:59 2024 GMT Not After : May 10 02:13:59 2024 GMT Subject: CN=66344867-12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:8b:57:c4:12:35:f0:38:62:48:df:c0:8c: ec:be:4a:c7:c8:04:f3:1a:e0:15:70:f9:43:d3:81: e7:8e:31:9f:1b:5f:25:8f:4d:d4:21:f1:cc:f9:e4: ba:6c:6e:d2:47:79:75:9b:0e:e9:5a:f0:27:a5:28: da:ee:c8:97:1c:ad:3a:68:46:6d:29:78:1d:cc:ce: 83:76:24:25:6a:0c:af:7a:14:a6:58:07:c3:c2:7e: 53:8a:55:d9:db:8c:41:6a:9f:f6:b4:48:64:ab:ed: a5:6d:c4:73:51:b7:49:f6:55:1b:e1:ff:db:7d:bb: 3d:17:8f:c7:f9:82:65:d3:d3:59:9c:03:ea:01:8c: 7f:6b:fd:5d:9c:e6:89:3b:84:14:48:49:3e:34:0c: 36:51:da:3f:6a:ec:db:6b:25:d6:cb:6b:8b:7f:59: c9:79:a8:41:fd:f1:51:54:7a:ac:e6:90:1c:df:5c: 68:4f:97:67:96:fc:6b:ba:3b:29:b1:e8:8c:b8:a9: 77:45:29:76:87:2b:7e:dc:eb:cb:b0:7d:e6:07:3a: 79:8e:fd:e3:25:d9:8a:0a:f4:36:5e:0a:7a:94:0e: 82:d5:e3:38:ae:32:33:68:72:23:21:42:97:fe:e2: dd:fb:e4:7d:32:95:32:42:db:ed:65:69:be:11:59: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:70:F0:41:59:4A:AF:A2:B1:2C:88:8B:98:AF:D2:1C:97:8F:A3 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:19:f4:ad:db:4a:f2:02:42:0f:ff:29:7e:c2:c1:d0:d3:e5: 1b:85:a9:32:9a:35:03:99:b3:3b:25:5e:c9:03:16:a4:70:89: b6:7f:44:1c:1d:b7:30:60:56:cf:4c:37:5e:e4:b3:74:ea:81: 3c:22:7b:b2:3f:29:f2:53:09:a5:17:f5:e6:cd:f5:c1:53:91: f7:43:04:83:6b:5a:e0:6d:de:e3:e8:74:d2:fe:2e:f1:ab:6e: 6d:8c:c9:b0:9b:4d:3d:4e:08:bd:12:4a:a0:e3:b0:b1:df:9f: 1b:2d:04:8e:2b:b1:15:43:aa:97:f8:c7:34:db:8f:c6:b0:c3: d8:a4:45:12:59:94:a8:c6:69:f4:80:df:1a:17:73:bd:22:66: cf:92:76:1d:5c:d7:9f:eb:2f:bd:69:eb:76:eb:18:d0:20:49: 84:00:d2:dd:2f:31:9e:c6:22:5d:6b:62:e9:d8:9d:f5:1e:ec: da:4d:35:ba:6b:bd:e3:1d:25:c3:0b:82:58:01:a3:63:1d:aa: 67:05:0a:a8:ea:6f:4d:89:53:33:51:2e:ab:fd:75:c0:55:0a: ed:b0:6b:ef:0d:88:15:99:1d:c5:dd:ce:77:cb:71:98:64:86: 6b:26:87:0c:68:70:c1:b3:c1:44:d4:98:8a:05:75:37:8d:1f: 59:b3:8c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjQwNTAzMDIxMzU5WhcNMjQwNTEwMDIxMzU5WjAYMRYwFAYD VQQDEw02NjM0NDg2Ny0xMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUCLV8QSNfA4YkjfwIzsvkrHyATzGuAVcPlD04HnjjGfG18lj03UIfHM+eS6 bG7SR3l1mw7pWvAnpSja7siXHK06aEZtKXgdzM6DdiQlagyvehSmWAfDwn5TilXZ 24xBap/2tEhkq+2lbcRzUbdJ9lUb4f/bfbs9F4/H+YJl09NZnAPqAYx/a/1dnOaJ O4QUSEk+NAw2Udo/auzbayXWy2uLf1nJeahB/fFRVHqs5pAc31xoT5dnlvxrujsp seiMuKl3RSl2hyt+3OvLsH3mBzp5jv3jJdmKCvQ2Xgp6lA6C1eM4rjIzaHIjIUKX /uLd++R9MpUyQtvtZWm+EVmt+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGClcPBB WUqvorEsiIuYr9Icl4+jMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqGfSt20ryAkIP/yl+wsHQ0+UbhakymjUDmbM7JV7JAxakcIm2f0Qc HbcwYFbPTDde5LN06oE8InuyPynyUwmlF/XmzfXBU5H3QwSDa1rgbd7j6HTS/i7x q25tjMmwm009Tgi9Ekqg47Cx358bLQSOK7EVQ6qX+Mc024/GsMPYpEUSWZSoxmn0 gN8aF3O9ImbPknYdXNef6y+9aet26xjQIEmEANLdLzGexiJda2Lp2J31HuzaTTW6 a73jHSXDC4JYAaNjHapnBQqo6m9NiVMzUS6r/XXAVQrtsGvvDYgVmR3F3c53y3GY ZIZrJocMaHDBs8FE1JiKBXU3jR9Zs4xo -----END CERTIFICATE-----Generated at Fri May 3 03:10:49 2024 by rpki-client on console-ams.rpki-client.org