$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: f3Ify8fGMIqEJmn3iP0VjnlQ7GcYp9RKRQtaL3v9Z64= Subject key identifier: 2F:AE:AE:A7:DA:70:BB:D8:CF:3B:B5:2E:07:83:B1:45:54:68:C1:1A Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 63 Signing time: Fri 17 May 2024 07:44:53 +0000 Manifest this update: Fri 17 May 2024 07:44:52 +0000 Manifest next update: Fri 24 May 2024 07:44:52 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: 9LH9X02z7qXo8RwVnxDMWa9ldBaQfakWsJzXokvSLg4=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: tVR4eS6BAk11ESI+gtbO8xp2r33dkwzxIV+WLCTc1kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: May 17 07:44:52 2024 GMT Not After : May 24 07:44:52 2024 GMT Subject: CN=66470af5-abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:17:a3:00:ff:8e:89:60:b8:e9:f8:0d:b6: de:db:8c:81:76:ec:91:ed:3c:b8:c6:a3:cd:ee:7e: 76:1c:a2:be:4f:1f:42:c8:1c:89:1e:98:6d:f3:75: e7:d1:a4:7d:6e:7a:be:57:f9:a3:d4:e5:19:4f:b0: fd:03:82:52:ad:d8:95:1b:25:46:08:75:79:65:34: 86:06:15:68:e4:02:60:53:38:74:9b:b7:17:80:68: a2:83:b1:8f:0d:fe:8f:45:a9:1d:d7:9c:34:6b:b7: e5:a2:e9:ac:16:b8:2c:c9:77:76:2f:6e:3f:5e:7b: 1e:9a:7b:1e:eb:80:68:60:7a:73:2a:71:79:12:a5: 35:df:56:23:1f:02:5a:6f:b9:d7:ff:64:b8:fa:73: a4:8c:38:79:23:62:e3:99:66:3a:f4:e4:41:c4:21: aa:53:e3:59:dd:1d:c1:33:84:31:a7:4c:4a:30:b0: cc:ee:16:d1:de:58:d5:6a:07:ce:53:67:c7:39:2c: ed:72:53:ce:14:fa:44:f0:41:f0:59:05:a2:c4:db: 1f:b4:74:43:df:b3:a0:12:30:c4:08:a3:1b:41:54: a7:b3:4e:2e:0a:79:5d:ad:e9:e6:72:dd:7c:98:93: 79:46:6e:24:04:25:e5:73:f8:a9:ce:1f:01:d9:bc: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:AE:A7:DA:70:BB:D8:CF:3B:B5:2E:07:83:B1:45:54:68:C1:1A X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e9:6c:80:5b:20:87:b5:89:fd:19:47:0f:bc:a8:76:e7:6d: 27:6b:6b:32:cd:2b:41:f0:f9:f6:e4:d7:9e:3b:32:f6:71:b4: 9c:ee:9e:8b:87:88:04:dd:20:64:84:51:7e:16:17:12:e2:89: 2b:9e:2d:65:d6:59:9c:42:fd:fb:88:90:07:2e:48:c8:6a:bb: 84:0c:5b:cb:6f:4f:41:db:93:2f:67:5a:6f:7f:88:b0:ad:a8: 45:8c:d6:41:45:7a:47:12:17:2d:42:93:27:87:f0:8e:dd:7a: 9b:b3:5f:f8:73:3c:34:96:58:f2:ec:34:82:1f:32:13:70:ca: 77:bf:17:56:c1:25:81:64:cd:9c:f4:ee:90:28:6f:ec:9d:96: 93:ba:0f:f6:ab:2b:cf:d1:8f:b8:e9:7f:7f:22:cb:fd:91:62: 35:8d:9b:14:fc:e9:22:ae:82:49:5e:1e:07:9d:b8:2d:73:68: e2:ef:6b:dc:e5:a4:5c:30:88:42:db:a6:f1:0f:3d:b7:bb:41: 01:3d:b2:f4:1f:66:3d:be:38:13:16:cc:c5:55:7c:fe:ba:05: ae:83:a7:5b:25:13:28:a4:3a:20:57:e2:e3:47:42:0f:65:82: df:8a:12:d7:4a:d8:8d:75:67:88:06:6d:8e:7d:b2:3b:4c:01: c7:3b:be:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjAyRjExMC8GA1UEBRMoODdGMzFCMjAxQkREMTg3NTgxNTQwQzVCOEI4NjQ0MzhD Mjk5OTBCOTAeFw0yNDA1MTcwNzQ0NTJaFw0yNDA1MjQwNzQ0NTJaMBgxFjAUBgNV BAMTDTY2NDcwYWY1LWFiZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn9BejAP+OiWC46fgNtt7bjIF27JHtPLjGo83ufnYcor5PH0LIHIkemG3zdefR pH1uer5X+aPU5RlPsP0DglKt2JUbJUYIdXllNIYGFWjkAmBTOHSbtxeAaKKDsY8N /o9FqR3XnDRrt+Wi6awWuCzJd3Yvbj9eex6aex7rgGhgenMqcXkSpTXfViMfAlpv udf/ZLj6c6SMOHkjYuOZZjr05EHEIapT41ndHcEzhDGnTEowsMzuFtHeWNVqB85T Z8c5LO1yU84U+kTwQfBZBaLE2x+0dEPfs6ASMMQIoxtBVKezTi4KeV2t6eZy3XyY k3lGbiQEJeVz+KnOHwHZvKYdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL66up9pw u9jPO7UuB4OxRVRowRowHwYDVR0jBBgwFoAUh/MbIBvdGHWBVAxbi4ZEOMKZkLkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCMDJGL0Q3QzMzQUI4N0ZC QjExRUVBNjk4MzkyNUM0RjlBRTAyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtM ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaF9NYklCdmRHSFdCVkF4Ymk0WkVPTUtaa0xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC MDJGL0Q3QzMzQUI4N0ZCQjExRUVBNjk4MzkyNUM0RjlBRTAyL2hfTWJJQnZkR0hX QlZBeGJpNFpFT01LWmtMay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGnpbIBbIIe1if0ZRw+8qHbnbSdrazLNK0Hw+fbk1547MvZxtJzunouH iATdIGSEUX4WFxLiiSueLWXWWZxC/fuIkAcuSMhqu4QMW8tvT0Hbky9nWm9/iLCt qEWM1kFFekcSFy1CkyeH8I7depuzX/hzPDSWWPLsNIIfMhNwyne/F1bBJYFkzZz0 7pAob+ydlpO6D/arK8/Rj7jpf38iy/2RYjWNmxT86SKugkleHgeduC1zaOLva9zl pFwwiELbpvEPPbe7QQE9svQfZj2+OBMWzMVVfP66Ba6Dp1slEyikOiBX4uNHQg9l gt+KEtdK2I11Z4gGbY59sjtMAcc7vk8= -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org