$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: nkMgQtv3kuN+bQbJQjhXJtMwCVXHdx+CFVo+VzDq2nU= Subject key identifier: 33:49:AB:2A:78:4E:65:6E:F9:62:9D:83:62:82:86:CC:8A:23:B7:3A Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 88 Signing time: Fri 17 May 2024 07:16:31 +0000 Manifest this update: Fri 17 May 2024 07:16:31 +0000 Manifest next update: Fri 24 May 2024 07:16:31 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: GU1WwOIMTcX1REFsFL0Sn0v5L5FnvUgPLCoPOIVk1QI=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: d4qUUZCMTJGqsgVXJbSv25ILaZv9GF/+8F1MKtPBFUg=) 3: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: hwuGZFS1c2OEbzowaU8aBp9+90fOAJ6vT/p/knft1/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: May 17 07:16:31 2024 GMT Not After : May 24 07:16:31 2024 GMT Subject: CN=6647044f-24ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:a6:59:ae:21:c8:ba:61:16:17:3c:7c:b1: 9e:c4:5a:af:d5:e0:b3:6b:69:18:18:69:64:5c:41: 9a:f3:d2:9d:23:89:31:08:f3:91:c8:93:af:34:2c: e8:3f:85:9e:fd:79:d6:90:85:04:7f:3b:9d:a8:9c: b6:e6:80:1c:23:80:5a:40:32:3b:ed:fb:7f:40:60: a0:ed:e1:bf:1a:ec:f6:4d:1d:2a:85:8f:e6:44:75: 18:65:44:13:ca:51:7a:b4:d8:40:15:7c:31:c0:e0: a3:1b:6d:a1:60:f5:c5:3a:c4:20:3e:ec:ff:06:18: b1:cf:44:9b:2c:95:4c:86:7c:70:97:38:4c:04:9c: 03:57:5a:9f:01:4f:19:30:40:81:8c:42:49:8f:bf: 3a:1d:c5:c3:fb:a2:a5:69:dc:e4:32:8c:0e:ab:41: 82:8c:11:54:60:c3:e5:de:df:11:bc:26:bc:47:06: 7c:e8:bc:ab:dc:d0:7d:2e:36:0d:87:a8:ef:5e:89: 22:37:f5:ee:34:fc:b9:6e:3c:97:76:19:90:ad:12: 99:7c:b1:46:bb:12:f8:85:ce:df:46:39:2e:04:ae: 1b:43:b6:7a:2a:7d:58:3b:fc:1a:af:19:a8:3e:75: fb:b0:94:1d:54:09:a1:18:10:c7:9f:f3:8f:d3:0c: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:49:AB:2A:78:4E:65:6E:F9:62:9D:83:62:82:86:CC:8A:23:B7:3A X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f3:67:0a:18:04:59:a2:8c:6a:2f:bd:cc:1f:00:87:9a:00: 73:d4:de:60:60:eb:86:fa:15:e3:f8:b1:01:84:35:0b:11:10: 8d:f4:11:ff:8a:b6:cd:38:ea:32:c0:5c:7b:4b:36:77:b1:18: 3b:14:2e:4f:75:f5:f8:6d:65:ba:eb:ad:dc:9c:13:66:c0:88: 0d:47:ec:0d:36:70:30:ce:d3:63:43:14:b6:b3:c0:e4:7c:0e: c0:0e:dc:52:90:d1:41:35:40:ac:46:94:09:06:16:f8:91:e3: 1f:cc:aa:d7:58:07:0f:4d:c4:cb:6e:90:ac:03:7f:d6:38:3a: 5c:be:5d:49:05:8e:32:22:2d:be:15:96:a0:36:d3:32:de:9d: 6b:86:b4:e2:8b:90:e3:42:a3:0d:1d:95:06:7c:e8:67:84:f6: 2e:00:e0:46:81:05:82:e8:29:88:1d:89:6c:7e:96:e9:a4:8d: a8:46:4e:4b:10:d5:d2:e8:57:80:89:e1:62:03:11:e2:ee:e3: c5:b3:fc:86:18:d3:17:83:a7:6d:22:48:3d:8b:b8:be:44:29: 8a:83:0a:db:11:84:17:d6:15:f8:58:59:20:2c:0b:1b:72:27: c2:67:09:4c:34:7d:0a:bc:44:1d:3f:6f:db:13:0b:a1:63:38: 19:8c:e6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjQwNTE3MDcxNjMxWhcNMjQwNTI0MDcxNjMxWjAYMRYwFAYD VQQDEw02NjQ3MDQ0Zi0yNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCGmWa4hyLphFhc8fLGexFqv1eCza2kYGGlkXEGa89KdI4kxCPORyJOvNCzo P4We/XnWkIUEfzudqJy25oAcI4BaQDI77ft/QGCg7eG/Guz2TR0qhY/mRHUYZUQT ylF6tNhAFXwxwOCjG22hYPXFOsQgPuz/Bhixz0SbLJVMhnxwlzhMBJwDV1qfAU8Z MECBjEJJj786HcXD+6KladzkMowOq0GCjBFUYMPl3t8RvCa8RwZ86Lyr3NB9LjYN h6jvXokiN/XuNPy5bjyXdhmQrRKZfLFGuxL4hc7fRjkuBK4bQ7Z6Kn1YO/warxmo PnX7sJQdVAmhGBDHn/OP0wwzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNJqyp4 TmVu+WKdg2KChsyKI7c6MB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB182cKGARZooxqL73MHwCHmgBz1N5gYOuG+hXj+LEBhDULERCN9BH/ irbNOOoywFx7SzZ3sRg7FC5PdfX4bWW6663cnBNmwIgNR+wNNnAwztNjQxS2s8Dk fA7ADtxSkNFBNUCsRpQJBhb4keMfzKrXWAcPTcTLbpCsA3/WODpcvl1JBY4yIi2+ FZagNtMy3p1rhrTii5DjQqMNHZUGfOhnhPYuAOBGgQWC6CmIHYlsfpbppI2oRk5L ENXS6FeAieFiAxHi7uPFs/yGGNMXg6dtIkg9i7i+RCmKgwrbEYQX1hX4WFkgLAsb cifCZwlMNH0KvEQdP2/bEwuhYzgZjOa6 -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org