$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: HDdPmdhZZE0CJAC9SeqjadlwJxmfIB63FW7HCcYXX9k= Subject key identifier: 68:8B:03:79:F4:0A:35:D3:B6:9D:96:8B:F2:2B:2C:05:E4:A5:3D:8C Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 105F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1058 Signing time: Tue 30 Apr 2024 18:11:23 +0000 Manifest this update: Tue 30 Apr 2024 18:11:22 +0000 Manifest next update: Tue 07 May 2024 18:11:22 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: foay2s3wdgMkvePiv/Tl9ifg9XZD3MCtExkIbgzlj8Y=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: cp4F4jMIgfMAt85H7Jg8xGE9loHPzsrPu/dVe17GTAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4191 (0x105f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Apr 30 18:11:22 2024 GMT Not After : May 7 18:11:22 2024 GMT Subject: CN=6631344a-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:a6:2a:9b:bb:02:5c:aa:a7:6b:f8:c9:31: c4:4d:36:83:7c:89:3b:21:e5:98:4c:63:8f:c8:d3: ce:cb:e4:bb:77:de:53:14:e4:2a:33:97:8d:12:bb: 73:b2:d2:e1:ce:44:0e:02:8c:bc:b8:3b:07:6c:5a: b2:6f:2c:60:df:87:0e:86:58:aa:a3:61:17:c7:38: c5:ee:b3:4f:19:62:a6:e2:ce:91:7a:20:a1:85:cc: 83:96:50:45:1a:73:bd:b2:de:2c:e7:bc:ee:b5:6e: a0:0c:64:1b:ac:6c:a1:4d:8b:69:4a:9f:b3:8a:26: 38:36:99:fd:8c:99:21:90:b9:62:96:83:a2:3e:cb: a0:65:eb:66:1c:40:44:5c:a0:77:2a:73:83:12:dd: a6:30:1b:09:03:18:f4:d7:22:70:45:32:13:8a:b3: 2b:96:cd:fa:f0:9d:6f:38:65:b0:60:7e:93:4b:31: d0:92:27:30:b4:bc:a5:57:07:ac:c9:4e:0f:15:4c: 60:48:80:17:ec:3f:30:be:03:57:be:a3:9e:2e:5b: a7:81:b3:47:bf:d3:73:5e:40:2c:1d:03:10:dd:74: 83:a7:25:22:c8:a4:8c:b0:c4:41:13:fd:9e:cd:b0: 12:3f:d2:c0:af:93:d1:ee:a4:85:ee:29:23:4c:bf: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:03:79:F4:0A:35:D3:B6:9D:96:8B:F2:2B:2C:05:E4:A5:3D:8C X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:47:f9:14:34:44:e0:4f:4b:fb:df:c4:f7:1c:5f:e3:82:9c: 1f:3f:c0:9b:97:97:52:dc:cb:67:b4:4d:39:3c:02:e2:9c:16: 7a:63:d4:83:74:9a:04:5b:db:50:76:6b:bf:8c:8b:60:80:17: 5e:20:f3:52:a1:a3:32:27:b6:fb:c3:80:cd:5a:1e:03:de:2e: 18:01:d1:ac:06:f0:68:57:4e:9d:89:c4:c2:bd:e0:71:49:9f: 75:11:8e:50:93:d6:92:ff:59:96:b6:8d:ae:31:80:b2:51:aa: c5:05:51:62:3e:61:94:ea:55:0d:72:53:0f:31:90:91:2b:19: eb:47:21:63:c5:b3:36:29:d6:a3:3d:63:36:2c:07:c4:f3:fd: 42:d8:d3:16:c2:94:aa:18:40:97:4e:8d:f2:6c:72:c9:60:d6: 78:d7:43:45:63:39:74:50:64:c8:0b:ff:51:fd:f7:30:20:ec: b5:4c:f4:35:b7:c5:64:6f:9d:13:7d:ac:b2:70:4e:74:95:a4: cc:f4:35:f8:0d:e8:e5:91:a4:bd:e2:88:61:65:d7:bb:a4:a1: 36:2f:4d:28:45:0f:4b:4e:c9:32:38:bd:5d:2f:6a:1c:18:5d: 3e:4d:13:37:c0:c8:c7:ee:d6:ad:8d:32:c3:cf:2c:aa:38:00: bc:a0:ea:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjQwNDMwMTgxMTIyWhcNMjQwNTA3MTgxMTIyWjAYMRYwFAYD VQQDEw02NjMxMzQ0YS05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGemKpu7Alyqp2v4yTHETTaDfIk7IeWYTGOPyNPOy+S7d95TFOQqM5eNErtz stLhzkQOAoy8uDsHbFqybyxg34cOhliqo2EXxzjF7rNPGWKm4s6ReiChhcyDllBF GnO9st4s57zutW6gDGQbrGyhTYtpSp+ziiY4Npn9jJkhkLliloOiPsugZetmHEBE XKB3KnODEt2mMBsJAxj01yJwRTITirMrls368J1vOGWwYH6TSzHQkicwtLylVwes yU4PFUxgSIAX7D8wvgNXvqOeLlungbNHv9NzXkAsHQMQ3XSDpyUiyKSMsMRBE/2e zbASP9LAr5PR7qSF7ikjTL9irwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiLA3n0 CjXTtp2Wi/IrLAXkpT2MMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmR/kUNETgT0v738T3HF/jgpwfP8Cbl5dS3MtntE05PALinBZ6Y9SD dJoEW9tQdmu/jItggBdeIPNSoaMyJ7b7w4DNWh4D3i4YAdGsBvBoV06dicTCveBx SZ91EY5Qk9aS/1mWto2uMYCyUarFBVFiPmGU6lUNclMPMZCRKxnrRyFjxbM2Kdaj PWM2LAfE8/1C2NMWwpSqGECXTo3ybHLJYNZ410NFYzl0UGTIC/9R/fcwIOy1TPQ1 t8Vkb50TfayycE50laTM9DX4DejlkaS94ohhZde7pKE2L00oRQ9LTskyOL1dL2oc GF0+TRM3wMjH7tatjTLDzyyqOAC8oOo/ -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:30 2024 by rpki-client on console-ams.rpki-client.org