$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: YcvC2L/0v7iMIQ9Jb7zTYIl7Xy9WAeaKefIEbsB0QH4= Subject key identifier: 5D:80:10:A3:0F:C4:A6:CB:CE:9F:FA:DC:BB:03:13:72:10:64:D7:EE Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 33 Signing time: Fri 17 May 2024 08:28:25 +0000 Manifest this update: Fri 17 May 2024 08:28:24 +0000 Manifest next update: Fri 24 May 2024 08:28:24 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: cAqX2yczRbN6MD9FH0WNwHI5FvTe/771x7rk+b4F0fk=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: Y33xkPd/NcEVAXjbSrIl1ngKcwYgoXKhM/ZonEg3diE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: May 17 08:28:24 2024 GMT Not After : May 24 08:28:24 2024 GMT Subject: CN=66471528-b83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:d4:e4:fc:e3:b1:ea:58:42:75:1f:9a:1d: 37:58:53:cd:e9:b6:45:48:96:5a:3a:f1:6a:41:6c: 77:26:ee:1b:bb:e7:ca:7d:3c:32:d7:cb:2a:1c:23: ff:f1:b6:9d:6e:2b:ad:6a:c0:35:97:6d:89:41:36: 00:4b:1c:27:39:d7:54:fe:64:94:78:7f:9d:a4:84: 8d:f3:e8:06:aa:cb:e6:42:01:5b:62:fa:e7:6b:f8: e4:4c:42:82:0e:d0:cd:30:fe:fb:91:1a:11:5a:ff: 3c:e1:2c:1e:c6:82:a0:c6:af:66:73:06:23:03:3c: 02:3e:f1:96:56:87:69:a9:4a:e7:02:fc:71:5d:28: 6a:0a:2b:78:2c:e4:a3:6b:df:97:d4:04:96:6d:40: 29:20:31:0c:ed:95:1c:13:fa:71:27:a2:17:77:7b: 5f:8b:b9:18:d5:1c:bb:e6:3e:79:26:dc:76:a0:a4: dc:cf:c6:5e:82:91:85:72:4f:93:05:ad:23:0d:7c: 5a:35:88:55:76:3f:b4:45:ed:16:1b:50:37:c5:70: c1:7f:97:64:b7:f3:0c:f6:b1:67:cb:5c:3d:65:60: a2:a1:84:20:4a:21:94:1c:91:3d:74:43:b1:4f:e8: 2b:48:73:22:ca:eb:47:78:6e:a0:de:2a:aa:56:60: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:80:10:A3:0F:C4:A6:CB:CE:9F:FA:DC:BB:03:13:72:10:64:D7:EE X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:9f:e1:90:71:b0:a8:71:27:aa:78:fd:fc:98:a5:4b:51:28: 1f:8c:0d:9e:3b:3f:16:ea:b2:e2:7b:24:09:37:17:5a:23:a0: d9:cd:7f:43:fa:f7:ef:4e:86:7d:e8:40:36:f0:99:61:6c:38: fc:13:ae:72:e7:cb:1c:03:52:f5:73:7e:c5:31:0e:26:39:63: 4f:01:d8:5f:97:35:61:bc:72:68:17:d6:8b:a5:39:94:fe:b0: ee:0c:49:e5:e0:54:1f:f9:da:d4:b8:ae:41:38:64:f6:c5:60: 9a:4c:a4:42:46:f3:ca:57:38:85:03:37:f9:90:17:25:6b:3d: cc:96:6d:4e:88:4f:6e:0d:fc:db:10:6f:dd:a8:99:11:9e:fa: 44:41:06:0b:55:f0:fb:91:77:f3:30:3f:82:dd:ee:0b:65:a6: 5f:50:d8:f9:6e:6c:ec:1e:06:ac:2f:3d:cf:dc:84:79:08:3b: d1:e2:2b:c6:16:32:97:b7:8f:9f:a7:d1:38:2f:fc:9b:ae:5d: 41:6a:d7:09:9f:e6:4e:e1:71:65:53:cb:1b:30:9c:4a:9c:74: d3:a8:9e:6f:bb:aa:52:27:f2:c6:34:5c:76:da:28:ed:7b:55: e6:e9:b9:46:2b:65:24:08:72:d2:70:52:41:d4:e9:61:57:29: a4:3e:a2:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjRFMTExMC8GA1UEBRMoMUY2MzNGNzJEMUM2NzgxNkMyMDY0QTU2RTUzODNDRDk1 NEREQzBFNTAeFw0yNDA1MTcwODI4MjRaFw0yNDA1MjQwODI4MjRaMBgxFjAUBgNV BAMTDTY2NDcxNTI4LWI4M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNKtTk/OOx6lhCdR+aHTdYU83ptkVIllo68WpBbHcm7hu758p9PDLXyyocI//x tp1uK61qwDWXbYlBNgBLHCc511T+ZJR4f52khI3z6Aaqy+ZCAVti+udr+ORMQoIO 0M0w/vuRGhFa/zzhLB7GgqDGr2ZzBiMDPAI+8ZZWh2mpSucC/HFdKGoKK3gs5KNr 35fUBJZtQCkgMQztlRwT+nEnohd3e1+LuRjVHLvmPnkm3HagpNzPxl6CkYVyT5MF rSMNfFo1iFV2P7RF7RYbUDfFcMF/l2S38wz2sWfLXD1lYKKhhCBKIZQckT10Q7FP 6CtIcyLK60d4bqDeKqpWYNvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXYAQow/E psvOn/rcuwMTchBk1+4wHwYDVR0jBBgwFoAUH2M/ctHGeBbCBkpW5Tg82VTdwOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NEUxLzZCNTg0RDI0QzY3 RDExRUU4NzAyN0IzQUM0RjlBRTAyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDJNX2N0SEdlQmJDQmtwVzVUZzgyVlRkd09VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 NEUxLzZCNTg0RDI0QzY3RDExRUU4NzAyN0IzQUM0RjlBRTAyL0gyTV9jdEhHZUJi Q0JrcFc1VGc4MlZUZHdPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqf4ZBxsKhxJ6p4/fyYpUtRKB+MDZ47PxbqsuJ7JAk3F1ojoNnNf0P6 9+9Ohn3oQDbwmWFsOPwTrnLnyxwDUvVzfsUxDiY5Y08B2F+XNWG8cmgX1oulOZT+ sO4MSeXgVB/52tS4rkE4ZPbFYJpMpEJG88pXOIUDN/mQFyVrPcyWbU6IT24N/NsQ b92omRGe+kRBBgtV8PuRd/MwP4Ld7gtlpl9Q2PlubOweBqwvPc/chHkIO9HiK8YW Mpe3j5+n0Tgv/JuuXUFq1wmf5k7hcWVTyxswnEqcdNOonm+7qlIn8sY0XHbaKO17 VebpuUYrZSQIctJwUkHU6WFXKaQ+osw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:11 2024 by rpki-client on console-ams.rpki-client.org