$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json) Hash identifier: TmjBAkxhBoPNZiJbLLm616u3CYS5oGTWMcSA2eG48x0= Subject key identifier: 74:F2:6A:05:93:3D:E7:53:7D:7F:F5:4A:15:BC:D6:CB:03:90:40:3F Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10 Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10 Certificate serial: 1427 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft Manifest number: 141A Signing time: Fri 26 Jul 2024 17:24:38 +0000 Manifest this update: Fri 26 Jul 2024 17:24:37 +0000 Manifest next update: Fri 02 Aug 2024 17:24:37 +0000 Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: EIqjSUqbxXZqG2CFB5Yn7tFcucbGjYrDzXGA7Bgvzoo=) 2: 1E7AFF46066811ED8098BF45C4F9AE02.roa (hash: HDKfZcZPdG/X8OI7B4ViCixu1TPq6S9evUYdHeDQj+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Aug 2024 15:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5159 (0x1427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10 Validity Not Before: Jul 26 17:24:37 2024 GMT Not After : Aug 2 17:24:37 2024 GMT Subject: CN=66a3dbd5-7fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:23:06:f9:65:80:f3:19:70:4a:a7:8b:bf: 95:8e:8a:09:58:3c:d9:e2:4f:39:22:36:aa:5d:bf: 13:1d:fa:ef:6c:19:b2:14:a6:81:2a:a1:47:93:40: f2:da:60:c9:8d:9a:66:5c:f7:00:f2:ca:01:1f:d5: 6b:3b:f2:8e:0c:a0:af:0f:a0:bb:d9:ac:b8:53:11: 8a:c8:c6:5f:2b:c1:b2:ab:3f:11:29:f1:64:27:65: b5:2e:07:f2:7f:89:cc:42:a0:fb:42:41:b1:03:fb: cc:de:0b:95:cb:a4:5e:c3:79:90:f3:5c:d6:e0:c7: 56:7c:b3:ff:21:d3:34:90:21:81:79:58:5e:4b:09: f3:2d:88:a3:c8:b7:a8:5d:86:fc:b0:d5:86:c2:9f: fe:7a:f9:3c:05:92:56:c8:5b:4c:56:db:8f:19:10: 65:6e:78:a1:0f:d9:78:de:91:cc:fe:82:4e:a9:a8: 57:ba:e2:de:5f:46:08:53:78:4d:07:6a:de:fb:d4: 21:cc:cc:4f:23:fd:8a:fd:4f:b4:83:28:d2:03:46: fb:4a:af:7e:15:90:51:ac:79:39:d5:e8:3f:62:50: f0:e9:32:2b:70:79:4d:b4:56:5e:75:43:20:bc:39: 60:d1:45:b7:6d:77:dc:a4:91:f7:1e:f4:50:7e:a7: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F2:6A:05:93:3D:E7:53:7D:7F:F5:4A:15:BC:D6:CB:03:90:40:3F X509v3 Authority Key Identifier: keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:50:16:0e:2b:8e:0e:55:e2:8e:4c:78:f2:4b:b1:be:c3:9e: c6:3a:63:39:bb:34:1e:b9:5b:1a:3f:13:fb:62:1b:33:10:7f: 3f:ba:2c:18:91:3d:ac:68:11:44:bd:8d:cb:19:91:d1:b6:ef: e2:79:88:92:31:c1:34:a8:c1:4d:17:5e:60:ab:e9:cd:d0:d3: f1:4f:03:9a:ec:d3:4a:28:fd:04:55:f6:21:94:1b:e7:6b:0a: 88:59:23:c1:26:4b:dd:06:4d:63:fc:1a:3b:ce:19:b1:48:d6: 9a:ea:9f:ad:e9:f3:ff:40:10:d5:1c:69:fa:76:99:30:57:7b: 17:3d:6d:79:7d:98:0f:9a:9c:52:90:2c:99:ae:56:cc:74:6f: 3c:34:87:68:d4:85:41:bd:23:82:26:47:f8:e6:5b:10:6c:d1: 08:52:be:52:d0:92:09:a7:ed:cb:89:6c:66:f1:5d:88:03:da: a8:1b:aa:1e:03:49:74:a3:4c:bf:ac:84:5d:ea:bb:a4:91:db: 90:0e:5c:9c:a2:73:7b:c4:06:f0:34:8d:40:6e:45:40:e8:c1: e1:a3:30:09:5a:81:43:0a:f7:53:e9:6e:77:c4:25:37:12:e1: e8:3b:72:b0:19:5b:a5:af:ed:a6:e3:59:da:31:ab:7c:92:45: 84:72:9f:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDFFMTIzODQ1NjM3MUU3NDQ4OTQ2MjJFOThBQzFFRTU1 QjQxNDVFMTAwHhcNMjQwNzI2MTcyNDM3WhcNMjQwODAyMTcyNDM3WjAYMRYwFAYD VQQDEw02NmEzZGJkNS03ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fwjBvllgPMZcEqni7+VjooJWDzZ4k85IjaqXb8THfrvbBmyFKaBKqFHk0Dy 2mDJjZpmXPcA8soBH9VrO/KODKCvD6C72ay4UxGKyMZfK8Gyqz8RKfFkJ2W1Lgfy f4nMQqD7QkGxA/vM3guVy6Rew3mQ81zW4MdWfLP/IdM0kCGBeVheSwnzLYijyLeo XYb8sNWGwp/+evk8BZJWyFtMVtuPGRBlbnihD9l43pHM/oJOqahXuuLeX0YIU3hN B2re+9QhzMxPI/2K/U+0gyjSA0b7Sq9+FZBRrHk51eg/YlDw6TIrcHlNtFZedUMg vDlg0UW3bXfcpJH3HvRQfqdgRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTyagWT PedTfX/1ShW81ssDkEA/MB8GA1UdIwQYMBaAFB4SOEVjcedEiUYi6YrB7lW0FF4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC82OTdFMzU2QTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUwU0pSaUxwaXNIdVZiUVVY aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hoSTRSV054NTBTSlJpTHBpc0h1VmJRVVhoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC82OTdFMzU2QTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUw U0pSaUxwaXNIdVZiUVVYaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWUBYOK44OVeKOTHjyS7G+w57GOmM5uzQeuVsaPxP7YhszEH8/uiwY kT2saBFEvY3LGZHRtu/ieYiSMcE0qMFNF15gq+nN0NPxTwOa7NNKKP0EVfYhlBvn awqIWSPBJkvdBk1j/Bo7zhmxSNaa6p+t6fP/QBDVHGn6dpkwV3sXPW15fZgPmpxS kCyZrlbMdG88NIdo1IVBvSOCJkf45lsQbNEIUr5S0JIJp+3LiWxm8V2IA9qoG6oe A0l0o0y/rIRd6rukkduQDlyconN7xAbwNI1AbkVA6MHhozAJWoFDCvdT6W53xCU3 EuHoO3KwGVulr+2m41naMat8kkWEcp8I -----END CERTIFICATE-----Generated at Fri Jul 26 18:53:16 2024 by rpki-client on console-ams.rpki-client.org