$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft File: Ht151WWBY19_MpfG0nDHN0l4nj0.mft (raw, json) Hash identifier: 32/uzXRUVbbZzWlS6rakM+h6PuCXEzz/BZ0XK3BCM6w= Subject key identifier: 69:84:CA:55:2D:AC:4F:E3:72:3D:34:72:2A:4D:A6:32:F9:CC:DB:CC Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft Manifest number: 04B3 Signing time: Fri 03 May 2024 01:39:12 +0000 Manifest this update: Fri 03 May 2024 01:39:12 +0000 Manifest next update: Fri 10 May 2024 01:39:12 +0000 Files and hashes: 1: Ht151WWBY19_MpfG0nDHN0l4nj0.crl (hash: 16GYW4SDy+0SD0bHvHQdCOBMONTIwpLjnvT0XdV6qRQ=) 2: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (hash: P7UGqQ1deBslma8ATn7v/QA04pUXLiOR7SWtpJUAbVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Validity Not Before: May 3 01:39:12 2024 GMT Not After : May 10 01:39:12 2024 GMT Subject: CN=66344040-5dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:4b:7c:d2:2a:09:3f:d9:46:59:de:78:1d: 43:ba:0f:28:5a:d4:c3:85:e3:ed:fd:60:69:0c:7d: 68:77:79:c8:d5:b8:5a:59:fd:7d:e8:5a:c1:0b:43: d6:d8:e0:72:61:f4:9c:fd:4b:46:6f:b2:e8:38:5e: 39:62:7b:aa:dc:7e:18:75:20:8c:c1:b4:d4:75:20: 4d:e5:13:7b:53:42:da:c2:6c:f2:73:95:67:d0:ad: b0:ce:1d:26:69:d4:48:d5:4b:ad:2d:dc:31:7c:bb: 94:0a:48:15:0e:1f:54:8a:74:0d:1a:ce:5f:3b:9d: 88:2b:f1:3d:e0:14:a9:ed:08:45:4f:82:ba:58:7e: 03:d6:11:c8:1a:51:ec:8c:ac:c7:1d:b5:44:85:b8: 6c:d1:f4:b3:02:50:ae:3d:ee:1e:c6:25:d7:c5:bb: 5d:76:a3:ed:d5:32:3f:10:08:86:db:d0:51:31:4d: 27:72:39:52:45:fc:d2:4a:68:7d:df:b3:ff:b1:85: 11:15:ab:15:29:55:70:6d:e3:ec:db:ec:e8:8a:71: fa:a2:07:66:e0:76:70:10:dd:3e:b5:4c:7e:fe:06: a2:16:89:1a:42:9f:a1:00:8e:44:2f:e5:19:ec:af: 09:5e:f4:d9:1c:00:43:58:0f:e1:4b:1b:e6:3d:2b: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:CA:55:2D:AC:4F:E3:72:3D:34:72:2A:4D:A6:32:F9:CC:DB:CC X509v3 Authority Key Identifier: keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4b:b3:99:4c:21:95:c2:8a:7c:fb:51:c4:d5:61:10:2a:12: 5f:cc:fd:cc:87:83:b0:79:4a:6f:ba:c5:4d:41:ae:1c:71:7b: c2:2e:b6:ac:2f:10:14:65:7a:c8:9d:a1:67:a3:20:22:98:37: 9b:81:5d:bb:52:ef:7f:cf:d9:1f:25:10:48:22:66:91:a4:6b: c6:8b:d0:cf:27:50:2c:5a:f5:24:64:5e:65:db:da:ef:33:e5: 9a:a5:5c:a6:87:8f:ce:40:a4:f1:8b:08:80:f7:49:94:b2:9d: 57:59:ba:90:4d:39:7b:5a:77:6d:44:68:b0:6b:05:55:10:9c: d1:2f:78:50:1e:23:1a:95:02:7a:77:fa:5d:fe:bb:3e:8c:86: b7:8a:7d:24:7c:4c:f2:c7:70:63:b4:24:c4:68:c8:f6:44:7f: 9f:af:0c:82:ed:d0:d2:ac:13:2f:26:84:0e:ff:3d:16:0d:a9: 32:0f:4a:c0:1b:1a:c1:81:84:63:7d:17:2f:9d:0a:da:a8:58: 46:f1:ad:06:79:ec:18:70:04:90:fb:c9:7e:63:3e:1c:74:79: a0:cd:f8:fd:75:ee:63:c3:0f:da:08:dd:c4:ed:46:d4:c1:37: 55:cf:02:ac:b8:6c:19:04:eb:1a:ef:02:f2:57:45:cf:bc:10: 43:92:f7:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3 NDk3ODlFM0QwHhcNMjQwNTAzMDEzOTEyWhcNMjQwNTEwMDEzOTEyWjAYMRYwFAYD VQQDEw02NjM0NDA0MC01ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4dLfNIqCT/ZRlneeB1Dug8oWtTDhePt/WBpDH1od3nI1bhaWf196FrBC0PW 2OByYfSc/UtGb7LoOF45Ynuq3H4YdSCMwbTUdSBN5RN7U0Lawmzyc5Vn0K2wzh0m adRI1UutLdwxfLuUCkgVDh9UinQNGs5fO52IK/E94BSp7QhFT4K6WH4D1hHIGlHs jKzHHbVEhbhs0fSzAlCuPe4exiXXxbtddqPt1TI/EAiG29BRMU0ncjlSRfzSSmh9 37P/sYURFasVKVVwbePs2+zoinH6ogdm4HZwEN0+tUx+/gaiFokaQp+hAI5EL+UZ 7K8JXvTZHABDWA/hSxvmPSsUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmEylUt rE/jcj00cipNpjL5zNvMMB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS81NkU5QTdBNERGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkx OV9NcGZHMG5ESE4wbDRuajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNS7OZTCGVwop8+1HE1WEQKhJfzP3Mh4OweUpvusVNQa4ccXvCLras LxAUZXrInaFnoyAimDebgV27Uu9/z9kfJRBIImaRpGvGi9DPJ1AsWvUkZF5l29rv M+WapVymh4/OQKTxiwiA90mUsp1XWbqQTTl7WndtRGiwawVVEJzRL3hQHiMalQJ6 d/pd/rs+jIa3in0kfEzyx3BjtCTEaMj2RH+frwyC7dDSrBMvJoQO/z0WDakyD0rA GxrBgYRjfRcvnQraqFhG8a0GeewYcASQ+8l+Yz4cdHmgzfj9de5jww/aCN3E7UbU wTdVzwKsuGwZBOsa7wLyV0XPvBBDkvdz -----END CERTIFICATE-----Generated at Fri May 3 04:45:18 2024 by rpki-client on console-fra.rpki-client.org