$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: OOoVKXH5Z4D06jEHDDYFp2UyXnaWYeFLT5Fuyf7t2Y0= Subject key identifier: 39:E7:C0:94:74:69:4B:A9:D2:5C:2E:F1:CD:A4:1E:CC:E8:92:55:8E Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0947 Signing time: Tue 30 Apr 2024 21:38:16 +0000 Manifest this update: Tue 30 Apr 2024 21:38:16 +0000 Manifest next update: Tue 07 May 2024 21:38:15 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: NLP+QFHWW7asAkU4mfZeyyVeLw9ieWdnKKudBnJuiWs=) 2: F2E5239EEF5D11EE84EA6C77C4F9AE02.roa (hash: m/OfYLh3E4TBtxXakhujazsZkDgh8kpPyOXqE0aKz/8=) 3: C1B8D000B5BE11EEBB039D81C4F9AE02.roa (hash: Ktd8zTmAEP8d4po1PWCfJzfzivZrqBIqgha+n7WH0OM=) 4: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: D1T9Bfamf9UqltMEygl5sAovw+mF2OoLNzo4zqrOvm4=) 5: C6D09D889F1C11EEB377E239C4F9AE02.roa (hash: SlXpbG9lWuIPXhQxUrt1JFF2ice08/4LYD7zjDVYn4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Apr 30 21:38:16 2024 GMT Not After : May 7 21:38:15 2024 GMT Subject: CN=663164c8-7987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:fe:6d:19:fb:3f:e1:8d:bf:f6:7c:9a:a6: 15:31:3b:6c:62:20:cc:3a:d5:fb:ee:ad:77:fe:50: c7:7d:34:4b:37:e8:27:49:c6:be:20:c7:19:02:e8: 22:05:7c:bf:11:57:35:c4:cf:b1:18:0d:66:b2:f7: e1:a6:35:de:e8:81:2a:b5:01:23:dd:d2:e1:c3:7f: 3b:eb:1d:4b:ab:a9:fd:86:d9:c1:88:e8:3f:6b:cc: dd:dd:88:ae:61:87:47:d6:ad:db:33:6f:76:e1:2b: f3:45:45:f4:9a:9c:78:d6:fa:1a:1c:76:89:24:f5: 80:1f:a1:65:0d:34:dc:56:8e:77:8e:4d:fc:bf:5b: 06:eb:9f:35:db:14:10:6b:a8:28:85:d8:86:0a:6e: 61:12:89:33:f5:85:e5:3e:d1:c5:14:e4:73:77:29: f9:3d:d8:8d:fa:21:ec:b5:e4:f5:3f:72:55:78:18: 08:38:20:54:6a:04:41:86:d9:a2:f4:35:98:4d:7e: 06:2b:cf:fe:7f:97:dc:c2:60:a5:77:cc:39:81:97: fb:7f:43:96:6d:42:84:ba:cb:bc:94:da:a1:93:74: 80:fd:98:7a:c8:cf:95:f1:7d:21:0c:68:ab:25:a6: 4c:0a:91:b7:a7:bb:5b:44:7a:7b:e3:a5:be:63:de: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E7:C0:94:74:69:4B:A9:D2:5C:2E:F1:CD:A4:1E:CC:E8:92:55:8E X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:0f:75:34:22:60:ce:bb:54:07:71:84:46:c5:7a:54:94:b0: bc:58:87:4f:65:f1:4a:48:fd:46:08:3f:01:65:12:36:da:5c: 24:c5:d2:a1:9d:c5:19:65:bf:fd:d8:ac:9e:ff:14:e5:4b:7b: af:6e:c8:c7:bf:37:40:50:3d:d8:d2:53:8b:0f:ef:06:02:03: ef:fc:18:e9:09:fe:dd:5e:88:05:2b:7c:1e:4a:0e:b6:f8:47: 32:b0:67:f8:a6:fb:49:02:52:07:8e:6f:fd:a4:5a:41:fc:e1: e0:c7:60:22:17:4a:db:4a:27:88:97:62:b0:60:d6:8a:c3:ba: 7e:44:9b:52:50:ef:69:69:2e:9e:c5:15:6e:75:07:1c:93:bd: ec:01:b3:6d:e1:6a:65:38:e5:41:34:9b:7a:31:b0:d3:04:f9: 81:eb:61:f6:ae:19:00:df:94:37:8c:b4:81:38:c8:96:b6:14: 49:07:04:96:e0:bd:0c:2a:79:f9:9c:da:c8:6a:71:d5:48:0c: 8d:0c:da:17:04:7a:8c:16:e8:18:13:f7:b5:77:b5:67:1c:aa: 0a:29:4c:35:f8:30:1b:e5:23:70:a0:05:e5:a0:bb:c4:bb:30: b4:03:6f:43:df:14:36:39:b5:53:53:10:5d:1a:d9:c7:5e:44: 4e:d2:97:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjQwNDMwMjEzODE2WhcNMjQwNTA3MjEzODE1WjAYMRYwFAYD VQQDEw02NjMxNjRjOC03OTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WT+bRn7P+GNv/Z8mqYVMTtsYiDMOtX77q13/lDHfTRLN+gnSca+IMcZAugi BXy/EVc1xM+xGA1msvfhpjXe6IEqtQEj3dLhw3876x1Lq6n9htnBiOg/a8zd3Yiu YYdH1q3bM2924SvzRUX0mpx41voaHHaJJPWAH6FlDTTcVo53jk38v1sG65812xQQ a6gohdiGCm5hEokz9YXlPtHFFORzdyn5PdiN+iHsteT1P3JVeBgIOCBUagRBhtmi 9DWYTX4GK8/+f5fcwmCld8w5gZf7f0OWbUKEusu8lNqhk3SA/Zh6yM+V8X0hDGir JaZMCpG3p7tbRHp746W+Y95XiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnnwJR0 aUup0lwu8c2kHszoklWOMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwD3U0ImDOu1QHcYRGxXpUlLC8WIdPZfFKSP1GCD8BZRI22lwkxdKh ncUZZb/92Kye/xTlS3uvbsjHvzdAUD3Y0lOLD+8GAgPv/BjpCf7dXogFK3weSg62 +EcysGf4pvtJAlIHjm/9pFpB/OHgx2AiF0rbSieIl2KwYNaKw7p+RJtSUO9paS6e xRVudQcck73sAbNt4WplOOVBNJt6MbDTBPmB62H2rhkA35Q3jLSBOMiWthRJBwSW 4L0MKnn5nNrIanHVSAyNDNoXBHqMFugYE/e1d7VnHKoKKUw1+DAb5SNwoAXloLvE uzC0A29D3xQ2ObVTUxBdGtnHXkRO0pdi -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:16 2024 by rpki-client on console-fra.rpki-client.org