$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft File: HUWbQ2csaQaJajtlEExG6zmBnb0.mft (raw, json) Hash identifier: 5Y1Rvtqn9K60BSuwNPoaZT/sXcheSjohuhQmHtabGWI= Subject key identifier: 47:9D:80:43:6F:3A:80:7E:B9:EF:37:0C:38:DE:7E:F9:1F:2A:A9:30 Authority key identifier: 1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD Certificate issuer: /CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD Certificate serial: 125A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft Manifest number: 1259 Signing time: Mon 06 May 2024 17:44:35 +0000 Manifest this update: Mon 06 May 2024 17:44:34 +0000 Manifest next update: Mon 13 May 2024 17:44:34 +0000 Files and hashes: 1: HUWbQ2csaQaJajtlEExG6zmBnb0.crl (hash: ELBnyjoQVDlZLIqmJKx5Ujvuob1MZnEIx+8aucm2jV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.crl rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4698 (0x125a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD Validity Not Before: May 6 17:44:34 2024 GMT Not After : May 13 17:44:34 2024 GMT Subject: CN=66391702-77d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:90:36:d8:27:2c:74:8b:e3:3a:0b:88:47: 5a:16:ca:24:b9:24:e4:76:26:bf:ec:27:f3:dc:a1: 9e:92:b9:65:f1:7b:f7:83:2e:e2:9c:34:f5:14:69: 63:69:d6:be:2d:01:97:2b:42:95:14:64:89:5a:9a: 3c:6e:e0:06:e3:9e:17:ce:23:2b:a7:77:03:29:ec: ab:9d:1f:da:fb:a4:b5:04:53:43:57:c8:9d:62:52: a2:2b:ce:c7:35:83:5f:2d:49:d2:a4:2e:bc:85:c2: 51:5f:4c:70:28:f0:7b:da:83:77:3a:34:74:91:ff: 42:c1:c3:c4:1c:64:64:e2:0c:d0:a7:4d:cb:da:f2: d9:fa:6b:88:8d:31:7a:32:c1:50:8b:c9:62:13:33: e9:de:e6:e9:65:34:1a:5d:36:a5:d8:3e:a1:80:88: 35:67:70:67:b5:2d:47:d7:2d:34:4b:d0:00:14:11: 7e:7f:40:7a:cb:92:3e:49:2f:97:5f:da:ef:07:27: dc:b0:f2:95:67:64:8f:9e:ab:27:da:00:b8:31:46: ec:fc:cc:b5:3b:ce:4b:9f:d3:a7:5f:bc:f5:e7:a4: fd:ed:6d:a4:ad:fd:1f:00:c8:43:e0:fe:7d:0c:65: e7:83:24:de:26:8e:6a:be:0e:47:cb:3e:bd:bd:eb: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9D:80:43:6F:3A:80:7E:B9:EF:37:0C:38:DE:7E:F9:1F:2A:A9:30 X509v3 Authority Key Identifier: keyid:1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:7c:d2:d5:99:90:c3:4c:27:b4:65:f3:24:16:5c:2d:6f:c5: 29:d6:80:f5:09:c5:c3:22:17:73:0a:1b:a5:f7:69:e5:71:68: 4d:1f:f0:ab:c5:3b:53:c7:00:18:df:70:c5:5c:fe:29:6d:14: dd:a8:7c:eb:c8:3f:19:ec:24:8a:5e:a8:df:91:ed:7d:30:e7: f9:88:02:38:7b:8b:43:b5:57:51:84:5e:02:9f:ce:0c:30:64: 30:b3:aa:52:6c:c4:14:57:ed:cd:d7:7a:f6:02:a1:9f:33:b9: d8:6e:55:6e:69:8f:9b:03:ca:d4:80:39:a1:61:44:e1:27:db: c7:a0:42:4c:4f:e2:10:44:e5:7f:4f:08:2d:2d:cb:1c:30:6a: b0:88:58:24:fc:b6:ca:99:e4:42:32:6a:a7:73:9d:8c:21:f2: 09:77:98:70:1b:1f:d6:b4:78:12:f6:8e:5b:fe:0f:d1:b7:f4: 82:f5:15:e9:d9:af:7a:f9:25:8b:1d:0d:2f:10:21:a8:f8:41: aa:fb:3d:e9:a6:e2:c6:7d:cc:ca:8d:b3:6a:5e:9a:9a:7d:8e: 59:6d:45:83:74:da:05:bd:2e:76:39:32:17:b5:62:32:0a:61: 3d:9c:5a:e0:e3:3d:dd:42:93:8a:0d:6c:89:36:7d:67:b1:ad: 03:ed:ae:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEREYxMTAvBgNVBAUTKDFENDU5QjQzNjcyQzY5MDY4OTZBM0I2NTEwNEM0NkVC Mzk4MTlEQkQwHhcNMjQwNTA2MTc0NDM0WhcNMjQwNTEzMTc0NDM0WjAYMRYwFAYD VQQDEw02NjM5MTcwMi03N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBCQNtgnLHSL4zoLiEdaFsokuSTkdia/7Cfz3KGekrll8Xv3gy7inDT1FGlj ada+LQGXK0KVFGSJWpo8buAG454XziMrp3cDKeyrnR/a+6S1BFNDV8idYlKiK87H NYNfLUnSpC68hcJRX0xwKPB72oN3OjR0kf9CwcPEHGRk4gzQp03L2vLZ+muIjTF6 MsFQi8liEzPp3ubpZTQaXTal2D6hgIg1Z3BntS1H1y00S9AAFBF+f0B6y5I+SS+X X9rvByfcsPKVZ2SPnqsn2gC4MUbs/My1O85Ln9OnX7z156T97W2krf0fAMhD4P59 DGXngyTeJo5qvg5Hyz69vetsBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEedgENv OoB+ue83DDjefvkfKqkwMB8GA1UdIwQYMBaAFB1Fm0NnLGkGiWo7ZRBMRus5gZ29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRERi9ERTE0NDZBOEFB MDcxMUU4QjI1QUZGMzBDNEY5QUUwMi9IVVdiUTJjc2FRYUphanRsRUV4RzZ6bUJu YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVV2JRMmNzYVFhSmFqdGxFRXhHNnptQm5iMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRERi9ERTE0NDZBOEFBMDcxMUU4QjI1QUZGMzBDNEY5QUUwMi9IVVdiUTJjc2FR YUphanRsRUV4RzZ6bUJuYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/fNLVmZDDTCe0ZfMkFlwtb8Up1oD1CcXDIhdzChul92nlcWhNH/Cr xTtTxwAY33DFXP4pbRTdqHzryD8Z7CSKXqjfke19MOf5iAI4e4tDtVdRhF4Cn84M MGQws6pSbMQUV+3N13r2AqGfM7nYblVuaY+bA8rUgDmhYUThJ9vHoEJMT+IQROV/ TwgtLcscMGqwiFgk/LbKmeRCMmqnc52MIfIJd5hwGx/WtHgS9o5b/g/Rt/SC9RXp 2a96+SWLHQ0vECGo+EGq+z3ppuLGfczKjbNqXpqafY5ZbUWDdNoFvS52OTIXtWIy CmE9nFrg4z3dQpOKDWyJNn1nsa0D7a4C -----END CERTIFICATE-----Generated at Mon May 6 20:19:41 2024 by rpki-client on console-ams.rpki-client.org