$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: U+QSN+Ts5RQu3iiea33w75DIOxswEVD+e57hSXv1Cx4= Subject key identifier: A9:C4:29:A4:A5:B5:A3:33:A8:10:59:3B:45:5D:A6:CF:DB:55:2D:D9 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 2E Signing time: Fri 17 May 2024 08:36:02 +0000 Manifest this update: Fri 17 May 2024 08:36:01 +0000 Manifest next update: Fri 24 May 2024 08:36:01 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: U9DlYvIeeG0H+a2rfvz/hxBIoMjTE6+JctKWWX+xPCI=) 2: 6D2E4280D4D711EE89EF955BC4F9AE02.roa (hash: 7a4zJTtUNaVChBwfNvXJUvEKrqEA15NjZfo+j3NZeYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: May 17 08:36:01 2024 GMT Not After : May 24 08:36:01 2024 GMT Subject: CN=664716f2-bb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:1b:8b:00:7c:c6:e6:61:02:b2:d3:7c:74: 95:94:16:e9:65:d4:92:ab:7b:f0:95:25:b8:19:67: 47:1b:59:a7:76:b4:a4:b7:b6:dc:68:fd:37:b6:ad: d2:fc:ea:f8:82:50:30:85:d2:1f:64:a1:82:33:1d: 02:23:50:69:d5:5f:83:0a:c0:db:dc:5a:6b:27:ef: 1c:28:81:cf:67:1f:1d:20:62:bd:4a:f2:ad:75:83: 34:14:9e:ca:a5:ab:de:b8:86:df:19:83:02:4c:04: 15:89:3f:9f:11:a7:0f:e7:55:dd:82:35:8f:e6:a4: 4f:9f:2d:96:72:fb:f0:47:45:67:32:43:93:51:07: 23:a2:4f:ea:bd:9e:b8:cf:f0:7c:b8:2d:f6:c8:99: 25:6a:6f:41:e0:9d:f5:ae:98:43:2f:cf:76:15:ee: 3f:6d:28:eb:c0:bb:d0:1c:f1:4c:b0:66:31:8b:58: ad:af:b6:93:c6:49:12:f8:6f:36:e4:40:f0:43:21: dc:b5:b8:0e:c0:11:f9:55:63:be:bc:de:0a:88:e9: 99:2d:d9:b0:d0:4b:bd:3d:1c:b8:0c:24:c9:cc:10: 48:66:67:4c:a7:1d:83:ac:c7:59:3e:19:ac:4d:3f: d4:fb:a6:21:b1:fc:53:96:42:6e:24:ff:c6:b8:b5: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:29:A4:A5:B5:A3:33:A8:10:59:3B:45:5D:A6:CF:DB:55:2D:D9 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:3b:b6:64:02:2a:46:07:9f:76:c9:9a:d2:2b:24:ea:cb: d1:04:fc:11:0e:4e:7c:f9:1d:7c:99:b7:52:fe:77:84:b9:10: dc:6b:56:60:09:3f:19:d5:98:dd:0f:62:dd:f8:c1:f7:ac:50: 51:a9:10:01:f1:4a:94:16:10:9f:02:25:ce:a7:f6:c4:de:3c: 12:9a:c0:ca:55:4f:6d:bd:cd:3e:d2:d1:f0:4c:9d:8e:47:54: 03:8b:dc:c8:40:80:94:81:a8:38:94:95:e9:e4:d8:ea:98:05: ee:1c:39:9d:57:ea:2f:5f:6d:05:bb:12:2b:8a:f0:af:8e:23: 1d:0f:b1:d7:3d:4f:72:33:22:55:af:d6:1f:55:58:b7:10:5a: ff:a5:ef:af:98:fc:72:ea:69:49:a9:b8:39:c8:99:7a:62:da: 9a:21:db:71:8a:b6:c4:e1:da:c2:6c:38:cc:da:6d:28:2e:36: 61:75:a2:0b:84:cd:05:45:f9:14:48:d9:f0:9d:cc:6d:55:c8: 4c:c6:5c:da:dd:c3:14:de:9a:9b:22:5c:5e:54:c9:ad:03:a5: c7:90:be:9d:ee:30:c5:0d:3a:dd:12:76:f2:22:fa:6b:6e:21: 4d:0d:e1:6c:10:f7:81:fc:2e:e7:82:87:81:70:97:1f:e3:85: 62:7f:f2:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEQ3MjExMC8GA1UEBRMoMUVCOUFFOEJGNTk1OUZFOEJGMkVCODJCOTIzQjcxN0VG RjMxMDZDNTAeFw0yNDA1MTcwODM2MDFaFw0yNDA1MjQwODM2MDFaMBgxFjAUBgNV BAMTDTY2NDcxNmYyLWJiNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXRRuLAHzG5mECstN8dJWUFull1JKre/CVJbgZZ0cbWad2tKS3ttxo/Te2rdL8 6viCUDCF0h9koYIzHQIjUGnVX4MKwNvcWmsn7xwogc9nHx0gYr1K8q11gzQUnsql q964ht8ZgwJMBBWJP58Rpw/nVd2CNY/mpE+fLZZy+/BHRWcyQ5NRByOiT+q9nrjP 8Hy4LfbImSVqb0HgnfWumEMvz3YV7j9tKOvAu9Ac8UywZjGLWK2vtpPGSRL4bzbk QPBDIdy1uA7AEflVY7683gqI6Zkt2bDQS709HLgMJMnMEEhmZ0ynHYOsx1k+GaxN P9T7piGx/FOWQm4k/8a4tU+vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqcQppKW1 ozOoEFk7RV2mz9tVLdkwHwYDVR0jBBgwFoAUHrmui/WVn+i/Lrgrkjtxfv8xBsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRDcyLzhCMjVBRDA0RDIy QjExRUVCQzE0NTM0M0M0RjlBRTAyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHJtdWlfV1ZuLWlfTHJncmtqdHhmdjh4QnNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw RDcyLzhCMjVBRDA0RDIyQjExRUVCQzE0NTM0M0M0RjlBRTAyL0hybXVpX1dWbi1p X0xyZ3JranR4ZnY4eEJzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABvFO7ZkAipGB592yZrSKyTqy9EE/BEOTnz5HXyZt1L+d4S5ENxrVmAJ PxnVmN0PYt34wfesUFGpEAHxSpQWEJ8CJc6n9sTePBKawMpVT229zT7S0fBMnY5H VAOL3MhAgJSBqDiUlenk2OqYBe4cOZ1X6i9fbQW7EiuK8K+OIx0Psdc9T3IzIlWv 1h9VWLcQWv+l76+Y/HLqaUmpuDnImXpi2poh23GKtsTh2sJsOMzabSguNmF1oguE zQVF+RRI2fCdzG1VyEzGXNrdwxTempsiXF5Uya0DpceQvp3uMMUNOt0SdvIi+mtu IU0N4WwQ94H8LueCh4Fwlx/jhWJ/8mI= -----END CERTIFICATE-----Generated at Fri May 17 10:59:12 2024 by rpki-client on console-ams.rpki-client.org