$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft File: hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json) Hash identifier: K7I1aRVakWZHU+tEPiT+eURrIM+r1cel3qHNiY01hns= Subject key identifier: CA:22:E8:78:31:3A:DE:3B:B4:E7:A9:42:63:E6:22:6B:BE:B3:7E:EA Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Certificate serial: 0EC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft Manifest number: 0EB5 Signing time: Thu 02 May 2024 18:23:58 +0000 Manifest this update: Thu 02 May 2024 18:23:58 +0000 Manifest next update: Thu 09 May 2024 18:23:58 +0000 Files and hashes: 1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: X07bnQcSDeeJLcq3msJcA8CsBOGetpTu4ZBBENNBXKE=) 2: 0DC698EAAEF011E99D5EFB71C4F9AE02.roa (hash: +8RYSK6eqNDlGYWF5tbnRI9iU6P3WM/j6T4xLBka0V8=) 3: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: CzIfDi1evZoMUynT4uI9PBfLSN/5SoHurhEB1kJAMBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3783 (0xec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Validity Not Before: May 2 18:23:58 2024 GMT Not After : May 9 18:23:58 2024 GMT Subject: CN=6633da3e-4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:73:ea:0d:ef:f8:3c:1a:8f:12:cb:95:6d: b5:17:2c:a7:e0:3c:c2:bf:36:b1:88:65:0c:ca:d6: 37:d6:25:c4:61:c6:ca:66:24:3a:10:81:b2:09:c4: 74:d0:f6:8f:9b:2b:2d:50:d8:c4:bb:aa:1e:b3:6b: ac:2d:ca:75:2d:77:2c:f9:dd:f9:15:9e:2c:23:6f: c7:2e:15:08:2a:fb:54:2a:84:f2:23:98:d2:67:cf: 32:8b:ce:bf:09:35:9d:d8:f3:3e:89:73:c6:ff:4e: 23:1c:74:03:69:4c:a7:48:5d:84:16:8f:31:ef:69: 45:fe:ff:5b:81:14:a0:f7:7c:0d:f0:02:b2:bc:ad: b9:f5:5c:d9:7c:88:c5:02:aa:69:bb:e3:c8:58:f7: ab:97:2d:39:45:9c:a9:53:e4:f5:29:6c:36:9a:15: 1f:37:1a:e1:a1:ec:8f:b7:ac:75:18:66:d9:83:64: a4:19:0c:20:f4:48:10:ca:b0:58:73:7b:7b:20:aa: cd:70:c5:c5:ba:c9:5e:b5:d1:e1:31:ff:55:93:ab: 99:04:50:0d:5f:19:38:6e:62:3e:b2:72:fb:80:dd: 9c:38:ef:1b:7e:72:06:d4:eb:9d:37:69:1c:e3:7b: 0b:6c:d0:f0:43:98:6b:f4:f8:06:68:0a:48:50:82: c9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:E8:78:31:3A:DE:3B:B4:E7:A9:42:63:E6:22:6B:BE:B3:7E:EA X509v3 Authority Key Identifier: keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7c:9c:4d:50:6d:a6:4f:56:da:db:06:99:ce:41:ab:26:81: 39:6d:62:99:84:67:19:7a:52:ab:da:5f:12:76:b7:ff:a7:16: d9:a0:0f:23:2d:c1:a6:5e:2e:a2:2a:aa:00:c4:43:67:8a:89: 86:1b:26:9f:74:7e:cb:83:f8:3a:d4:dd:e4:5d:7d:30:07:5c: 7a:dd:10:0b:33:74:c0:39:01:d5:79:5f:d7:5e:91:41:2e:77: b0:fc:16:cb:3f:6f:c9:4f:3a:11:a4:06:e4:53:af:b5:98:e6: 54:ee:32:60:79:79:bb:97:0b:e0:1c:6e:9d:6f:ae:41:f1:c2: 49:57:29:e7:73:5e:7d:8f:96:06:7b:ba:62:7d:b0:4b:21:9d: 6f:c4:2a:04:b0:2c:6f:f3:86:b6:0d:f3:c9:23:ab:c7:34:63: c2:b0:1c:bf:19:3a:81:e2:a8:a3:3a:30:f8:26:c2:78:86:6a: a8:3e:6f:31:55:99:73:83:79:87:75:ee:f5:18:44:02:b6:81: 71:03:c9:31:7e:77:95:92:e7:d2:f7:67:b8:44:27:70:13:0b: 1d:d5:e6:72:e5:fd:6e:1d:af:94:13:b7:27:16:c7:2b:88:7e: b9:0b:40:40:c3:b6:14:88:f0:a5:9e:65:bf:ef:b6:01:0d:bd: 89:d7:6d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1 OEQ1NDg1NjUwHhcNMjQwNTAyMTgyMzU4WhcNMjQwNTA5MTgyMzU4WjAYMRYwFAYD VQQDEw02NjMzZGEzZS00NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvtz6g3v+DwajxLLlW21Fyyn4DzCvzaxiGUMytY31iXEYcbKZiQ6EIGyCcR0 0PaPmystUNjEu6oes2usLcp1LXcs+d35FZ4sI2/HLhUIKvtUKoTyI5jSZ88yi86/ CTWd2PM+iXPG/04jHHQDaUynSF2EFo8x72lF/v9bgRSg93wN8AKyvK259VzZfIjF Aqppu+PIWPerly05RZypU+T1KWw2mhUfNxrhoeyPt6x1GGbZg2SkGQwg9EgQyrBY c3t7IKrNcMXFusletdHhMf9Vk6uZBFANXxk4bmI+snL7gN2cOO8bfnIG1OudN2kc 43sLbNDwQ5hr9PgGaApIUILJ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoi6Hgx Ot47tOepQmPmImu+s37qMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0 MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR clpBSHhDQTJkbUpZMVVoV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXfJxNUG2mT1ba2waZzkGrJoE5bWKZhGcZelKr2l8Sdrf/pxbZoA8j LcGmXi6iKqoAxENniomGGyafdH7Lg/g61N3kXX0wB1x63RALM3TAOQHVeV/XXpFB Lnew/BbLP2/JTzoRpAbkU6+1mOZU7jJgeXm7lwvgHG6db65B8cJJVynnc159j5YG e7pifbBLIZ1vxCoEsCxv84a2DfPJI6vHNGPCsBy/GTqB4qijOjD4JsJ4hmqoPm8x VZlzg3mHde71GEQCtoFxA8kxfneVkufS92e4RCdwEwsd1eZy5f1uHa+UE7cnFscr iH65C0BAw7YUiPClnmW/77YBDb2J122K -----END CERTIFICATE-----Generated at Thu May 2 20:04:49 2024 by rpki-client on console-ams.rpki-client.org