$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: 3pWnODYq+iG71Pus0yWITIC/4XuOJAm9JiqGPeh3mss= Subject key identifier: A3:F3:5B:78:14:A3:39:93:B9:73:31:F8:15:3D:8A:7F:AF:84:48:19 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1A4E Signing time: Thu 02 May 2024 16:49:25 +0000 Manifest this update: Thu 02 May 2024 16:49:25 +0000 Manifest next update: Thu 09 May 2024 16:49:25 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: o9dTAzjoDA1dYxaKmRfPKcU4+dQCzMNraBiB8Uw7yTY=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: pX3hZB2u0H4CAS9sABzKZdEPpUmZBg1+59WzYQkXs6s=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: XhTsav0xpJjWdlplehBc3Nc1KWkAolJry5gRZodOyhc=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: WQw5P844ke2McgHsphlVTOCFSi5xiNEtibfYLinSXwQ=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 7ewrZNOz6VL8Fm9zIDpvbHy1sVwX8YMvmb18EChSv50=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: I0EDghQGwSBHllmUxahQGtYN3eNUu0DeWPn3Gpo3r7Y=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: vBN8V5Bwq0M/bzvGvLx2+C7e6WLDDWqvE5nUmzulSrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6794 (0x1a8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: May 2 16:49:25 2024 GMT Not After : May 9 16:49:25 2024 GMT Subject: CN=6633c415-ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:dc:e6:4f:0e:07:d2:cb:d3:6a:48:fe:e4: af:f6:ce:b4:3c:2d:04:a3:d1:03:62:35:4e:05:2a: a7:46:3d:2b:79:fc:41:e6:7f:61:32:b3:8d:a5:79: 68:9b:a0:43:6e:59:04:24:69:de:80:b2:42:c7:93: cc:76:35:53:10:94:ed:1b:2c:c8:90:6d:69:66:fa: 01:5c:83:dd:b6:b3:e7:3f:35:d6:b6:94:3a:a5:ed: 07:44:cb:9a:f5:6c:a8:40:62:76:f8:89:8b:47:7f: 50:60:db:a4:14:e1:9f:00:ce:ae:ff:23:28:bf:82: 53:9f:16:b9:ee:13:7f:95:12:2d:3f:bc:07:2e:1f: 3b:35:a1:87:23:91:d7:2c:70:b9:e5:26:01:34:b2: c1:4f:f0:5c:be:60:93:83:32:8e:25:01:d4:95:55: bf:89:5c:97:cf:04:e1:b5:7f:ec:4e:da:5e:a1:ee: bf:59:0d:c8:cb:d5:2d:4f:37:e6:72:06:ce:6c:b7: 2e:31:ee:e1:51:5f:35:a9:35:bb:2c:e5:be:d6:c8: 80:bc:0d:b0:63:ae:a2:f5:b1:9d:47:ad:cd:97:7f: ab:65:69:ef:87:4e:be:c9:4c:4a:9d:bd:78:a1:cc: 82:04:07:d0:4b:f2:89:ef:9c:78:f2:92:a0:0e:38: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F3:5B:78:14:A3:39:93:B9:73:31:F8:15:3D:8A:7F:AF:84:48:19 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:a3:08:64:70:52:cb:77:e2:21:14:c5:88:b1:36:a5:9b: 3c:5c:8c:1e:3f:37:11:a8:38:3d:d9:32:79:10:62:cf:89:89: f1:52:65:0a:66:10:8a:75:c4:2a:df:29:c0:7a:c1:d5:8d:96: a9:ec:c9:0a:e7:07:09:a8:ac:f4:40:1d:21:bf:18:6a:3f:52: a1:51:90:5b:27:28:17:ef:bc:db:73:37:34:27:67:98:6b:47: 81:91:95:bd:a8:ae:66:95:d4:cd:6d:fe:51:e0:8b:2a:91:d6: 38:7f:28:17:b3:65:0a:a5:d6:f1:7a:ac:15:56:0d:43:ea:c8: 59:98:72:72:9d:4a:a3:0e:56:60:b1:6e:60:1b:b6:e4:6a:48: 09:dc:f8:e1:05:6a:78:8e:db:e8:46:de:3a:cf:17:03:60:98: 6e:b7:bc:43:d4:21:40:93:97:ed:c3:49:14:64:8d:f2:11:3a: 22:d6:b5:33:d4:e5:1a:8d:7c:ac:74:33:08:24:72:b7:a9:98: 07:34:eb:ba:c1:13:25:e8:28:1d:1a:cd:7f:ef:42:09:17:f3: 11:14:a6:b1:bd:a8:42:9f:c9:78:e6:2f:bf:3b:72:d8:f0:a7: 85:a0:40:49:d2:2f:f9:b8:85:1a:a3:73:ab:af:66:f2:24:84: fb:28:13:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjQwNTAyMTY0OTI1WhcNMjQwNTA5MTY0OTI1WjAYMRYwFAYD VQQDEw02NjMzYzQxNS1mZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm83c5k8OB9LL02pI/uSv9s60PC0Eo9EDYjVOBSqnRj0refxB5n9hMrONpXlo m6BDblkEJGnegLJCx5PMdjVTEJTtGyzIkG1pZvoBXIPdtrPnPzXWtpQ6pe0HRMua 9WyoQGJ2+ImLR39QYNukFOGfAM6u/yMov4JTnxa57hN/lRItP7wHLh87NaGHI5HX LHC55SYBNLLBT/BcvmCTgzKOJQHUlVW/iVyXzwThtX/sTtpeoe6/WQ3Iy9UtTzfm cgbObLcuMe7hUV81qTW7LOW+1siAvA2wY66i9bGdR63Nl3+rZWnvh06+yUxKnb14 ocyCBAfQS/KJ75x48pKgDjghRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPzW3gU ozmTuXMx+BU9in+vhEgZMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+rqMIZHBSy3fiIRTFiLE2pZs8XIwePzcRqDg92TJ5EGLPiYnxUmUK ZhCKdcQq3ynAesHVjZap7MkK5wcJqKz0QB0hvxhqP1KhUZBbJygX77zbczc0J2eY a0eBkZW9qK5mldTNbf5R4IsqkdY4fygXs2UKpdbxeqwVVg1D6shZmHJynUqjDlZg sW5gG7bkakgJ3PjhBWp4jtvoRt46zxcDYJhut7xD1CFAk5ftw0kUZI3yEToi1rUz 1OUajXysdDMIJHK3qZgHNOu6wRMl6CgdGs1/70IJF/MRFKaxvahCn8l45i+/O3LY 8KeFoEBJ0i/5uIUao3Orr2byJIT7KBOJ -----END CERTIFICATE-----Generated at Thu May 2 17:43:45 2024 by rpki-client on console-fra.rpki-client.org