$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: MX207yW4Qcz+2x5bePjvxG9nTDZisTud2GIoZUN1yrg= Subject key identifier: 47:18:C2:F6:BD:C1:B0:97:95:E3:06:11:57:C6:62:EF:0D:98:7B:06 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 05A9 Signing time: Wed 01 May 2024 00:36:27 +0000 Manifest this update: Wed 01 May 2024 00:36:26 +0000 Manifest next update: Wed 08 May 2024 00:36:26 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: DJtFmgfnpkGGVufQGzWnszG11LO8KMqcsyvtWk2JkiI=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: MjGRO3lGQcG/iTMmDl7Y68mkqT70b4a+bCduYwFQk88=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: 7MaUzQhZsa3uPxpFsNO7MuIfiU5GowBL3sSUe1QC4ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: May 1 00:36:26 2024 GMT Not After : May 8 00:36:26 2024 GMT Subject: CN=66318e8a-6ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:b1:8a:e0:fe:9a:de:51:c6:c0:c7:5e:6d: fd:53:2b:ca:51:12:8f:22:44:aa:32:63:38:80:50: f7:75:1c:ad:e1:cd:84:47:7e:5e:f1:84:7b:77:b9: 5a:94:27:c2:56:04:c4:04:55:18:36:a1:0a:03:8c: ad:3b:f8:b7:00:5f:ed:d6:da:a3:e9:86:6d:5f:47: f2:a5:db:d2:33:4f:3d:8b:d6:94:99:8f:3a:a3:b9: 8e:75:ad:91:9a:60:df:f5:da:31:3f:46:cd:20:f8: 75:9d:5b:7b:29:43:7c:8b:10:00:e9:01:fd:b9:6d: 26:a5:97:0e:ee:df:2e:75:2a:3a:54:16:dc:e9:3b: 06:28:31:18:c6:5f:53:ac:36:bd:23:75:a6:15:16: 85:6c:a2:29:94:dd:b1:77:b8:e3:63:d8:9f:b8:95: 01:20:3c:e0:8d:ae:c1:a0:48:52:a0:1d:64:3f:cf: 37:e7:ec:1e:48:5a:3a:ae:eb:b2:ba:99:c4:93:e2: e0:83:a6:6e:37:4f:0b:56:c0:81:88:8b:8b:02:4e: d5:ca:20:57:63:bf:69:7a:c4:2f:57:94:a2:88:f9: 69:1e:a0:07:f0:5f:92:75:ec:a7:63:59:83:5b:49: a6:6b:b3:93:e2:00:b8:2b:29:58:fc:71:76:3f:a0: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:18:C2:F6:BD:C1:B0:97:95:E3:06:11:57:C6:62:EF:0D:98:7B:06 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a1:23:c1:67:13:dd:ff:4a:82:2c:3d:ff:d7:e3:fa:4f:56: 08:bf:9a:dc:e0:bf:a9:bb:43:e8:89:18:05:c9:41:89:51:ce: 20:d8:36:8a:08:f4:39:13:17:5f:fe:71:3c:81:31:76:03:f2: fb:68:ab:e8:e0:b0:ec:9f:7d:c5:e9:de:2d:00:1f:b1:48:1b: 34:1c:4b:ac:00:51:0a:6d:2a:bd:ff:a0:c7:89:6d:94:81:a2: d8:b9:28:37:71:76:a3:8a:a5:33:a7:7e:f0:f8:6c:b7:9b:76: 80:5e:cf:02:3d:47:61:c1:94:11:7f:14:f5:36:c4:bc:8e:72: 04:61:63:fe:76:e0:d0:86:5d:1a:e5:e3:b8:f8:0a:43:70:37: c2:cb:bc:c5:b8:e2:51:73:71:4d:f8:e8:0a:94:b1:bc:96:64: 4a:f0:bf:9d:db:e7:ec:fb:d5:2b:2f:fe:07:97:aa:a3:85:ae: fd:2b:fb:1c:2e:fc:de:cd:47:59:7f:7c:c9:8d:25:35:8d:85: c9:e9:b9:75:ca:e4:af:01:ee:e5:e9:57:6c:cd:f2:92:5f:e7: f7:0c:60:6b:36:c5:7d:f5:d7:6c:54:72:04:0c:38:95:bd:d6: 43:02:60:c1:c9:80:a0:d6:ba:50:58:15:5d:5c:70:8f:0e:01: c6:49:41:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjQwNTAxMDAzNjI2WhcNMjQwNTA4MDAzNjI2WjAYMRYwFAYD VQQDEw02NjMxOGU4YS02ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvOxiuD+mt5RxsDHXm39UyvKURKPIkSqMmM4gFD3dRyt4c2ER35e8YR7d7la lCfCVgTEBFUYNqEKA4ytO/i3AF/t1tqj6YZtX0fypdvSM089i9aUmY86o7mOda2R mmDf9doxP0bNIPh1nVt7KUN8ixAA6QH9uW0mpZcO7t8udSo6VBbc6TsGKDEYxl9T rDa9I3WmFRaFbKIplN2xd7jjY9ifuJUBIDzgja7BoEhSoB1kP8835+weSFo6ruuy upnEk+Lgg6ZuN08LVsCBiIuLAk7VyiBXY79pesQvV5SiiPlpHqAH8F+SdeynY1mD W0mma7OT4gC4KylY/HF2P6CutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcYwva9 wbCXleMGEVfGYu8NmHsGMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6oSPBZxPd/0qCLD3/1+P6T1YIv5rc4L+pu0PoiRgFyUGJUc4g2DaK CPQ5Exdf/nE8gTF2A/L7aKvo4LDsn33F6d4tAB+xSBs0HEusAFEKbSq9/6DHiW2U gaLYuSg3cXajiqUzp37w+Gy3m3aAXs8CPUdhwZQRfxT1NsS8jnIEYWP+duDQhl0a 5eO4+ApDcDfCy7zFuOJRc3FN+OgKlLG8lmRK8L+d2+fs+9UrL/4Hl6qjha79K/sc LvzezUdZf3zJjSU1jYXJ6bl1yuSvAe7l6VdszfKSX+f3DGBrNsV99ddsVHIEDDiV vdZDAmDByYCg1rpQWBVdXHCPDgHGSUEh -----END CERTIFICATE-----Generated at Wed May 1 01:38:30 2024 by rpki-client on console-ams.rpki-client.org