$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: 5I5RaOku6S2GeynpLqXez++xbUS7P5lZDDHLaOhyDt8= Subject key identifier: 58:D9:96:0B:AC:E6:CF:B2:37:1A:9F:FD:CD:DA:89:F9:1F:EE:18:00 Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: FE Signing time: Sat 25 May 2024 05:56:55 +0000 Manifest this update: Sat 25 May 2024 05:56:55 +0000 Manifest next update: Sat 01 Jun 2024 05:56:55 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: 3AC4R1B3f2POZCIaktWrzb4k515QiQFlTMMaxlnhUHw=) 2: C2D5B85E9BFC11ED99828F6BC4F9AE02.roa (hash: mHmZau6G9yGcJOFiIh10/4qmNuJVGBI87JICqiEhFs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: May 25 05:56:55 2024 GMT Not After : Jun 1 05:56:55 2024 GMT Subject: CN=66517da7-567c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:b0:5e:54:54:18:39:77:b4:2d:bc:45:a7: 8c:40:5f:ce:9c:e9:57:94:f0:e8:44:35:8c:31:c9: 55:42:cd:50:bb:bc:61:cb:ab:bb:fc:6d:0b:bd:84: 7c:03:7d:96:05:df:e3:93:2b:86:9d:04:9e:21:26: 96:87:9d:01:12:9f:ed:05:35:c1:6f:86:52:99:a1: ba:6a:39:60:08:24:11:01:ef:a1:66:88:13:f2:3b: 29:ec:47:57:e1:8d:32:79:8f:a9:40:73:2a:ba:50: 47:d9:6a:4d:92:1a:0d:72:b3:44:aa:f2:ee:1f:f2: 13:28:e9:f5:27:a8:a9:b0:b4:b8:39:f8:83:f6:8c: 57:45:06:32:db:0e:70:a8:5e:d0:49:34:c7:ef:8e: e1:96:28:c3:6b:06:6d:05:80:ec:63:7e:7c:61:da: 4f:a4:23:13:27:36:7c:f2:14:e4:55:0a:bb:9b:c2: cd:74:ed:de:bf:51:31:64:69:ef:1a:c6:12:67:59: 8b:a4:c5:d2:c1:f3:9d:56:59:dc:23:76:48:27:9d: a3:dc:45:c9:a3:da:e8:17:57:0a:43:d0:45:bd:00: 59:e4:1c:be:c5:fb:bc:eb:8d:e2:4c:3f:85:f3:46: 5d:fa:e8:f8:24:f2:b6:bd:a1:cd:24:3d:28:2e:9c: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:96:0B:AC:E6:CF:B2:37:1A:9F:FD:CD:DA:89:F9:1F:EE:18:00 X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:db:91:76:ce:38:2f:ad:4c:7b:8f:0b:af:34:36:db:07:f1: 39:03:c5:00:b0:4b:c2:99:92:37:76:94:4b:61:1b:58:b6:da: 7b:a1:c8:8f:d4:e5:37:a6:2f:14:d8:bf:79:4e:1d:f6:52:b4: 8c:23:b1:db:e6:29:ff:ea:f2:c1:ab:02:23:fe:fa:a0:4b:f9: b1:f3:a7:c7:55:13:3e:e6:d9:85:76:ba:4d:f0:4a:06:cf:e8: c2:a5:72:81:44:18:74:ef:96:0b:03:30:e3:f8:5f:3c:e0:dd: 36:a2:c5:96:dd:e9:79:c0:30:03:e7:60:6d:34:24:4f:d8:6e: cd:09:01:43:52:05:2b:d7:bb:71:3c:a8:43:2f:9e:0a:e5:ea: 2d:2d:16:47:8d:fb:62:27:b7:8e:aa:59:21:4a:10:f6:4e:58: b6:3d:e7:39:f3:b7:d8:eb:e6:cc:0a:9d:b8:03:54:49:52:b8: 2f:d7:12:b6:67:99:85:54:01:10:10:b7:ec:21:07:2f:b8:59: 98:13:ad:c3:ce:bb:49:bb:06:10:e0:e3:1e:52:fc:1f:4f:ed: 69:a4:0a:da:ba:e5:c1:33:ba:7c:39:04:e4:95:75:9a:50:7e: 9d:2a:e4:de:d2:a6:55:f1:db:d1:c8:1e:22:6e:2a:db:03:d4: 44:f9:1f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjQwNTI1MDU1NjU1WhcNMjQwNjAxMDU1NjU1WjAYMRYwFAYD VQQDEw02NjUxN2RhNy01NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsViwXlRUGDl3tC28RaeMQF/OnOlXlPDoRDWMMclVQs1Qu7xhy6u7/G0LvYR8 A32WBd/jkyuGnQSeISaWh50BEp/tBTXBb4ZSmaG6ajlgCCQRAe+hZogT8jsp7EdX 4Y0yeY+pQHMqulBH2WpNkhoNcrNEqvLuH/ITKOn1J6ipsLS4OfiD9oxXRQYy2w5w qF7QSTTH747hlijDawZtBYDsY358YdpPpCMTJzZ88hTkVQq7m8LNdO3ev1ExZGnv GsYSZ1mLpMXSwfOdVlncI3ZIJ52j3EXJo9roF1cKQ9BFvQBZ5By+xfu8643iTD+F 80Zd+uj4JPK2vaHNJD0oLpxK+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjZlgus 5s+yNxqf/c3aifkf7hgAMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR25F2zjgvrUx7jwuvNDbbB/E5A8UAsEvCmZI3dpRLYRtYttp7ociP 1OU3pi8U2L95Th32UrSMI7Hb5in/6vLBqwIj/vqgS/mx86fHVRM+5tmFdrpN8EoG z+jCpXKBRBh075YLAzDj+F884N02osWW3el5wDAD52BtNCRP2G7NCQFDUgUr17tx PKhDL54K5eotLRZHjftiJ7eOqlkhShD2Tli2Pec587fY6+bMCp24A1RJUrgv1xK2 Z5mFVAEQELfsIQcvuFmYE63DzrtJuwYQ4OMeUvwfT+1ppArauuXBM7p8OQTklXWa UH6dKuTe0qZV8dvRyB4ibirbA9RE+R+Y -----END CERTIFICATE-----Generated at Sat May 25 06:26:53 2024 by rpki-client on console-fra.rpki-client.org