$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: /CGR1JeOhH+xteh8rRFz8rFYG5jhtvbLj/JA8wWQ5IY= Subject key identifier: 09:79:80:D8:AB:3C:AE:26:38:15:1B:6F:25:A9:67:EA:86:8D:A5:28 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0DC4 Signing time: Sat 04 May 2024 18:40:41 +0000 Manifest this update: Sat 04 May 2024 18:40:40 +0000 Manifest next update: Sat 11 May 2024 18:40:40 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: Y6Rj31yI+FKlLXPcmvG9zZXrEvHSDGlQXUKCa8i5AXE=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: BeDMtd/gRIXBSzEH/HcRt8FWJFY+DpYk+aIKlrxH1X0=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: Ge9gx9oFQ9N2EYDpZxaRD3LOXxPGqIUx2VuLgiI1oUU=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: zKRcCckVz57z0VxNoDUTAF4AYak1diEBJ0bZxZgdtMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: May 4 18:40:40 2024 GMT Not After : May 11 18:40:40 2024 GMT Subject: CN=66368129-a1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:39:1b:de:a5:93:f8:dc:25:8a:1f:48:58: f5:d4:29:1f:0e:f2:77:87:c1:df:05:b7:fd:bd:52: f8:d1:fd:2d:3b:9c:89:e9:3b:52:24:27:1d:c4:c7: e2:12:88:fb:b6:db:51:37:d0:c1:7d:5b:f4:65:3c: df:18:31:ef:bd:cd:ac:46:90:e6:5b:47:3e:7f:f5: ee:e1:0f:ec:da:44:2f:e5:9e:c7:9d:96:5a:37:82: 4c:aa:03:bc:4f:8f:54:df:41:11:c4:44:c8:d7:64: 99:93:4b:8e:bb:2c:46:e1:a7:d5:91:5e:a3:69:6c: 3f:10:71:df:be:bf:be:28:b2:05:4d:60:46:01:b0: bd:49:2e:18:e0:b2:4e:5a:0f:cb:bf:d4:05:70:cd: b2:99:dd:95:e4:d2:f6:df:ed:fa:06:b7:12:26:b2: a3:53:93:fc:2c:59:87:c2:df:ee:e3:28:31:ff:bd: 2d:e6:c9:26:9c:17:e2:63:60:bb:ab:5b:47:9f:ee: cc:23:9b:66:dd:4c:68:09:72:93:5a:35:b3:db:0e: f9:a0:49:b1:0a:40:6f:2f:ac:72:b9:eb:df:18:fd: 19:97:98:a1:ac:77:c3:21:f3:59:42:87:6e:7b:d5: 23:d8:98:fd:76:ff:a3:46:bd:75:1e:43:69:30:5e: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:79:80:D8:AB:3C:AE:26:38:15:1B:6F:25:A9:67:EA:86:8D:A5:28 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:eb:e7:ad:23:79:8d:40:b1:0c:16:9e:b9:48:39:d4:90: 85:fe:c3:f5:2d:60:4c:46:a3:9d:e1:e8:c2:23:e7:ff:c7:f7: 31:0a:32:3c:df:27:e3:7b:bc:6c:63:08:0b:2d:6b:5c:ff:29: cc:2f:a1:de:61:46:fd:1e:3f:ac:51:8c:2e:68:eb:a5:ec:22: e2:38:0e:b6:72:54:ae:a5:57:63:ef:12:6e:fd:62:47:68:a4: 4b:6c:8b:0c:e9:22:fa:7a:c3:e6:34:69:14:f7:e5:10:bf:0a: 3b:d8:7e:97:cd:4f:86:eb:9d:f0:14:f6:32:53:41:a7:e5:aa: a2:6f:01:52:3b:2f:5d:da:6b:14:ee:a6:a0:db:48:d7:50:e1: a4:ee:b2:df:d3:9f:97:7d:f9:3d:c0:64:64:98:79:26:e8:5e: 3f:2f:5a:a4:55:d3:30:80:35:41:78:4f:61:ed:36:ad:bb:94: f6:1e:cc:e4:27:1b:56:3b:55:7f:fa:d2:f7:85:17:79:78:76: bf:aa:76:74:e7:68:95:d4:e9:2f:e6:18:f5:34:c9:95:42:06: 7e:bf:b6:3f:16:c1:55:3b:fc:4c:9f:8a:35:9b:25:5e:a8:c3: dc:e4:97:41:3c:dd:f3:b5:9f:46:24:5f:e1:65:97:77:73:6b: a6:d6:77:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjQwNTA0MTg0MDQwWhcNMjQwNTExMTg0MDQwWjAYMRYwFAYD VQQDEw02NjM2ODEyOS1hMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy85G96lk/jcJYofSFj11CkfDvJ3h8HfBbf9vVL40f0tO5yJ6TtSJCcdxMfi Eoj7tttRN9DBfVv0ZTzfGDHvvc2sRpDmW0c+f/Xu4Q/s2kQv5Z7HnZZaN4JMqgO8 T49U30ERxETI12SZk0uOuyxG4afVkV6jaWw/EHHfvr++KLIFTWBGAbC9SS4Y4LJO Wg/Lv9QFcM2ymd2V5NL23+36BrcSJrKjU5P8LFmHwt/u4ygx/70t5skmnBfiY2C7 q1tHn+7MI5tm3UxoCXKTWjWz2w75oEmxCkBvL6xyuevfGP0Zl5ihrHfDIfNZQodu e9Uj2Jj9dv+jRr11HkNpMF61QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl5gNir PK4mOBUbbyWpZ+qGjaUoMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMeevnrSN5jUCxDBaeuUg51JCF/sP1LWBMRqOd4ejCI+f/x/cxCjI8 3yfje7xsYwgLLWtc/ynML6HeYUb9Hj+sUYwuaOul7CLiOA62clSupVdj7xJu/WJH aKRLbIsM6SL6esPmNGkU9+UQvwo72H6XzU+G653wFPYyU0Gn5aqibwFSOy9d2msU 7qag20jXUOGk7rLf05+Xffk9wGRkmHkm6F4/L1qkVdMwgDVBeE9h7Tatu5T2Hszk JxtWO1V/+tL3hRd5eHa/qnZ052iV1Okv5hj1NMmVQgZ+v7Y/FsFVO/xMn4o1myVe qMPc5JdBPN3ztZ9GJF/hZZd3c2um1ndL -----END CERTIFICATE-----Generated at Sat May 4 19:58:42 2024 by rpki-client on console-ams.rpki-client.org