$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: unjlv9TzGhC4UK46w2dxvLH//lr2ldkoRJ68WUMdaxk= Subject key identifier: 36:C1:D1:CF:A3:DE:85:E5:FE:66:56:D1:E8:D3:15:A3:F5:22:10:55 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 3407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 33E3 Signing time: Mon 06 May 2024 14:38:30 +0000 Manifest this update: Mon 06 May 2024 14:38:29 +0000 Manifest next update: Mon 13 May 2024 14:38:29 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: 3F2js/Z//TMr95RGXtAb7WWHCHSy4WaOY4YoeMb3vo0=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: OSYJd6iARCRZpbvh5LZxgFxfFVKwYwFFW+shwqVkG10=) 3: 42F41E56B0D011E5A58E097CC4F9AE02.roa (hash: uS7mm4nJeuJObvS/1zoAs7w7Tk8NzuTKO3u3JE9tzqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13319 (0x3407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: May 6 14:38:29 2024 GMT Not After : May 13 14:38:29 2024 GMT Subject: CN=6638eb66-a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:08:38:c0:02:9c:c0:f4:76:25:d6:1f:0a: ff:91:b5:23:e3:1a:e9:e9:31:56:85:a9:c6:0d:ed: 72:60:e2:ec:49:21:b5:ac:b6:79:7a:03:90:b0:56: 0d:83:c1:74:34:bd:85:79:6a:a5:e8:24:55:24:52: fa:de:83:c8:db:0f:be:1c:13:42:a8:86:4f:42:b2: c8:93:3a:8f:b2:aa:57:76:9b:52:6e:1d:f6:ac:11: 53:53:73:6c:ea:de:f9:f9:b4:8e:2a:a2:8c:fa:e4: 08:53:46:03:14:61:33:fb:ff:d7:5f:69:6b:8e:c0: a7:4d:91:86:10:08:e2:03:49:2c:29:92:09:e1:80: 62:6d:5b:62:0c:53:d8:8b:b8:01:7e:ea:10:8c:3d: 6a:82:a6:58:77:a9:13:6f:7e:6a:28:d8:07:ea:8d: 3e:7a:79:68:f4:0b:46:0a:66:5f:1d:36:2f:83:c5: 75:c8:dd:13:16:8e:b0:82:28:71:15:52:87:5c:4a: 5a:b3:bd:a8:4e:74:45:46:44:19:cd:d0:43:f4:c9: ee:b0:5e:94:b1:80:de:aa:25:45:73:07:e9:1f:91: ea:a9:3d:68:8f:dc:9c:2c:f1:c4:e1:ab:c1:ba:57: be:a8:e7:fe:57:1c:dc:4c:86:73:55:c3:53:88:2c: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:D1:CF:A3:DE:85:E5:FE:66:56:D1:E8:D3:15:A3:F5:22:10:55 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:62:99:83:43:e2:cb:bb:1d:8b:bd:81:2e:bc:b0:ca:f6:8d: 47:c4:6a:c0:4e:40:8f:34:26:87:f5:c4:f6:b1:b0:9d:fe:6b: 1a:90:fb:45:84:74:e7:df:1b:0f:eb:35:b4:6a:43:f5:cf:67: e9:01:32:7e:5d:45:3d:20:bf:82:fd:f8:77:77:49:be:0b:00: e5:ae:d6:a9:99:ab:ad:ad:d4:35:47:26:07:44:f3:13:8d:21: 33:da:a2:79:bb:04:8f:84:39:30:a0:85:49:05:54:05:cc:80: 86:e6:20:9b:db:e4:5a:56:39:d6:da:7b:f7:57:a6:fe:0d:04: 10:db:00:97:47:5a:9e:79:78:08:82:d2:f8:3a:44:00:3b:2d: 23:37:33:2b:5b:9f:87:df:9d:6e:ca:bb:85:07:ea:be:81:79: 0f:4a:8f:d4:66:be:82:1c:c0:38:02:fd:ef:ec:e6:59:80:22: b6:1c:ff:f9:9b:36:db:11:17:a3:be:16:af:bb:3a:bc:54:14: d6:e4:91:31:dc:a3:93:14:30:cd:b6:21:2d:56:ba:50:53:0e: 3c:92:50:62:27:09:f0:80:4a:89:54:e1:29:ca:25:40:fe:55: c5:7e:5d:e6:64:b1:e1:5d:1a:3c:91:e9:0f:ca:cd:b7:a8:58: 71:ee:dc:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjQwNTA2MTQzODI5WhcNMjQwNTEzMTQzODI5WjAYMRYwFAYD VQQDEw02NjM4ZWI2Ni1hODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPwIOMACnMD0diXWHwr/kbUj4xrp6TFWhanGDe1yYOLsSSG1rLZ5egOQsFYN g8F0NL2FeWql6CRVJFL63oPI2w++HBNCqIZPQrLIkzqPsqpXdptSbh32rBFTU3Ns 6t75+bSOKqKM+uQIU0YDFGEz+//XX2lrjsCnTZGGEAjiA0ksKZIJ4YBibVtiDFPY i7gBfuoQjD1qgqZYd6kTb35qKNgH6o0+enlo9AtGCmZfHTYvg8V1yN0TFo6wgihx FVKHXEpas72oTnRFRkQZzdBD9MnusF6UsYDeqiVFcwfpH5HqqT1oj9ycLPHE4avB ule+qOf+VxzcTIZzVcNTiCxKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbB0c+j 3oXl/mZW0ejTFaP1IhBVMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbYpmDQ+LLux2LvYEuvLDK9o1HxGrATkCPNCaH9cT2sbCd/msakPtF hHTn3xsP6zW0akP1z2fpATJ+XUU9IL+C/fh3d0m+CwDlrtapmautrdQ1RyYHRPMT jSEz2qJ5uwSPhDkwoIVJBVQFzICG5iCb2+RaVjnW2nv3V6b+DQQQ2wCXR1qeeXgI gtL4OkQAOy0jNzMrW5+H351uyruFB+q+gXkPSo/UZr6CHMA4Av3v7OZZgCK2HP/5 mzbbERejvhavuzq8VBTW5JEx3KOTFDDNtiEtVrpQUw48klBiJwnwgEqJVOEpyiVA /lXFfl3mZLHhXRo8kekPys23qFhx7txC -----END CERTIFICATE-----Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org