$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: 2fBHi1Qa4F7ygo6bfrXgGUI+CUjLjqfytzt1tBknxjE= Subject key identifier: C1:AE:A5:B6:87:85:4A:BA:CE:BA:D0:9C:5A:E6:88:0A:4C:7E:BB:88 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 340F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 33E7 Signing time: Sat 04 May 2024 14:44:35 +0000 Manifest this update: Sat 04 May 2024 14:44:34 +0000 Manifest next update: Sat 11 May 2024 14:44:34 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: LogqwRbYu/vVDJT5SNp1NYFav6LGc03mDD9N2IHSswU=) 2: 80F60C0AB36A11EEAE9FF05FC4F9AE02.roa (hash: mPmPvCdQywstYRyflEV6nN7rcE2aRGyDBbdAty6Jy8I=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: kzT9PE+ISZhmu9QjsD3tdtrmlnh7588zEREXQScG2n4=) 4: 0D118DDEBD0D11EA84F7547CC4F9AE02.roa (hash: Xocnoy51+b1D0/W5rxU8KPL0hq4JtKVYsA0AxIiCp5c=) 5: 00EDEFD4B45411EDA65D8845C4F9AE02.roa (hash: p+IiBi8p41Xaw/zr8LzUyZCn1S4agZdJFYBd3Xe6JKs=) 6: DC4CF7C4BECE11EA9F27811CC4F9AE02.roa (hash: EOIU3SGjaG3yoWQkMK90rrbkd5uHcov0oh9wII9VG+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13327 (0x340f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: May 4 14:44:34 2024 GMT Not After : May 11 14:44:34 2024 GMT Subject: CN=663649d2-8a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:79:de:26:9a:20:13:d5:b1:9e:1b:8c:98: 66:9d:4f:bb:7a:1c:16:e6:3d:d1:fc:6c:68:20:c7: 84:64:60:57:cf:a7:1e:a1:2e:c3:58:f3:42:11:a0: cc:3f:8a:b1:3b:ca:49:69:31:23:c4:44:d9:a9:2b: e9:b5:30:1f:0e:83:51:af:94:68:1f:90:4a:ce:fb: 7c:ff:ef:b5:95:0b:70:12:d7:87:ec:8e:b7:08:f5: da:84:39:f5:c4:f6:c7:62:9c:c3:83:9c:35:e7:85: 8a:11:37:ae:62:6f:d4:0e:02:45:40:c8:d7:2c:48: 62:2b:d4:84:76:ef:45:c2:6b:a1:82:df:71:b6:23: 10:42:a8:56:d8:9e:f2:81:93:b2:dc:55:6d:21:cd: 9a:cb:5a:e6:bf:e0:8e:2a:a6:90:86:1b:9a:3f:3d: 4d:6f:df:ff:d0:f7:20:a0:9c:22:7a:b2:16:6d:b5: 62:9a:86:85:eb:20:d0:39:7e:f7:52:35:82:8c:f0: e3:50:55:f4:23:27:e0:a3:1d:f8:82:07:4e:26:ef: 81:17:51:35:d8:b2:68:31:4f:25:80:76:fe:2d:4f: 75:1b:f8:e2:02:53:10:46:34:6c:3b:50:96:b7:7b: a0:99:89:52:00:e9:c7:3c:5f:c4:45:df:33:25:d5: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:A5:B6:87:85:4A:BA:CE:BA:D0:9C:5A:E6:88:0A:4C:7E:BB:88 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:76:5d:6d:f7:5c:58:20:3d:14:1b:e0:79:e2:87:bc:85:cd: 57:cc:59:95:4c:55:5f:84:8e:33:b4:d2:c1:d4:45:19:31:b5: 11:6d:5c:ec:e1:f9:9e:0c:18:a3:e7:d4:35:67:bd:13:00:4c: 03:5b:6b:23:12:69:76:b4:b2:2a:09:8f:31:b6:ac:e1:0b:e3: 56:3d:2b:36:66:2c:f0:87:c1:fe:86:e9:52:10:44:c6:e2:23: ef:ee:4e:8b:af:0d:34:47:51:3c:5c:bb:f0:8e:70:68:da:0e: a4:82:71:bb:88:53:7a:1b:09:8b:56:40:a9:b8:97:ab:c1:9b: 2b:01:0b:2c:c1:2f:9d:1d:0f:de:42:53:1f:98:18:d8:10:ac: 8d:d7:68:70:81:c9:0e:f8:38:fb:2d:35:8a:43:e3:4f:2b:4b: 14:ec:6a:5d:b0:a1:77:8b:3c:81:25:8d:b6:89:1c:d9:ee:8c: d2:1b:1e:21:d7:0a:7e:27:b5:e1:d7:6a:3a:7b:06:78:2d:8a: 13:bf:11:3a:04:1a:3b:00:48:2f:e3:74:10:7d:21:af:24:27: 70:b4:f5:a5:4b:9e:0e:eb:b4:41:87:6c:fe:7c:0f:7e:00:08: 6f:6d:18:e9:46:b1:c3:3d:d3:4a:01:47:c0:02:06:b7:e3:c9: 88:b1:5e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNTA0MTQ0NDM0WhcNMjQwNTExMTQ0NDM0WjAYMRYwFAYD VQQDEw02NjM2NDlkMi04YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2l53iaaIBPVsZ4bjJhmnU+7ehwW5j3R/GxoIMeEZGBXz6ceoS7DWPNCEaDM P4qxO8pJaTEjxETZqSvptTAfDoNRr5RoH5BKzvt8/++1lQtwEteH7I63CPXahDn1 xPbHYpzDg5w154WKETeuYm/UDgJFQMjXLEhiK9SEdu9Fwmuhgt9xtiMQQqhW2J7y gZOy3FVtIc2ay1rmv+COKqaQhhuaPz1Nb9//0PcgoJwierIWbbVimoaF6yDQOX73 UjWCjPDjUFX0Iyfgox34ggdOJu+BF1E12LJoMU8lgHb+LU91G/jiAlMQRjRsO1CW t3ugmYlSAOnHPF/ERd8zJdWaVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGupbaH hUq6zrrQnFrmiApMfruIMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVdl1t91xYID0UG+B54oe8hc1XzFmVTFVfhI4ztNLB1EUZMbURbVzs 4fmeDBij59Q1Z70TAEwDW2sjEml2tLIqCY8xtqzhC+NWPSs2Zizwh8H+hulSEETG 4iPv7k6Lrw00R1E8XLvwjnBo2g6kgnG7iFN6GwmLVkCpuJerwZsrAQsswS+dHQ/e QlMfmBjYEKyN12hwgckO+Dj7LTWKQ+NPK0sU7GpdsKF3izyBJY22iRzZ7ozSGx4h 1wp+J7Xh12o6ewZ4LYoTvxE6BBo7AEgv43QQfSGvJCdwtPWlS54O67RBh2z+fA9+ AAhvbRjpRrHDPdNKAUfAAga348mIsV6H -----END CERTIFICATE-----Generated at Sat May 4 15:45:49 2024 by rpki-client on console-fra.rpki-client.org