$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: dQO0B2h96SVaelpwAPvmubHF5Trwl01HWL3OF67gDvw= Subject key identifier: C8:C4:52:EA:6D:C8:C6:BC:8C:5E:79:0D:3B:9C:C6:E9:BB:9E:B7:F3 Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 0113 Signing time: Wed 01 May 2024 05:36:45 +0000 Manifest this update: Wed 01 May 2024 05:36:44 +0000 Manifest next update: Wed 08 May 2024 05:36:44 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: PT9WPBEM3HBeVWRErUqHnUWRRHRUMvQSxzXIZZfVMGQ=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: kKym4tMnXYD3PFHPGozVQ9+n2YMSGZbnL09kPMnj9JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: May 1 05:36:44 2024 GMT Not After : May 8 05:36:44 2024 GMT Subject: CN=6631d4ed-623f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:a1:07:bc:85:a2:8c:79:ab:32:f1:17:39: 1f:2f:85:9b:5e:64:57:aa:80:e5:36:71:17:91:69: 05:77:f3:62:b2:05:2c:9c:25:1e:a9:d6:9f:39:38: 4d:f6:02:2f:1c:32:15:b6:46:56:3a:71:7d:ed:4e: 8f:9e:e3:f0:ca:4a:6b:92:a2:26:63:76:71:dc:41: b0:79:54:69:38:9e:47:aa:bf:5a:18:e0:a5:60:16: 67:5b:5b:b0:11:95:fd:58:d9:3d:71:24:92:6e:33: e3:e7:1b:c6:52:6c:92:e4:ea:be:10:98:70:2d:2a: 91:36:98:0a:19:d4:46:97:b0:cf:0a:3c:9c:4e:f9: 68:ac:4f:9a:71:61:54:d4:91:84:14:1a:9b:6d:a3: 14:bb:e7:15:a8:27:68:2a:ba:3c:83:59:19:9e:5b: 33:4d:54:8f:a8:5d:8c:93:dc:43:04:a6:b3:6b:9d: e1:a3:ab:cf:1a:30:da:4c:ea:93:0f:03:33:a3:97: 9b:25:33:19:14:a2:f9:3b:f8:48:ad:95:b9:59:f2: 8e:c5:6c:63:ff:09:4a:b6:93:b6:4b:04:8d:e8:76: ef:59:a5:74:f4:3e:e4:e1:47:e9:74:30:84:b4:bf: e8:b3:f0:21:60:27:4e:dc:30:a6:90:49:f9:24:93: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:52:EA:6D:C8:C6:BC:8C:5E:79:0D:3B:9C:C6:E9:BB:9E:B7:F3 X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:74:9d:75:64:b8:08:96:54:40:8b:ca:2f:7a:07:ca:04:15: 51:6b:cd:32:fc:56:f0:ed:b4:bb:64:d2:09:38:c1:97:a4:46: 88:77:10:34:96:c6:de:ac:da:74:81:bd:ba:72:97:d7:4b:35: c0:aa:f8:80:6e:fa:62:89:4b:88:cb:88:4f:3f:b8:d5:c5:43: df:2a:ff:09:fb:38:8a:e7:a5:e4:05:4e:63:72:3b:fb:d4:63: 82:69:7b:b9:6a:eb:3a:38:96:11:55:5f:a5:b6:f5:64:a5:f7: 6b:ef:5c:ec:d3:e4:a5:1b:90:93:25:0a:f8:a5:85:20:0e:19: af:7b:6d:c8:34:e2:b3:49:e2:d0:9f:72:7d:ef:8c:ac:7f:32: b3:06:5e:76:ef:e4:cf:cd:b1:35:17:b4:9b:02:2c:9b:6c:d5: ee:97:ec:3e:dd:dc:b7:72:f8:7c:00:a0:fc:73:e9:51:9b:62: e9:40:fd:62:ae:1f:19:e9:e6:e2:76:25:fe:3f:04:5c:2d:e3: 07:50:3d:0d:cb:50:ab:bf:e2:50:ca:78:fe:d5:ae:ca:54:46: 56:31:32:aa:ea:17:d1:6f:6f:72:86:22:7f:4b:03:b2:35:88: 7b:ac:a4:15:f0:b6:92:bd:5b:20:ff:1c:6a:dd:5c:42:3c:6e: fd:69:5d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjQwNTAxMDUzNjQ0WhcNMjQwNTA4MDUzNjQ0WjAYMRYwFAYD VQQDEw02NjMxZDRlZC02MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSOhB7yFoox5qzLxFzkfL4WbXmRXqoDlNnEXkWkFd/NisgUsnCUeqdafOThN 9gIvHDIVtkZWOnF97U6PnuPwykprkqImY3Zx3EGweVRpOJ5Hqr9aGOClYBZnW1uw EZX9WNk9cSSSbjPj5xvGUmyS5Oq+EJhwLSqRNpgKGdRGl7DPCjycTvlorE+acWFU 1JGEFBqbbaMUu+cVqCdoKro8g1kZnlszTVSPqF2Mk9xDBKaza53ho6vPGjDaTOqT DwMzo5ebJTMZFKL5O/hIrZW5WfKOxWxj/wlKtpO2SwSN6HbvWaV09D7k4UfpdDCE tL/os/AhYCdO3DCmkEn5JJOwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjEUupt yMa8jF55DTucxum7nrfzMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAedJ11ZLgIllRAi8ovegfKBBVRa80y/Fbw7bS7ZNIJOMGXpEaIdxA0 lsberNp0gb26cpfXSzXAqviAbvpiiUuIy4hPP7jVxUPfKv8J+ziK56XkBU5jcjv7 1GOCaXu5aus6OJYRVV+ltvVkpfdr71zs0+SlG5CTJQr4pYUgDhmve23INOKzSeLQ n3J974ysfzKzBl527+TPzbE1F7SbAiybbNXul+w+3dy3cvh8AKD8c+lRm2LpQP1i rh8Z6ebidiX+PwRcLeMHUD0Ny1Crv+JQynj+1a7KVEZWMTKq6hfRb29yhiJ/SwOy NYh7rKQV8LaSvVsg/xxq3VxCPG79aV1+ -----END CERTIFICATE-----Generated at Wed May 1 06:34:28 2024 by rpki-client on console-ams.rpki-client.org