$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: GrJyY70XEGvh/mhv6aTzP5KMy1S91gzJ9Npz7SCkmws= Subject key identifier: 96:90:CC:B2:91:9B:CC:46:FE:7C:ED:40:39:69:74:77:40:1F:F5:B5 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0363 Signing time: Fri 03 May 2024 02:57:26 +0000 Manifest this update: Fri 03 May 2024 02:57:25 +0000 Manifest next update: Fri 10 May 2024 02:57:25 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: Ey7SWhK+fq8SOdoPkBDB4PFxqr1YNqO9iKl+tKS0QeM=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 07zyarA6XIgTYwgKNviHaLDoeHlrSRTRbxg4ydQkXyU=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: Nhy318877Pj8nUb8j9i7KCSdGvMUGkfqcZTP4yRq+ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: May 3 02:57:25 2024 GMT Not After : May 10 02:57:25 2024 GMT Subject: CN=66345295-ca18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:cb:59:d6:b4:85:33:d6:87:07:27:ec:ce: df:29:69:50:8c:20:d9:db:1a:cb:f8:1c:44:d3:79: 5d:c3:56:a5:ca:05:01:0e:b6:4c:bc:94:cb:9a:f2: 9c:13:85:92:5a:cc:0e:bb:e0:a0:bc:a6:eb:e1:a2: 0a:c2:60:dc:d4:4d:fb:a0:f0:17:14:62:92:c7:f1: a0:9b:9d:4f:2a:b3:64:4f:1f:c1:9b:f7:bf:59:3f: 59:79:8a:7f:41:f0:d1:99:3d:bf:4d:7e:10:88:be: 0f:73:f7:05:a2:98:40:9e:e8:72:ab:47:a4:90:b4: cb:f0:6b:b7:27:49:b1:bb:93:cb:a4:0f:08:17:c8: 23:59:e0:cd:73:57:d5:dd:90:bd:e1:8b:d5:48:28: 6e:4c:9c:de:48:9e:84:bb:ed:f1:48:d8:1d:bf:86: bd:74:d9:4e:45:e3:40:ea:f2:d2:96:24:37:1e:9a: 64:3c:ff:21:6f:ee:2e:8d:94:77:a2:36:47:d2:16: 1f:76:a4:d8:14:82:86:d0:71:87:4a:88:eb:63:d1: cf:d1:5d:02:7e:29:91:77:ca:d1:3a:78:26:05:c6: c5:b9:ba:b4:e3:5f:a7:15:d2:25:22:96:14:c4:e4: 1b:83:a9:7e:35:14:f1:5c:69:6b:a8:1d:a2:56:41: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:90:CC:B2:91:9B:CC:46:FE:7C:ED:40:39:69:74:77:40:1F:F5:B5 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:4d:cd:09:28:02:cd:80:8f:8d:73:78:cd:40:28:3d:b8: d7:42:fa:35:e7:9a:0e:10:f7:f1:bd:00:af:d3:73:50:b5:4f: 8a:0f:70:a9:8b:27:ac:8c:8a:66:82:31:0b:e4:f0:be:c8:80: d7:aa:bd:55:a6:15:52:34:f7:67:f2:ad:18:e9:be:6d:c9:58: e1:50:11:77:36:15:e0:4e:3c:ad:d5:f5:57:e7:f5:29:90:6a: e1:ae:86:a2:fc:aa:6e:b2:e7:de:e2:eb:0c:90:ec:1a:75:f4: cd:a0:47:33:fd:aa:5b:72:4e:3e:d8:fb:a1:e0:3e:4c:01:9d: bc:7e:ec:4d:0e:b1:ce:57:aa:04:08:98:a1:29:28:ee:f0:2b: 9e:e2:b6:12:31:10:17:f8:fb:b4:46:b0:10:d6:d5:bd:31:aa: b9:9e:99:91:a4:32:e7:47:69:d7:82:7e:cb:65:2e:42:12:0f: 50:6f:ee:bb:20:44:ae:5d:8f:f6:3b:51:16:26:73:38:5e:4d: 27:aa:cf:a9:af:27:61:bd:9c:5a:11:1f:cc:63:2b:e4:35:ad: 72:02:73:d1:4b:2f:5d:88:7e:c9:33:7d:cf:4b:ce:62:eb:3a: eb:2e:4d:fa:58:5a:6e:6f:4a:48:35:58:30:22:ca:8e:46:52: 12:da:e9:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjQwNTAzMDI1NzI1WhcNMjQwNTEwMDI1NzI1WjAYMRYwFAYD VQQDEw02NjM0NTI5NS1jYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bDLWda0hTPWhwcn7M7fKWlQjCDZ2xrL+BxE03ldw1alygUBDrZMvJTLmvKc E4WSWswOu+CgvKbr4aIKwmDc1E37oPAXFGKSx/Ggm51PKrNkTx/Bm/e/WT9ZeYp/ QfDRmT2/TX4QiL4Pc/cFophAnuhyq0ekkLTL8Gu3J0mxu5PLpA8IF8gjWeDNc1fV 3ZC94YvVSChuTJzeSJ6Eu+3xSNgdv4a9dNlOReNA6vLSliQ3HppkPP8hb+4ujZR3 ojZH0hYfdqTYFIKG0HGHSojrY9HP0V0CfimRd8rROngmBcbFubq041+nFdIlIpYU xOQbg6l+NRTxXGlrqB2iVkFDiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaQzLKR m8xG/nztQDlpdHdAH/W1MB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyt03NCSgCzYCPjXN4zUAoPbjXQvo155oOEPfxvQCv03NQtU+KD3Cp iyesjIpmgjEL5PC+yIDXqr1VphVSNPdn8q0Y6b5tyVjhUBF3NhXgTjyt1fVX5/Up kGrhroai/Kpusufe4usMkOwadfTNoEcz/apbck4+2Puh4D5MAZ28fuxNDrHOV6oE CJihKSju8Cue4rYSMRAX+Pu0RrAQ1tW9Maq5npmRpDLnR2nXgn7LZS5CEg9Qb+67 IESuXY/2O1EWJnM4Xk0nqs+prydhvZxaER/MYyvkNa1yAnPRSy9diH7JM33PS85i 6zrrLk36WFpub0pINVgwIsqORlIS2umX -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org