$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: ez6gIvGEC9o8I/4EyBMd5LO2ck2KjwJ/oCmCWhcHAbs= Subject key identifier: 80:A1:FB:69:55:BC:D1:88:8C:CA:94:0F:07:15:50:94:0E:8E:65:CE Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0579 Signing time: Wed 01 May 2024 00:56:55 +0000 Manifest this update: Wed 01 May 2024 00:56:55 +0000 Manifest next update: Wed 08 May 2024 00:56:55 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: Yh0CujgL2kBdXRXSTtbEoCu5ZbImk0csx4jVWquGqco=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: OLspspuiYrz/OqVyu239/Uv2o5RZLNXuEYcQjrgRvGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: May 1 00:56:55 2024 GMT Not After : May 8 00:56:55 2024 GMT Subject: CN=66319357-65f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:b9:4f:34:07:63:a0:8a:c2:d5:75:33:29: 8f:29:4f:bb:df:42:26:74:ce:a3:2b:e7:b2:e2:25: 1e:52:97:50:cd:01:61:e4:aa:22:45:c9:17:86:1f: 8e:05:88:5b:33:bf:42:b1:5e:16:b0:69:03:bf:fe: 0e:d2:8c:00:84:73:73:50:2d:8c:60:9d:72:23:93: d6:29:f4:18:f2:54:d5:68:4b:27:d8:70:31:2e:e5: 8e:56:7d:df:77:e6:e6:0f:d1:70:f0:a5:32:00:ea: ee:08:f6:fe:4d:da:54:bb:21:f8:82:00:30:52:e6: d1:3b:c8:9d:21:5e:56:98:fb:11:ce:10:cc:5d:3c: b9:5b:fc:4e:95:0e:0d:96:47:39:c7:4e:83:61:bd: 80:8d:12:0a:25:44:32:df:10:7f:3e:ee:2a:42:f8: 64:05:57:aa:6f:b8:92:15:ed:ac:da:08:45:76:ae: da:07:ee:32:de:29:99:17:a0:e1:e5:4c:05:36:9a: ac:51:91:c0:56:5b:70:f8:ec:f6:0b:1b:6c:72:25: 82:1a:50:99:93:a5:88:70:6e:f1:08:e5:2b:8f:b9: d3:de:f3:42:cb:1a:bb:42:32:1d:f5:fa:0d:c0:6e: db:2b:09:0c:84:8a:5d:da:91:4c:89:ed:4e:df:2a: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:FB:69:55:BC:D1:88:8C:CA:94:0F:07:15:50:94:0E:8E:65:CE X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a2:a4:15:df:19:c3:d4:1c:75:54:bf:e8:d9:ef:32:b4:83: 31:75:0a:ef:87:54:8e:33:0e:0d:6e:7f:cc:cb:b6:d0:f9:a9: da:24:95:d3:14:75:f3:8a:e4:e3:55:99:62:32:2e:62:ea:8a: be:99:e5:98:ed:6d:d4:a5:ba:c0:52:4f:e0:76:e9:76:45:fa: 5a:e7:3c:da:a7:41:a4:86:ff:19:e0:b2:ca:ca:60:53:0d:bd: d3:7f:d8:8c:da:f5:ed:52:19:73:71:4e:71:3e:02:e6:a8:92: c9:ff:2e:60:f6:34:ae:e8:0d:8e:f3:c3:50:ce:7b:8e:34:9c: a7:e2:ad:f6:c5:b8:7f:c0:de:a5:66:89:5b:8f:81:31:d6:90: cd:1a:82:b1:40:07:57:55:dd:fd:8c:2d:de:c6:28:4a:44:22: c6:7c:a5:8e:eb:a5:0f:69:d5:f3:07:b6:7a:c0:bc:63:06:b3: 2e:2f:d1:39:ae:20:59:1d:e5:62:9f:bc:38:dd:e6:e7:3e:ac: 98:ad:be:6c:03:24:01:0a:f5:9b:21:14:2a:88:11:b3:c9:c2: 11:2c:56:71:dd:69:8a:14:06:39:b7:c9:14:ba:cd:fe:93:2b: b2:ee:ec:49:f6:c3:8a:b7:b1:e1:4a:53:b1:5b:a2:2f:d4:63: 60:da:94:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjQwNTAxMDA1NjU1WhcNMjQwNTA4MDA1NjU1WjAYMRYwFAYD VQQDEw02NjMxOTM1Ny02NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p65TzQHY6CKwtV1MymPKU+730ImdM6jK+ey4iUeUpdQzQFh5KoiRckXhh+O BYhbM79CsV4WsGkDv/4O0owAhHNzUC2MYJ1yI5PWKfQY8lTVaEsn2HAxLuWOVn3f d+bmD9Fw8KUyAOruCPb+TdpUuyH4ggAwUubRO8idIV5WmPsRzhDMXTy5W/xOlQ4N lkc5x06DYb2AjRIKJUQy3xB/Pu4qQvhkBVeqb7iSFe2s2ghFdq7aB+4y3imZF6Dh 5UwFNpqsUZHAVltw+Oz2CxtsciWCGlCZk6WIcG7xCOUrj7nT3vNCyxq7QjId9foN wG7bKwkMhIpd2pFMie1O3yqfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICh+2lV vNGIjMqUDwcVUJQOjmXOMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzoqQV3xnD1Bx1VL/o2e8ytIMxdQrvh1SOMw4Nbn/My7bQ+anaJJXT FHXziuTjVZliMi5i6oq+meWY7W3UpbrAUk/gdul2Rfpa5zzap0Gkhv8Z4LLKymBT Db3Tf9iM2vXtUhlzcU5xPgLmqJLJ/y5g9jSu6A2O88NQznuONJyn4q32xbh/wN6l Zolbj4Ex1pDNGoKxQAdXVd39jC3exihKRCLGfKWO66UPadXzB7Z6wLxjBrMuL9E5 riBZHeVin7w43ebnPqyYrb5sAyQBCvWbIRQqiBGzycIRLFZx3WmKFAY5t8kUus3+ kyuy7uxJ9sOKt7HhSlOxW6Iv1GNg2pRa -----END CERTIFICATE-----Generated at Wed May 1 01:38:31 2024 by rpki-client on console-ams.rpki-client.org