$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: K5z4dFt7iSusd9KHMuP8rV5bPfrIbI/D/ASzeEg2RKk= Subject key identifier: 40:A8:9F:01:CC:12:34:F1:B4:3A:A2:4F:67:90:AA:B9:E9:41:6E:49 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: B5 Signing time: Sun 05 May 2024 06:35:49 +0000 Manifest this update: Sun 05 May 2024 06:35:49 +0000 Manifest next update: Sun 12 May 2024 06:35:49 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: qa+s7z097D56fzpgV4Uim9QMnyPtZ163mml4rt/zG9w=) 2: 1FE69168F9CB11EDAF704E7FC4F9AE02.roa (hash: yxcXU4Wz/FsuyQLnC6TnjIUCeIr5II451UbQF3q435Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: May 5 06:35:49 2024 GMT Not After : May 12 06:35:49 2024 GMT Subject: CN=663728c5-514d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:65:7b:a9:c3:95:e6:87:1d:cc:75:fb:d6: c0:57:71:2d:9e:1c:84:85:2a:7f:bc:f4:d0:ef:0c: 70:38:94:a5:f2:fb:04:bf:a0:49:80:db:ab:98:59: fe:ce:1a:73:b8:c9:5f:da:51:b1:16:df:d4:aa:9f: 08:c2:67:ed:f4:65:9c:8f:2e:4c:53:47:79:a7:85: a5:30:dd:0f:70:8f:79:56:c1:48:1d:60:c2:8d:96: 86:03:30:7e:0e:4f:72:4b:f9:ba:b1:7e:1e:b3:8e: fe:59:45:08:6c:b3:e9:4f:87:ba:10:88:78:7c:70: cc:02:cb:b4:1d:5b:3a:d4:15:33:8c:c2:fd:a9:b3: 64:b4:1d:02:0f:be:b0:dc:cb:44:52:e7:53:52:60: 57:47:91:fc:98:ca:69:b3:a4:66:c4:6c:e2:11:09: a6:3a:b0:b9:d5:ce:34:5f:e8:0b:76:8a:5e:7f:8d: 54:34:95:ad:3a:2c:d0:4c:2e:ab:87:1b:5f:f6:62: 04:0b:78:d1:2a:5a:6d:4d:3e:88:a5:79:54:6c:70: 26:b9:57:98:d2:de:8c:c9:4e:38:7b:16:a2:57:76: 6d:3c:2f:79:6e:50:c1:77:7b:c0:3f:01:d2:88:2d: 97:ef:bb:62:84:fb:dd:f8:6b:08:af:26:f1:1d:0e: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A8:9F:01:CC:12:34:F1:B4:3A:A2:4F:67:90:AA:B9:E9:41:6E:49 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:98:8d:f6:14:81:33:87:f2:7a:b7:1e:c1:4b:0a:ec:25:aa: b6:02:0c:12:b3:97:db:cf:f2:8b:ba:42:03:fa:8d:77:b7:ea: 52:18:2b:f4:49:de:23:37:f7:36:75:30:2f:fe:21:37:17:e7: 95:84:ce:6f:72:66:0b:75:ee:c5:63:27:c8:aa:6e:38:42:e3: fa:e4:6c:0a:79:e9:09:a3:80:5d:1f:dd:4f:de:b7:4d:6e:fc: 91:d9:f3:cf:15:00:92:59:cb:b9:02:37:6d:3f:d6:91:b8:88: 3f:a9:e4:8c:cb:e1:05:f2:c6:50:99:14:09:8d:25:cb:c1:7d: e5:25:e0:ef:78:0c:9b:26:51:ae:c7:d6:f4:a2:dd:d1:d4:78: f8:85:15:a8:7e:fb:b2:92:8e:33:99:da:27:9a:43:a2:32:07: 74:97:f7:a8:b1:e7:79:4e:95:40:11:70:34:54:a5:29:a9:08: 8c:e9:38:57:eb:86:9c:1e:a5:84:e6:31:f8:1d:2a:16:87:e6: 21:78:e2:5b:72:ec:f0:5a:91:4a:41:87:12:19:d9:b7:d0:7d: e5:5c:33:67:cc:8b:3b:fc:c9:02:36:e9:98:5e:3d:7b:c4:12: 2c:cd:22:2f:bd:92:8e:dc:ae:1f:49:3c:a6:4c:40:ae:f5:6b: 7d:f5:42:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjQwNTA1MDYzNTQ5WhcNMjQwNTEyMDYzNTQ5WjAYMRYwFAYD VQQDEw02NjM3MjhjNS01MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJVle6nDleaHHcx1+9bAV3EtnhyEhSp/vPTQ7wxwOJSl8vsEv6BJgNurmFn+ zhpzuMlf2lGxFt/Uqp8Iwmft9GWcjy5MU0d5p4WlMN0PcI95VsFIHWDCjZaGAzB+ Dk9yS/m6sX4es47+WUUIbLPpT4e6EIh4fHDMAsu0HVs61BUzjML9qbNktB0CD76w 3MtEUudTUmBXR5H8mMpps6RmxGziEQmmOrC51c40X+gLdopef41UNJWtOizQTC6r hxtf9mIEC3jRKlptTT6IpXlUbHAmuVeY0t6MyU44exaiV3ZtPC95blDBd3vAPwHS iC2X77tihPvd+GsIrybxHQ7nZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEConwHM EjTxtDqiT2eQqrnpQW5JMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3mI32FIEzh/J6tx7BSwrsJaq2AgwSs5fbz/KLukID+o13t+pSGCv0 Sd4jN/c2dTAv/iE3F+eVhM5vcmYLde7FYyfIqm44QuP65GwKeekJo4BdH91P3rdN bvyR2fPPFQCSWcu5AjdtP9aRuIg/qeSMy+EF8sZQmRQJjSXLwX3lJeDveAybJlGu x9b0ot3R1Hj4hRWofvuyko4zmdonmkOiMgd0l/eosed5TpVAEXA0VKUpqQiM6ThX 64acHqWE5jH4HSoWh+YheOJbcuzwWpFKQYcSGdm30H3lXDNnzIs7/MkCNumYXj17 xBIszSIvvZKO3K4fSTymTECu9Wt99UKj -----END CERTIFICATE-----Generated at Sun May 5 08:39:12 2024 by rpki-client on console-fra.rpki-client.org