$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json) Hash identifier: wn4NhyMS0VNNo2nE3pS5UcuVsoN7Ks6hDEp0+dE2SzU= Subject key identifier: 98:0D:F7:61:FB:E3:44:4C:97:4D:C8:03:FC:A1:78:10:CA:6E:E5:23 Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft Manifest number: 8B Signing time: Fri 17 May 2024 07:08:25 +0000 Manifest this update: Fri 17 May 2024 07:08:24 +0000 Manifest next update: Fri 24 May 2024 07:08:24 +0000 Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: 42YF3sFCKBhGMrSOd0PvEV144HWDJ2STihRz+HLcg10=) 2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: tg6YB8CmI4hLATM3HVn04RulbAjhd2EnI3kI+5qLfLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Validity Not Before: May 17 07:08:24 2024 GMT Not After : May 24 07:08:24 2024 GMT Subject: CN=66470269-7ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:f7:30:04:1e:5c:cd:8f:67:dc:12:78:77: 3f:d8:eb:ec:b9:17:bd:07:4e:06:43:53:6e:09:88: fd:82:c7:ca:f8:03:21:38:a4:96:cc:d9:d0:30:e7: 27:9d:71:50:5e:3a:5f:a7:7a:93:99:db:ad:75:66: ef:90:7e:24:db:86:6a:c5:9a:73:2e:ca:3f:7d:93: 19:b6:a4:62:87:4a:90:79:1c:06:45:8e:ef:a7:91: 0d:be:ac:61:fc:a4:40:bd:aa:6d:23:57:4f:0e:e2: d4:24:55:4c:1c:77:76:b8:9b:e7:0f:89:89:fe:8b: f7:8a:8b:f5:02:e6:d0:e8:ce:40:1a:86:5a:2d:90: 39:5c:db:f9:f8:eb:43:48:0e:8f:0c:5c:c9:b3:dd: f4:07:cc:73:8c:35:9a:35:22:5a:a0:cb:9f:f5:8c: db:50:a2:a9:bb:f6:4e:1c:c8:b4:d4:4f:7c:77:68: 3b:f6:08:98:65:ea:fb:16:07:5a:b7:0b:db:ac:c8: e0:4e:19:0b:b3:ef:42:c6:66:de:48:27:ad:0a:f5: d3:2b:de:8b:52:29:d5:41:7c:ee:66:c2:c7:07:75: 14:d7:49:90:3d:13:29:9b:97:e2:32:22:44:aa:ba: f1:25:3f:9c:3a:c6:27:b0:93:2c:51:5a:5e:12:e7: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0D:F7:61:FB:E3:44:4C:97:4D:C8:03:FC:A1:78:10:CA:6E:E5:23 X509v3 Authority Key Identifier: keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:53:e9:d9:a3:31:0e:07:14:7b:44:7b:6d:8b:67:39:92:43: 2c:1c:dd:7b:25:c4:ce:59:81:c7:ed:5d:b7:99:1c:4c:10:c6: 98:ba:dc:91:2c:53:82:f0:6b:a6:f6:4c:2f:fb:15:66:d9:6d: 00:01:ee:6c:47:5e:86:8d:97:94:ba:3a:58:3a:72:3e:0e:d4: a7:72:d1:49:5f:4f:3f:7c:f8:61:15:7f:d1:a8:f8:eb:80:51: ad:31:4e:0a:ec:12:db:7b:12:d4:d0:9a:7e:b2:e4:fd:53:6b: ec:75:d0:29:78:84:7a:3c:6c:15:95:b5:83:e8:47:46:35:4a: 04:63:88:d5:03:d9:f0:2f:de:ad:cf:61:c2:be:73:3d:4e:ca: 7f:b6:81:be:07:43:03:64:55:27:ce:b5:b5:82:51:64:97:f1: 68:b8:a8:95:af:9c:a3:08:a3:6c:a8:5a:d7:6f:3c:ad:d1:a3: 07:1a:a5:ee:7c:16:1b:02:92:b4:b0:92:18:a7:5d:49:6a:d1: 9a:73:3b:46:bc:c0:36:cf:c1:ff:ca:05:02:27:bc:9a:6b:45: 22:53:63:58:93:a7:09:b5:cc:5f:95:c1:9f:92:f4:32:ed:b3: b5:68:88:06:77:99:a1:ee:f8:48:4d:02:bc:0c:c4:75:69:25: 5b:1c:4c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD NEI3ODY3MEUwHhcNMjQwNTE3MDcwODI0WhcNMjQwNTI0MDcwODI0WjAYMRYwFAYD VQQDEw02NjQ3MDI2OS03ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn933MAQeXM2PZ9wSeHc/2OvsuRe9B04GQ1NuCYj9gsfK+AMhOKSWzNnQMOcn nXFQXjpfp3qTmdutdWbvkH4k24ZqxZpzLso/fZMZtqRih0qQeRwGRY7vp5ENvqxh /KRAvaptI1dPDuLUJFVMHHd2uJvnD4mJ/ov3iov1AubQ6M5AGoZaLZA5XNv5+OtD SA6PDFzJs930B8xzjDWaNSJaoMuf9YzbUKKpu/ZOHMi01E98d2g79giYZer7Fgda twvbrMjgThkLs+9CxmbeSCetCvXTK96LUinVQXzuZsLHB3UU10mQPRMpm5fiMiJE qrrxJT+cOsYnsJMsUVpeEuc2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgN92H7 40RMl03IA/yheBDKbuUjMB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4RC82MUExREYyRTQwMzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpP cWdDWDJ4OGhhSFRFdDRadzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNU+nZozEOBxR7RHtti2c5kkMsHN17JcTOWYHH7V23mRxMEMaYutyR LFOC8Gum9kwv+xVm2W0AAe5sR16GjZeUujpYOnI+DtSnctFJX08/fPhhFX/RqPjr gFGtMU4K7BLbexLU0Jp+suT9U2vsddApeIR6PGwVlbWD6EdGNUoEY4jVA9nwL96t z2HCvnM9Tsp/toG+B0MDZFUnzrW1glFkl/FouKiVr5yjCKNsqFrXbzyt0aMHGqXu fBYbApK0sJIYp11JatGacztGvMA2z8H/ygUCJ7yaa0UiU2NYk6cJtcxflcGfkvQy 7bO1aIgGd5mh7vhITQK8DMR1aSVbHEzi -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org