$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: Jb2IjqgiHHKleBWAZByQT27f9kuYVnBswMmOvOr75NU= Subject key identifier: 50:78:8E:54:63:01:16:D1:50:21:79:E7:BF:00:02:11:08:5A:60:78 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 0204 Signing time: Thu 25 Apr 2024 04:10:26 +0000 Manifest this update: Thu 25 Apr 2024 04:10:26 +0000 Manifest next update: Thu 02 May 2024 04:10:26 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: s1r8T4gROUoPfCHOlI+7dFTwATmn8ryJm+RVIa3WG/Y=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: egme8BFID7TIU5c6pWlSyLPS75+N0wJnsJ4aLkcrsFM=) 3: F81C2716967311EDB9F09712C4F9AE02.roa (hash: SPHa5PS48789UPlr5blcJlmPdxpUynUbsfhP4avQrro=) 4: BF54F1F0FB4511EEA4E4B262C4F9AE02.roa (hash: 5Ou38Qxg9Gsoa53WcZNYf5wlEs+O9IWG7+V8DjfXWwU=) 5: F8AEE984967311EDB9F09712C4F9AE02.roa (hash: mFwam1HYa4bfUIplxEYvS9/6+EEM9R7cczgJAsUw1AU=) 6: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: IEVg+iADhHfbTrHmGzasbdnYvtdWc//bt6o2EzSFnLc=) 7: 550A6608F0A311EC8FE9181CC4F9AE02.roa (hash: +1RcTc3avE+DL63nOTXkmvZkmHBKxVaY+ilmzrItjsI=) 8: 95F8FAF82D6611EDA13CDE35C4F9AE02.roa (hash: c3kqFuEDOkXh4pc38GjdONAZUVx5T7cW1xT+v6G4Wvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 04:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Apr 25 04:10:26 2024 GMT Not After : May 2 04:10:26 2024 GMT Subject: CN=6629d7b2-fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:9f:98:ab:56:1b:e4:a2:66:e5:12:b7:1e: e3:d2:8b:d2:20:c5:a2:c1:3d:3c:a9:dd:c0:64:30: a2:36:14:ed:37:96:42:44:67:3e:a7:dd:45:ab:02: 30:cf:ea:dd:46:c3:e9:30:fe:fb:0f:c7:5c:59:04: 2b:a0:2d:9f:ad:bf:f0:0d:89:4f:03:b9:0e:4f:bb: 65:65:0a:d6:a8:bc:81:a1:ad:50:6d:a1:ce:a2:f9: b1:a0:6c:11:99:38:e1:62:8f:fd:0f:c8:e9:af:5d: 57:23:b4:62:90:1b:28:37:c7:88:88:a9:b6:e4:04: 52:19:5f:b6:a8:48:7e:4c:ed:f6:06:e3:43:84:aa: d9:cd:07:f3:8e:0f:ce:34:3d:b7:2b:c8:04:1e:d5: 63:ba:59:eb:3c:95:15:81:a9:e5:20:1d:d6:9b:8f: 6e:55:b0:6c:0c:62:8f:84:fc:c1:57:9a:fb:ab:9e: b3:a8:5e:9d:e2:1f:8e:72:55:09:fb:c0:3a:73:c0: d8:29:ab:d9:b4:95:63:7f:9f:cd:25:27:f4:af:c9: c0:d0:ce:2b:0b:ad:a5:75:57:ae:d2:88:4a:3c:47: 37:66:67:d8:48:38:0f:49:ea:93:6a:c2:20:0c:64: c7:bf:f4:11:cf:d3:dc:f9:b0:c3:99:ec:bd:90:14: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:78:8E:54:63:01:16:D1:50:21:79:E7:BF:00:02:11:08:5A:60:78 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cb:5b:5c:b0:88:47:2c:92:68:7f:ee:60:32:40:51:0c:6f: 8d:cf:f2:1e:57:20:dc:0e:9f:aa:6a:89:cc:8f:a6:91:c9:44: 49:4e:c4:2a:96:dd:70:a7:d4:c9:16:73:1e:0c:e2:6d:75:a8: f7:0c:ab:e3:ba:bb:d9:3f:3d:bb:73:af:01:0e:b4:5d:ff:a5: e6:77:cf:18:3a:5d:79:7a:79:2d:d3:b7:9f:55:c1:2c:1c:9b: 40:d0:31:dd:2d:59:29:1f:5c:25:f9:0f:bd:7f:4c:de:9c:1b: cd:d8:a6:4e:6a:b3:35:8a:af:45:ea:02:51:b9:8c:6b:93:e8: 6f:a0:bb:44:b5:55:98:13:5b:de:8a:16:15:f0:75:dd:cc:f4: 0a:d3:73:b7:d3:22:57:8f:f2:83:d0:1f:40:e0:fb:08:8b:ff: 1e:d9:f8:b3:4e:c5:ed:17:84:69:f8:96:7b:a6:24:fc:63:56: 8e:e0:e1:6a:84:fd:c2:90:17:6c:cd:87:de:e4:42:7d:8e:0c: 4e:4a:e6:44:5f:1b:42:c6:30:61:0a:6d:85:04:25:9a:bb:3b: 34:8c:0f:3f:6f:f1:f1:8e:8f:10:9f:04:f7:9e:09:71:52:4e: 0b:66:24:58:fb:62:44:f3:58:fb:9c:50:1d:a4:73:e4:6a:de: 25:e8:c0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjQwNDI1MDQxMDI2WhcNMjQwNTAyMDQxMDI2WjAYMRYwFAYD VQQDEw02NjI5ZDdiMi1mYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dWfmKtWG+SiZuUStx7j0ovSIMWiwT08qd3AZDCiNhTtN5ZCRGc+p91FqwIw z+rdRsPpMP77D8dcWQQroC2frb/wDYlPA7kOT7tlZQrWqLyBoa1QbaHOovmxoGwR mTjhYo/9D8jpr11XI7RikBsoN8eIiKm25ARSGV+2qEh+TO32BuNDhKrZzQfzjg/O ND23K8gEHtVjulnrPJUVganlIB3Wm49uVbBsDGKPhPzBV5r7q56zqF6d4h+OclUJ +8A6c8DYKavZtJVjf5/NJSf0r8nA0M4rC62ldVeu0ohKPEc3ZmfYSDgPSeqTasIg DGTHv/QRz9Pc+bDDmey9kBQh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB4jlRj ARbRUCF5578AAhEIWmB4MB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCay1tcsIhHLJJof+5gMkBRDG+Nz/IeVyDcDp+qaonMj6aRyURJTsQq lt1wp9TJFnMeDOJtdaj3DKvjurvZPz27c68BDrRd/6Xmd88YOl15enkt07efVcEs HJtA0DHdLVkpH1wl+Q+9f0zenBvN2KZOarM1iq9F6gJRuYxrk+hvoLtEtVWYE1ve ihYV8HXdzPQK03O30yJXj/KD0B9A4PsIi/8e2fizTsXtF4Rp+JZ7piT8Y1aO4OFq hP3CkBdszYfe5EJ9jgxOSuZEXxtCxjBhCm2FBCWauzs0jA8/b/Hxjo8QnwT3nglx Uk4LZiRY+2JE81j7nFAdpHPkat4l6MCT -----END CERTIFICATE-----Generated at Thu Apr 25 05:44:53 2024 by rpki-client on console-fra.rpki-client.org