$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: sDsjj3FRIgPfn/zVSR7Ljq3mIrtDW6LeXsUcP8AA5l8= Subject key identifier: 07:2A:E3:9A:2D:FB:FA:7D:F1:B4:41:73:66:02:A4:5B:54:60:37:52 Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0C42 Signing time: Thu 02 May 2024 19:02:09 +0000 Manifest this update: Thu 02 May 2024 19:02:08 +0000 Manifest next update: Thu 09 May 2024 19:02:08 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: SDh3Zwr9Q2bhhthSHWVizetcvdGir6GlCeJVtY6HVag=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: HzScpJwJYs5VvrtmugkRETvjlrU+NB2MP0TJ9Ogw/c4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: May 2 19:02:08 2024 GMT Not After : May 9 19:02:08 2024 GMT Subject: CN=6633e331-32a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:7f:84:2f:3d:4c:62:d8:20:8b:4e:a1:4d: 7c:ad:55:c3:ec:b3:cf:5e:14:25:40:c2:a4:7a:b3: ce:d1:ba:2a:92:4f:3c:9a:30:66:4e:4c:53:80:01: d1:f9:3a:a0:24:74:c4:33:0f:7b:7f:af:ca:cd:c7: 34:0c:5d:9a:d1:db:fc:74:59:0f:5a:0b:10:4a:30: 5a:41:10:7d:f2:20:e6:a0:07:5d:41:27:77:40:3b: 32:7d:72:75:a6:ec:cf:62:88:d9:51:78:08:4f:9a: ba:6b:08:e0:11:bc:ac:1c:44:75:5b:7c:0f:79:28: a6:6d:a2:7f:a9:b0:1b:c8:8f:b3:ae:5a:01:ae:53: db:69:be:45:85:76:cc:ff:34:93:fd:93:10:34:bf: 21:71:7b:61:03:d9:bc:3b:d8:fc:1a:d1:5e:4b:9f: aa:0b:2b:cc:b2:1e:52:00:5a:5d:70:54:12:2c:9a: f9:c9:ef:cc:fa:33:2c:5c:7d:5c:e3:96:f7:6d:aa: 95:37:51:0b:a9:8d:40:c4:9b:df:c5:1f:96:6d:7b: 46:85:77:4f:b9:c0:1c:f3:33:c4:32:eb:cb:90:a0: 7f:62:cc:69:6f:64:12:37:d9:4e:1a:ff:48:ba:e4: f5:55:1c:ae:93:15:fd:24:fc:e2:85:87:87:19:7e: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2A:E3:9A:2D:FB:FA:7D:F1:B4:41:73:66:02:A4:5B:54:60:37:52 X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:80:7e:31:8e:26:0a:7d:bf:bf:9e:86:79:d5:5b:5d:48:0a: 2b:be:66:b8:5a:8c:f1:81:65:8b:1d:6b:56:c2:3c:d8:57:95: 03:50:1d:a6:97:b4:22:5b:8a:1e:79:7b:5e:6b:b6:4f:b0:14: 1b:73:e2:e3:c7:c3:a9:19:42:86:c1:9f:72:98:38:42:13:bd: a0:d6:4c:10:80:2a:c1:e2:59:ef:7d:d9:1e:aa:c1:2b:cc:2b: c6:49:81:c1:e2:fa:cf:43:b6:be:a6:f9:9d:e4:1c:43:d6:0b: f5:ed:e4:80:99:50:2b:e9:93:d1:7f:95:e4:04:ac:be:da:8b: 3d:b3:32:0b:c9:7c:0c:6a:d8:5a:2b:b5:bb:86:22:97:f9:0f: be:8f:5c:f4:c0:f2:3f:bc:2e:03:39:3d:5b:a0:8c:ab:1b:4d: ff:82:36:15:e3:43:f3:2f:94:e0:89:63:51:de:89:63:37:ca: 0d:65:35:96:ee:66:70:b2:69:a2:7e:d7:5a:87:0a:82:45:97: 55:2b:ae:dc:1d:cd:a4:fa:7c:ce:9a:2e:5a:49:87:09:59:7b: 6a:34:dd:56:7e:46:b0:24:51:04:ae:05:e0:7d:16:aa:f5:49: ca:3a:a1:d9:f2:1f:3b:0b:f0:03:73:18:71:93:ba:10:f2:99: 83:fc:cf:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjQwNTAyMTkwMjA4WhcNMjQwNTA5MTkwMjA4WjAYMRYwFAYD VQQDEw02NjMzZTMzMS0zMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ah/hC89TGLYIItOoU18rVXD7LPPXhQlQMKkerPO0boqkk88mjBmTkxTgAHR +TqgJHTEMw97f6/Kzcc0DF2a0dv8dFkPWgsQSjBaQRB98iDmoAddQSd3QDsyfXJ1 puzPYojZUXgIT5q6awjgEbysHER1W3wPeSimbaJ/qbAbyI+zrloBrlPbab5FhXbM /zST/ZMQNL8hcXthA9m8O9j8GtFeS5+qCyvMsh5SAFpdcFQSLJr5ye/M+jMsXH1c 45b3baqVN1ELqY1AxJvfxR+WbXtGhXdPucAc8zPEMuvLkKB/Ysxpb2QSN9lOGv9I uuT1VRyukxX9JPzihYeHGX4sLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcq45ot +/p98bRBc2YCpFtUYDdSMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4gH4xjiYKfb+/noZ51VtdSAorvma4WozxgWWLHWtWwjzYV5UDUB2m l7QiW4oeeXtea7ZPsBQbc+Ljx8OpGUKGwZ9ymDhCE72g1kwQgCrB4lnvfdkeqsEr zCvGSYHB4vrPQ7a+pvmd5BxD1gv17eSAmVAr6ZPRf5XkBKy+2os9szILyXwMatha K7W7hiKX+Q++j1z0wPI/vC4DOT1boIyrG03/gjYV40PzL5TgiWNR3oljN8oNZTWW 7mZwsmmiftdahwqCRZdVK67cHc2k+nzOmi5aSYcJWXtqNN1WfkawJFEErgXgfRaq 9UnKOqHZ8h87C/ADcxhxk7oQ8pmD/M9P -----END CERTIFICATE-----Generated at Thu May 2 20:50:37 2024 by rpki-client on console-fra.rpki-client.org