$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: dQHmmuGkeE6xeZ19t5/aDggIhtmq/mcRjB5RFi5pdF0= Subject key identifier: 10:34:CE:33:5A:77:F9:BB:6A:81:93:39:92:44:57:65:4D:53:40:B2 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 79 Signing time: Fri 17 May 2024 07:26:23 +0000 Manifest this update: Fri 17 May 2024 07:26:23 +0000 Manifest next update: Fri 24 May 2024 07:26:23 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: 7vpPqCNVVW/apSjl2X+NHr62xc0ugoh8/KjTfhURcPI=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: 9scsfricJHNTlxVYnqhrqI59Q1yKpliiSe4JfKuir+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: May 17 07:26:23 2024 GMT Not After : May 24 07:26:23 2024 GMT Subject: CN=6647069f-8a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:8a:06:51:20:b5:bd:d8:be:8d:4d:61:0e: d8:39:d3:e2:1e:fc:8a:ff:f7:e1:29:7f:f4:d7:bd: 52:56:c6:4c:ac:e5:d2:2e:6a:f4:4e:94:c6:11:54: 2e:f0:67:12:c3:71:a3:4b:dc:ab:39:26:94:c7:f8: 32:ed:9b:ff:46:86:eb:14:ac:38:16:6a:59:f9:1a: 99:c1:cf:6c:4b:64:77:a2:e4:ff:e4:d1:67:4a:e2: 70:0b:65:31:f6:0c:b0:70:f9:a2:64:9e:7b:9e:3c: a1:0f:4e:56:92:bd:58:b8:34:3e:db:81:bc:9d:f4: f8:cf:a5:8d:d4:3b:10:72:25:ad:f6:0a:63:48:a9: ab:d3:1b:cb:19:81:3d:81:e7:16:a9:e9:c0:65:1e: 16:e1:29:a2:b7:10:aa:01:11:ff:16:15:36:1a:6d: a6:da:f6:38:66:d5:66:28:a9:23:99:ff:ad:35:f4: 34:73:9b:bb:79:da:40:b1:26:a3:ad:5f:f7:d6:b1: 1f:d2:34:0f:db:71:4d:5e:95:86:32:ab:d7:b8:5c: 2e:d3:de:cb:ea:25:b4:21:38:18:80:b3:e7:8b:8c: ae:5c:e2:44:6a:28:fe:14:98:12:0c:c4:96:df:f6: 6e:eb:20:f9:5a:4e:a9:cc:43:8b:6b:38:74:a0:26: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:CE:33:5A:77:F9:BB:6A:81:93:39:92:44:57:65:4D:53:40:B2 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e5:f7:e7:7f:00:94:88:d6:d6:59:87:70:a8:9a:75:f2:75: 98:f6:a4:bb:d0:ce:23:3c:df:a0:6c:d9:1b:b5:2e:76:7b:dc: e6:bd:7e:7d:44:b7:1f:53:7c:90:06:e7:4f:c1:56:1c:a7:95: 39:23:f7:13:3e:37:c6:5a:28:bf:26:9c:60:52:c6:73:ae:e3: 6b:0a:a3:10:79:f5:54:22:74:18:b4:9a:0f:2d:ce:75:31:7d: b5:0f:f9:1b:85:25:4e:9e:ef:2a:41:06:22:d9:ef:9d:03:9f: 90:de:56:81:43:f8:aa:60:71:2d:36:5c:f8:f5:d0:e0:9f:e4: ad:40:40:34:dc:8c:0a:a5:2d:2e:4e:77:bb:fa:84:b7:b4:95: 0c:1e:56:75:ed:9e:c0:70:4c:a8:fc:eb:50:e4:95:b1:d8:c1: 47:67:eb:de:2d:90:d0:98:7f:e4:00:d8:38:13:10:56:9b:c1: 10:9c:df:5b:a2:6d:9f:2e:be:42:70:47:f4:d4:ce:6d:d5:df: 3a:fc:b6:51:63:f3:e5:15:a0:a5:d8:0d:c6:00:93:b3:75:81: 6b:c7:42:c7:e6:d9:b7:e9:f6:27:bc:d4:85:54:c7:30:2a:cc: 13:66:d7:ea:b3:43:d5:6f:a9:d2:8b:d3:55:1c:9b:ef:1b:a8: d8:59:c7:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzZBRDExMC8GA1UEBRMoODY5OTNDODg2NUNDMDZCRDk4QkI5NEY0QTZFOTA2MTIy NzgyODAwMDAeFw0yNDA1MTcwNzI2MjNaFw0yNDA1MjQwNzI2MjNaMBgxFjAUBgNV BAMTDTY2NDcwNjlmLThhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB44oGUSC1vdi+jU1hDtg50+Ie/Ir/9+Epf/TXvVJWxkys5dIuavROlMYRVC7w ZxLDcaNL3Ks5JpTH+DLtm/9GhusUrDgWaln5GpnBz2xLZHei5P/k0WdK4nALZTH2 DLBw+aJknnuePKEPTlaSvVi4ND7bgbyd9PjPpY3UOxByJa32CmNIqavTG8sZgT2B 5xap6cBlHhbhKaK3EKoBEf8WFTYababa9jhm1WYoqSOZ/6019DRzm7t52kCxJqOt X/fWsR/SNA/bcU1elYYyq9e4XC7T3svqJbQhOBiAs+eLjK5c4kRqKP4UmBIMxJbf 9m7rIPlaTqnMQ4trOHSgJm0dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEDTOM1p3 +btqgZM5kkRXZU1TQLIwHwYDVR0jBBgwFoAUhpk8iGXMBr2Yu5T0pukGEieCgAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNkFELzUzOUYyM0NDNURG MjExRUU5QjA0NDMwRUM0RjlBRTAyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHBrOGlHWE1CcjJZdTVUMHB1a0dFaWVDZ0FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD NkFELzUzOUYyM0NDNURGMjExRUU5QjA0NDMwRUM0RjlBRTAyL2hwazhpR1hNQnIy WXU1VDBwdWtHRWllQ2dBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJDl9+d/AJSI1tZZh3ComnXydZj2pLvQziM836Bs2Ru1LnZ73Oa9fn1E tx9TfJAG50/BVhynlTkj9xM+N8ZaKL8mnGBSxnOu42sKoxB59VQidBi0mg8tznUx fbUP+RuFJU6e7ypBBiLZ750Dn5DeVoFD+KpgcS02XPj10OCf5K1AQDTcjAqlLS5O d7v6hLe0lQweVnXtnsBwTKj861DklbHYwUdn694tkNCYf+QA2DgTEFabwRCc31ui bZ8uvkJwR/TUzm3V3zr8tlFj8+UVoKXYDcYAk7N1gWvHQsfm2bfp9ie81IVUxzAq zBNm1+qzQ9VvqdKL01Ucm+8bqNhZxz8= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org