$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: ohz3zbFWnsyeBfT+OMURoYPpoeveVG1kWurklppEUWg= Subject key identifier: 37:B7:99:3E:10:DF:D9:0C:17:EF:2C:EE:DA:CB:78:51:65:E1:FC:3C Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 07CD Signing time: Thu 02 May 2024 22:08:26 +0000 Manifest this update: Thu 02 May 2024 22:08:26 +0000 Manifest next update: Thu 09 May 2024 22:08:26 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: fGfHr1Dv4X1Mlm1bfxQnGUbHAVzKA8024+YuF/NjKqM=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: 55fsaizBqEu3e90yC2x/I1kOSQT9VgTLmnZ3HBo57BI=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: RNINxFrQwPuuERXsrP312wcyCTJRUDXWpfeAQDP7E3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: May 2 22:08:26 2024 GMT Not After : May 9 22:08:26 2024 GMT Subject: CN=66340eda-ef2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:b0:5b:2f:5c:0d:32:14:9f:33:bf:2f:79: 29:49:69:5b:e7:55:bc:42:59:fb:03:e5:33:3c:f4: ff:18:66:ab:e2:c6:0c:38:4d:b0:47:2c:7b:03:41: 4a:9c:bb:0f:f8:43:35:89:5d:f1:e1:66:ac:cd:e7: 67:0c:80:53:2c:7a:dc:42:11:af:4f:bb:07:90:a5: 3a:e0:84:ef:cc:04:91:c2:e8:d2:9a:98:53:d1:4c: 10:0c:15:8c:33:ed:fd:6f:17:4d:34:87:ff:ce:e5: 02:af:90:51:b0:2d:23:5d:db:1d:bc:ee:da:1b:d6: bd:b1:2c:cf:9a:fc:7c:8b:29:bd:31:00:a9:26:c6: cc:a5:ad:d9:77:80:42:9e:3e:91:4e:ea:21:7e:2a: 30:c5:e0:b5:e3:53:d9:51:38:76:c1:f5:11:b4:3d: b9:38:b0:f1:62:df:c8:f8:2d:b1:54:80:fc:58:87: b4:23:04:7f:a6:fe:73:5d:6f:9a:64:c3:bd:18:76: 65:a9:cb:88:1f:33:bc:c0:99:2c:f6:f0:b9:96:d1: df:c9:82:79:1d:b9:b5:ef:64:df:db:0f:69:04:34: 15:5b:39:f2:0c:89:b0:ad:93:2a:1d:f2:27:e1:fa: ce:5c:88:3a:a5:07:55:19:10:24:a8:5b:fd:a0:c9: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B7:99:3E:10:DF:D9:0C:17:EF:2C:EE:DA:CB:78:51:65:E1:FC:3C X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:de:2b:9b:e9:b3:2b:60:3f:77:83:55:03:cf:2a:3b:6c:80: 0c:74:5a:bf:ef:15:84:19:5b:bd:91:10:84:10:7a:d4:a7:01: 05:f4:b2:90:90:17:1c:f8:bf:03:57:86:97:db:28:a7:b9:c1: 77:f8:74:a6:ca:69:cc:d5:12:a3:4e:60:71:4c:fc:0d:3e:80: a5:d9:ac:6f:59:01:36:d8:d0:0c:4a:ad:ad:b9:0b:b3:91:a1: 6e:41:0b:a0:d3:d9:51:a4:ce:63:51:b4:43:87:bd:0e:f3:d5: bd:09:75:b3:0b:1a:28:5c:b8:8b:5e:58:d6:65:2e:27:05:cf: ab:61:57:01:56:fb:7d:a3:03:4d:b5:fc:0b:2e:e6:d6:82:27: e2:3e:da:94:f3:5f:18:1c:e3:8e:c2:df:9d:bf:bd:42:9d:6c: 4a:e7:29:70:bd:b5:d8:29:38:9d:4c:5f:79:72:d1:41:e1:a4: 91:1a:73:03:5f:8b:52:e4:51:90:53:cc:ef:f0:d6:d4:80:96: d0:41:e6:c1:f4:72:1f:f5:15:b5:ca:91:42:45:ac:da:de:97: f4:29:f6:57:cb:e8:6c:02:7b:e7:35:00:ec:bf:d3:a5:3f:1b: 8e:25:1c:87:32:76:12:bc:cb:fd:bc:b4:48:fa:a9:29:93:0a: ed:c8:b7:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjQwNTAyMjIwODI2WhcNMjQwNTA5MjIwODI2WjAYMRYwFAYD VQQDEw02NjM0MGVkYS1lZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ewWy9cDTIUnzO/L3kpSWlb51W8Qln7A+UzPPT/GGar4sYMOE2wRyx7A0FK nLsP+EM1iV3x4WaszednDIBTLHrcQhGvT7sHkKU64ITvzASRwujSmphT0UwQDBWM M+39bxdNNIf/zuUCr5BRsC0jXdsdvO7aG9a9sSzPmvx8iym9MQCpJsbMpa3Zd4BC nj6RTuohfiowxeC141PZUTh2wfURtD25OLDxYt/I+C2xVID8WIe0IwR/pv5zXW+a ZMO9GHZlqcuIHzO8wJks9vC5ltHfyYJ5Hbm172Tf2w9pBDQVWznyDImwrZMqHfIn 4frOXIg6pQdVGRAkqFv9oMmvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe3mT4Q 39kMF+8s7trLeFFl4fw8MB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB23iub6bMrYD93g1UDzyo7bIAMdFq/7xWEGVu9kRCEEHrUpwEF9LKQ kBcc+L8DV4aX2yinucF3+HSmymnM1RKjTmBxTPwNPoCl2axvWQE22NAMSq2tuQuz kaFuQQug09lRpM5jUbRDh70O89W9CXWzCxooXLiLXljWZS4nBc+rYVcBVvt9owNN tfwLLubWgifiPtqU818YHOOOwt+dv71CnWxK5ylwvbXYKTidTF95ctFB4aSRGnMD X4tS5FGQU8zv8NbUgJbQQebB9HIf9RW1ypFCRaza3pf0KfZXy+hsAnvnNQDsv9Ol PxuOJRyHMnYSvMv9vLRI+qkpkwrtyLcH -----END CERTIFICATE-----Generated at Thu May 2 23:19:03 2024 by rpki-client on console-ams.rpki-client.org