$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: 8DbJhe9hgZ5RhO7qc9X0+ZlxnT9OyvTgEJeUV4LJM6M= Subject key identifier: 19:8D:D3:9D:F4:7A:E1:E6:33:41:F7:B4:2F:5C:FE:43:08:1F:4C:2A Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 05F8 Signing time: Tue 07 May 2024 00:03:52 +0000 Manifest this update: Tue 07 May 2024 00:03:52 +0000 Manifest next update: Tue 14 May 2024 00:03:52 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: Gop8cJZaEZzZyFLkInNnOoLQUvG5bqits6vLSmF+0Yc=) 2: 38AA54903B1311ED8383933FC4F9AE02.roa (hash: 4O1C9pNEJNniPeZ+H7XJNe0P8LxiTCMr9Khl4XthK/w=) 3: A012E0B617C811ED95FB874FC4F9AE02.roa (hash: F3eGce0lTbww1uwyDWzWlNRW0CEK/RivZec6OVafsys=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: nXxKl6zFfdEe4k+gVcqQx7nn/aVlIAOi20Fz1uOFqNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: May 7 00:03:52 2024 GMT Not After : May 14 00:03:52 2024 GMT Subject: CN=66396fe8-5223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:93:23:a4:09:a4:3c:2e:87:9b:37:cd:d8: 7e:8e:35:0c:cc:83:9f:7e:d2:12:44:0e:31:44:00: fb:89:18:80:4e:a5:a2:1c:14:31:1f:e0:22:b4:f2: 63:39:5c:d5:ae:6f:37:f8:28:93:7e:fb:36:b6:3e: 4c:8c:a8:ad:bd:b8:f6:cf:3e:8f:0e:d8:78:90:c8: f4:94:e4:4b:ce:bb:35:a2:91:51:ae:f0:9f:8e:ba: 3f:c3:b7:af:df:58:8a:3b:b9:82:56:b1:54:fe:d6: eb:dd:3b:ab:d1:32:80:23:49:4b:7e:53:56:3c:aa: 7e:05:9d:27:87:c4:e8:6d:7c:0a:9f:16:a7:60:8c: 1a:22:78:7c:26:ee:cf:f0:f8:a3:88:62:2d:0f:07: 3c:2d:c9:07:57:1c:3b:f9:65:97:b9:b2:e1:8b:ea: 18:cb:a2:d2:b6:c8:3c:6d:fe:ba:9e:29:e8:57:04: 05:2b:3d:de:58:5e:63:7b:8e:0d:47:dd:63:89:13: 52:2f:4f:ed:e2:7d:45:ec:ad:cb:48:56:1f:16:62: 34:f7:9e:34:6f:61:f3:fd:89:23:ec:ac:82:e8:74: 48:13:d1:5c:1a:9d:a0:11:d9:13:10:8d:23:fd:52: 34:be:13:bd:4c:a1:41:a4:a2:94:de:a3:23:9c:df: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8D:D3:9D:F4:7A:E1:E6:33:41:F7:B4:2F:5C:FE:43:08:1F:4C:2A X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:78:5d:86:3d:4e:10:4c:73:db:2e:50:a2:0c:c5:60:44:5f: bc:e4:6b:08:e3:f4:22:ca:39:11:d8:f6:3f:49:5c:5c:a0:d6: 51:e7:4e:ee:42:5c:81:b7:eb:06:2a:b7:05:5e:35:d5:f7:e4: e6:cd:b8:30:f1:60:5f:9c:e1:81:77:9b:e6:9f:35:83:06:51: a2:74:9f:bb:e1:2e:7e:10:c0:4b:38:67:75:73:dd:e0:e3:06: 1b:8d:03:37:19:af:9f:a6:c7:0b:dc:67:7f:66:b5:1a:6f:39: 7a:1e:bc:c6:a7:05:ba:87:20:5c:2d:05:10:e9:e7:b5:78:16: ac:fc:51:d0:55:1d:95:1e:3c:a7:d7:66:8a:bd:c2:60:59:14: f7:d3:97:39:b7:42:ef:36:ad:e5:a0:6e:c8:27:35:ce:b7:f9: 3e:7a:e7:8a:c7:fa:b7:ee:e3:46:96:0a:6c:9b:f4:c0:5f:a5: 98:1d:04:b8:49:67:91:6e:41:9e:6b:1a:26:22:04:2d:3a:74: ed:c1:ce:b5:47:2b:39:ae:7f:9d:98:f5:ad:e0:ab:ac:5c:a5: 28:cb:dd:94:98:13:6c:cd:83:97:31:fe:bc:96:a2:1a:d0:f1: c9:ef:e3:4b:3f:12:5d:62:61:11:e5:fa:a7:ff:c6:2f:cc:93: 73:c7:d0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjQwNTA3MDAwMzUyWhcNMjQwNTE0MDAwMzUyWjAYMRYwFAYD VQQDEw02NjM5NmZlOC01MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+iTI6QJpDwuh5s3zdh+jjUMzIOfftISRA4xRAD7iRiATqWiHBQxH+AitPJj OVzVrm83+CiTfvs2tj5MjKitvbj2zz6PDth4kMj0lORLzrs1opFRrvCfjro/w7ev 31iKO7mCVrFU/tbr3Tur0TKAI0lLflNWPKp+BZ0nh8TobXwKnxanYIwaInh8Ju7P 8PijiGItDwc8LckHVxw7+WWXubLhi+oYy6LStsg8bf66ninoVwQFKz3eWF5je44N R91jiRNSL0/t4n1F7K3LSFYfFmI09540b2Hz/Ykj7KyC6HRIE9FcGp2gEdkTEI0j /VI0vhO9TKFBpKKU3qMjnN/CAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmN0530 euHmM0H3tC9c/kMIH0wqMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjeF2GPU4QTHPbLlCiDMVgRF+85GsI4/QiyjkR2PY/SVxcoNZR507u QlyBt+sGKrcFXjXV9+Tmzbgw8WBfnOGBd5vmnzWDBlGidJ+74S5+EMBLOGd1c93g 4wYbjQM3Ga+fpscL3Gd/ZrUabzl6HrzGpwW6hyBcLQUQ6ee1eBas/FHQVR2VHjyn 12aKvcJgWRT305c5t0LvNq3loG7IJzXOt/k+eueKx/q37uNGlgpsm/TAX6WYHQS4 SWeRbkGeaxomIgQtOnTtwc61Rys5rn+dmPWt4KusXKUoy92UmBNszYOXMf68lqIa 0PHJ7+NLPxJdYmER5fqn/8YvzJNzx9AY -----END CERTIFICATE-----Generated at Tue May 7 01:58:31 2024 by rpki-client on console-fra.rpki-client.org