$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.mft File: Hqy9mhIeTfZSP20dIqvUitxg9vU.mft (raw, json) Hash identifier: SKG2BiQv5DDELeX1JWNFOiY83XqWLnafJDLvonx2gOc= Subject key identifier: 4C:4E:C9:7A:A4:1D:17:52:09:83:53:1B:62:75:04:46:16:1E:B9:38 Authority key identifier: 1E:AC:BD:9A:12:1E:4D:F6:52:3F:6D:1D:22:AB:D4:8A:DC:60:F6:F5 Certificate issuer: /CN=A91F2807/serialNumber=1EACBD9A121E4DF6523F6D1D22ABD48ADC60F6F5 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hqy9mhIeTfZSP20dIqvUitxg9vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.mft Manifest number: 059D Signing time: Wed 01 May 2024 00:40:21 +0000 Manifest this update: Wed 01 May 2024 00:40:21 +0000 Manifest next update: Wed 08 May 2024 00:40:21 +0000 Files and hashes: 1: Hqy9mhIeTfZSP20dIqvUitxg9vU.crl (hash: jLlv2Is2epGT8t+1G4ayxhz7ko7m1hfTPGdchJXUwb0=) 2: A62F3B4C807611EBAF13304EC4F9AE02.roa (hash: K5o8/eOC9y6dFLMKOASzE+TFjV10JXCkX4t5BTyDQaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.crl rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hqy9mhIeTfZSP20dIqvUitxg9vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2807/serialNumber=1EACBD9A121E4DF6523F6D1D22ABD48ADC60F6F5 Validity Not Before: May 1 00:40:21 2024 GMT Not After : May 8 00:40:21 2024 GMT Subject: CN=66318f75-f440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:24:d3:c7:9b:62:36:37:4a:c9:7e:f4:2a: f9:e7:4b:fa:8d:04:bb:3d:4d:f5:17:da:00:c3:d5: 19:93:e0:6a:3a:ed:c3:d8:52:b2:fb:cb:8a:a7:30: bd:12:9b:76:ee:1b:8c:3b:c4:0b:85:c7:99:ff:a3: a1:17:d5:4d:6a:f5:45:46:a6:3c:79:11:cf:d1:51: 04:c8:a9:66:d8:64:a1:98:8c:4d:58:c5:53:f6:9a: 3d:7a:66:2e:17:b2:b8:78:cc:43:10:05:35:e6:2f: 21:83:20:ee:30:f3:83:35:7c:2b:f5:cc:f9:08:f9: a2:73:af:70:c2:0b:41:11:9c:5a:8b:4f:ca:ea:4b: 38:4a:2c:81:f5:2a:bd:3a:c7:a2:5d:be:0e:33:bd: 96:8f:55:92:e7:fd:0d:91:a5:b2:63:66:24:3d:ae: d2:11:13:ac:6f:05:da:fc:21:a0:b2:07:9e:56:20: 96:26:fc:3f:92:dc:5b:53:00:6e:0e:c8:31:74:95: 47:d5:2f:c1:44:d3:31:e0:2d:fb:b9:9e:8a:6a:a5: cf:2b:5e:8b:5a:dd:a6:0a:87:02:05:42:c6:07:2e: d8:2b:64:c9:c5:9a:4f:29:6b:73:58:93:1c:f7:07: af:09:7c:3e:a2:6f:dc:cf:60:61:f0:e3:d0:aa:6b: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:C9:7A:A4:1D:17:52:09:83:53:1B:62:75:04:46:16:1E:B9:38 X509v3 Authority Key Identifier: keyid:1E:AC:BD:9A:12:1E:4D:F6:52:3F:6D:1D:22:AB:D4:8A:DC:60:F6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hqy9mhIeTfZSP20dIqvUitxg9vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e0:3e:55:ee:c7:9c:5e:b3:d8:cf:21:2e:cd:85:16:73:83: ec:a0:52:bb:2c:af:b5:6a:a5:6b:30:1c:87:ff:11:1a:50:82: 3d:67:af:0e:46:ed:44:3c:d7:66:1a:34:a6:54:50:e6:17:ed: db:89:e9:14:23:7d:90:27:d1:9d:be:d3:cc:76:b2:7c:68:07: 3e:6c:80:1b:64:68:90:f6:ba:fa:8b:51:38:1a:19:b1:52:64: be:dc:80:4f:95:03:2c:e5:f5:98:a7:b2:00:7a:4e:9c:6b:c5: d9:d8:43:b0:b6:15:eb:31:d0:2f:7e:a8:0c:fd:67:d3:41:79: 67:73:0b:a4:76:06:64:11:b7:ba:1d:e3:30:cf:ae:1d:e4:b1: e4:2d:1d:b4:ee:8e:f5:b2:2b:a2:f5:11:44:6f:10:12:b5:79: bf:2a:bd:23:a4:e1:f6:11:c5:30:43:34:02:15:a7:6c:ca:ae: dd:3f:24:50:7a:da:91:ce:2d:ed:98:98:4e:b6:07:30:e4:eb: 3d:b6:3b:61:36:ad:1a:4c:b9:00:70:c1:b4:2c:1f:3f:59:e7: 80:cf:a6:5d:16:6f:d7:c5:20:44:18:8e:cb:c1:ad:a0:f4:ab: 9e:db:f7:49:7c:63:c0:44:41:d3:84:e9:cd:f6:58:7d:2c:d0: 27:68:0b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI4MDcxMTAvBgNVBAUTKDFFQUNCRDlBMTIxRTRERjY1MjNGNkQxRDIyQUJENDhB REM2MEY2RjUwHhcNMjQwNTAxMDA0MDIxWhcNMjQwNTA4MDA0MDIxWjAYMRYwFAYD VQQDEw02NjMxOGY3NS1mNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Fgk08ebYjY3Ssl+9Cr550v6jQS7PU31F9oAw9UZk+BqOu3D2FKy+8uKpzC9 Ept27huMO8QLhceZ/6OhF9VNavVFRqY8eRHP0VEEyKlm2GShmIxNWMVT9po9emYu F7K4eMxDEAU15i8hgyDuMPODNXwr9cz5CPmic69wwgtBEZxai0/K6ks4SiyB9Sq9 OseiXb4OM72Wj1WS5/0NkaWyY2YkPa7SEROsbwXa/CGgsgeeViCWJvw/ktxbUwBu DsgxdJVH1S/BRNMx4C37uZ6KaqXPK16LWt2mCocCBULGBy7YK2TJxZpPKWtzWJMc 9wevCXw+om/cz2Bh8OPQqmvW1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExOyXqk HRdSCYNTG2J1BEYWHrk4MB8GA1UdIwQYMBaAFB6svZoSHk32Uj9tHSKr1IrcYPb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjgwNy81RkU3RUU1NDgw NzExMUVCQTY1RUMyODFDNEY5QUUwMi9IcXk5bWhJZVRmWlNQMjBkSXF2VWl0eGc5 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hxeTltaEllVGZaU1AyMGRJcXZVaXR4Zzl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjgwNy81RkU3RUU1NDgwNzExMUVCQTY1RUMyODFDNEY5QUUwMi9IcXk5bWhJZVRm WlNQMjBkSXF2VWl0eGc5dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy4D5V7secXrPYzyEuzYUWc4PsoFK7LK+1aqVrMByH/xEaUII9Z68O Ru1EPNdmGjSmVFDmF+3biekUI32QJ9GdvtPMdrJ8aAc+bIAbZGiQ9rr6i1E4Ghmx UmS+3IBPlQMs5fWYp7IAek6ca8XZ2EOwthXrMdAvfqgM/WfTQXlncwukdgZkEbe6 HeMwz64d5LHkLR207o71siui9RFEbxAStXm/Kr0jpOH2EcUwQzQCFadsyq7dPyRQ etqRzi3tmJhOtgcw5Os9tjthNq0aTLkAcMG0LB8/WeeAz6ZdFm/XxSBEGI7Lwa2g 9Kue2/dJfGPAREHThOnN9lh9LNAnaAse -----END CERTIFICATE-----Generated at Wed May 1 01:38:32 2024 by rpki-client on console-ams.rpki-client.org