$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: S0ymus2g02L7xw1b62qpRPRbpQvuRSDTXLnGTEXk+m0= Subject key identifier: 36:DC:3E:B4:CA:98:07:52:70:3D:F4:E6:55:5F:D3:92:1A:5F:1D:B5 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 068C Signing time: Sat 04 May 2024 23:31:19 +0000 Manifest this update: Sat 04 May 2024 23:31:19 +0000 Manifest next update: Sat 11 May 2024 23:31:19 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: VeKAzKhY1rQMZqKMmn7MJgRRIxalC1cUi+FS5RqtfB0=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 7ojR55WJV8soxk7l7a6+JaScckV9TPfrdrFJWU8jIms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: May 4 23:31:19 2024 GMT Not After : May 11 23:31:19 2024 GMT Subject: CN=6636c547-bd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:5f:9b:ac:45:15:63:46:54:29:aa:47:e8: 76:10:63:3a:a3:ed:ee:f8:42:57:8e:61:7b:30:1d: dd:f1:4f:68:d5:9c:99:3b:51:21:6c:fe:d4:82:aa: 01:54:e4:54:4e:14:f9:36:b2:12:f5:82:2d:22:7f: c7:e2:e8:f3:d2:91:86:34:74:35:8b:4b:cf:b3:ec: 1c:97:43:27:a9:4a:d2:87:a9:2c:e2:a9:b9:d1:b2: 00:94:72:dc:ea:3b:0c:e6:e3:20:d8:e8:48:a0:70: 45:01:44:51:dc:d6:c8:da:e1:d2:81:8a:5f:b3:32: 36:0f:22:ee:4c:c7:ac:1a:e3:75:40:87:c4:ce:53: f9:b0:df:32:7a:21:61:24:15:b9:a3:ef:a6:62:2c: 19:77:06:2f:4e:a7:61:b8:ca:07:8e:76:96:d6:67: 8c:b9:1c:06:86:bd:fe:96:cd:12:0d:80:17:d4:9f: 1d:42:20:db:79:36:9d:e8:b6:30:cc:ea:07:c3:69: 1b:43:a4:e2:56:df:a4:46:a1:e2:52:3e:d9:15:41: 63:a4:3d:5f:4c:f0:89:73:19:4b:00:d9:83:7c:51: 7b:b7:58:df:8e:f4:ca:24:4a:6b:c9:a8:71:c5:ba: 8c:2b:9f:56:28:22:ac:37:f4:7b:d6:19:a5:ad:2f: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:3E:B4:CA:98:07:52:70:3D:F4:E6:55:5F:D3:92:1A:5F:1D:B5 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:06:e6:b4:1b:bd:36:b9:34:af:22:f3:ff:9f:1e:53:df: fb:1f:06:87:a0:0d:48:ef:1b:5d:c4:d1:a2:4f:4a:35:b5:bb: 7b:d8:f4:54:48:17:dc:aa:27:8a:58:2a:9e:d0:40:80:bf:1b: a1:12:09:93:ae:e3:49:b5:82:18:6e:79:ca:5b:90:de:8d:bf: 2a:0f:98:d7:5b:d8:d0:17:76:d6:db:6f:8e:08:43:27:b3:81: 4a:44:cf:45:51:32:5e:63:7c:e7:ea:45:db:c3:57:ed:66:58: 8a:93:ac:8a:e8:b4:c7:ec:e9:52:ba:f1:8c:57:97:8c:7b:49: 32:1e:96:35:36:3c:3d:5e:cb:66:01:4d:29:d8:7d:1d:6f:1e: 38:83:84:93:3f:3e:af:cd:b4:b8:a9:44:ea:cf:73:63:c9:0c: e3:99:88:5e:80:21:4a:80:50:8e:e8:69:c6:74:ed:d5:e0:87: 4c:cd:9e:9d:c1:63:65:d2:1f:c4:4d:80:dc:f1:cb:8a:94:8f: 12:77:61:dd:d4:8c:89:0d:04:b3:80:e4:2f:a4:f6:4a:cf:13: f1:1f:13:0e:1d:89:70:df:31:a5:b7:2f:89:f0:a5:91:54:f1: c6:0d:63:79:6a:d0:7c:cc:73:3c:30:12:88:5f:df:06:ca:76: 31:d6:a1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjQwNTA0MjMzMTE5WhcNMjQwNTExMjMzMTE5WjAYMRYwFAYD VQQDEw02NjM2YzU0Ny1iZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69Jfm6xFFWNGVCmqR+h2EGM6o+3u+EJXjmF7MB3d8U9o1ZyZO1EhbP7UgqoB VORUThT5NrIS9YItIn/H4ujz0pGGNHQ1i0vPs+wcl0MnqUrSh6ks4qm50bIAlHLc 6jsM5uMg2OhIoHBFAURR3NbI2uHSgYpfszI2DyLuTMesGuN1QIfEzlP5sN8yeiFh JBW5o++mYiwZdwYvTqdhuMoHjnaW1meMuRwGhr3+ls0SDYAX1J8dQiDbeTad6LYw zOoHw2kbQ6TiVt+kRqHiUj7ZFUFjpD1fTPCJcxlLANmDfFF7t1jfjvTKJEpryahx xbqMK59WKCKsN/R71hmlrS/nqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbcPrTK mAdScD305lVf05IaXx21MB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLAbmtBu9Nrk0ryLz/58eU9/7HwaHoA1I7xtdxNGiT0o1tbt72PRU SBfcqieKWCqe0ECAvxuhEgmTruNJtYIYbnnKW5Dejb8qD5jXW9jQF3bW22+OCEMn s4FKRM9FUTJeY3zn6kXbw1ftZliKk6yK6LTH7OlSuvGMV5eMe0kyHpY1Njw9Xstm AU0p2H0dbx44g4STPz6vzbS4qUTqz3NjyQzjmYhegCFKgFCO6GnGdO3V4IdMzZ6d wWNl0h/ETYDc8cuKlI8Sd2Hd1IyJDQSzgOQvpPZKzxPxHxMOHYlw3zGlty+J8KWR VPHGDWN5atB8zHM8MBKIX98GynYx1qFw -----END CERTIFICATE-----Generated at Sun May 5 00:14:48 2024 by rpki-client on console-ams.rpki-client.org