$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft File: H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft (raw, json) Hash identifier: jzYWOk1lHb8hpqVSplmWiqjcK1HWmKazRBHM+VfaZ3k= Subject key identifier: 66:69:33:8A:C3:8F:13:45:3C:35:C8:6E:EB:95:2C:FE:B4:63:30:61 Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4 Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4 Certificate serial: 165C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft Manifest number: 1643 Signing time: Sat 18 May 2024 17:11:34 +0000 Manifest this update: Sat 18 May 2024 17:11:33 +0000 Manifest next update: Sat 25 May 2024 17:11:33 +0000 Files and hashes: 1: H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl (hash: x7BHOF5A+9dWEhRVvMI36kh3BNzQ/GmZP0QYfE2YJJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5724 (0x165c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4 Validity Not Before: May 18 17:11:33 2024 GMT Not After : May 25 17:11:33 2024 GMT Subject: CN=6648e145-b9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:b0:ea:45:eb:1f:5f:f5:73:09:82:c1:d1: 80:80:aa:55:37:99:17:e3:eb:61:e6:07:e7:53:24: a0:70:9d:d1:20:93:fe:a3:3f:89:3b:bc:05:26:0f: 10:11:e4:6a:1d:5c:29:7b:a3:41:db:a9:df:1d:64: 5e:ac:54:a9:cf:d7:35:0e:96:e0:9f:1f:a5:ce:ac: d5:b7:7a:99:24:4d:56:16:ed:1f:b2:cd:e5:83:3c: b4:64:27:69:a3:b7:ae:37:10:fe:65:d8:de:be:7f: 9e:af:ed:1c:48:37:82:6e:21:33:a9:d2:54:8e:fd: 2b:5f:a8:1f:bc:23:e9:b9:6b:48:e5:25:54:78:22: b6:95:cb:c4:73:ec:13:36:b2:98:d4:e6:e2:eb:96: bf:19:85:1b:75:cf:bf:09:fd:8b:68:09:57:9f:69: 3d:df:0d:dd:bf:83:e5:2e:1a:c6:30:de:b3:2c:cd: 98:db:e5:5a:71:fb:1b:90:40:c7:7d:b6:c1:c0:6e: e6:f5:f5:b9:f1:28:36:66:cb:f6:9e:32:b3:1a:4f: fb:98:18:31:21:58:45:56:64:fc:3a:80:a9:57:0c: 11:ee:af:5b:2e:f6:45:65:a0:6a:21:e1:9e:96:b1: 0a:a0:f0:b0:de:c3:d4:5c:cc:7b:8b:02:76:61:ac: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:69:33:8A:C3:8F:13:45:3C:35:C8:6E:EB:95:2C:FE:B4:63:30:61 X509v3 Authority Key Identifier: keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3e:98:6e:ca:fa:4a:1f:6e:02:88:04:b2:66:7c:94:8f:a6: 52:26:60:5d:c6:9a:a7:b5:34:59:15:ba:c1:dd:7d:b6:58:18: 51:30:c0:28:c7:bb:f2:cf:38:89:bc:b4:7a:03:87:de:6e:ac: f4:28:79:a9:62:94:33:85:22:76:1b:9e:93:f5:94:45:8c:16: 70:59:0a:a2:94:3d:ca:ce:6c:8f:77:ed:a7:3f:ea:b7:98:48: d2:fe:46:3c:d1:0b:1c:aa:31:6b:a9:65:b5:4f:17:53:a8:50: 60:69:df:42:6f:72:e5:34:c1:73:2c:d9:0b:3f:d7:4f:ca:b9: 67:cb:2d:ba:1a:2b:72:78:16:65:c3:58:67:f2:cd:c9:d0:43: 3e:62:71:d4:d7:19:00:2a:6a:09:2a:a5:87:74:88:73:f1:c6: c6:32:42:d9:22:fc:73:20:e5:11:98:8f:2a:aa:84:82:59:80: 36:bf:c3:0c:fc:b7:f1:5a:d3:3e:dc:85:7e:d8:29:45:b3:db: c6:49:38:ce:fb:d7:27:27:79:9e:33:49:69:60:35:a1:5d:44: ee:fb:f7:88:0a:95:c0:46:83:c4:82:cf:d5:b8:01:10:3f:0a: 1c:28:52:70:ce:bf:8c:e9:69:46:de:be:68:97:42:d2:6c:53: 61:6c:3f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk5MkYxMTAvBgNVBAUTKDFGNUZCM0E1RDdCNUNCMDQzRTlEOUMxQjM2MDhENEIy NjM1OTE2RjQwHhcNMjQwNTE4MTcxMTMzWhcNMjQwNTI1MTcxMTMzWjAYMRYwFAYD VQQDEw02NjQ4ZTE0NS1iOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNew6kXrH1/1cwmCwdGAgKpVN5kX4+th5gfnUySgcJ3RIJP+oz+JO7wFJg8Q EeRqHVwpe6NB26nfHWRerFSpz9c1Dpbgnx+lzqzVt3qZJE1WFu0fss3lgzy0ZCdp o7euNxD+Zdjevn+er+0cSDeCbiEzqdJUjv0rX6gfvCPpuWtI5SVUeCK2lcvEc+wT NrKY1Obi65a/GYUbdc+/Cf2LaAlXn2k93w3dv4PlLhrGMN6zLM2Y2+VacfsbkEDH fbbBwG7m9fW58Sg2Zsv2njKzGk/7mBgxIVhFVmT8OoCpVwwR7q9bLvZFZaBqIeGe lrEKoPCw3sPUXMx7iwJ2Yazb0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZpM4rD jxNFPDXIbuuVLP60YzBhMB8GA1UdIwQYMBaAFB9fs6XXtcsEPp2cGzYI1LJjWRb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkyRi82MjlCNzk5MEVC QUYxMUU3OTI4OTlFNEVDNEY5QUUwMi9IMS16cGRlMXl3US1uWndiTmdqVXNtTlpG dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxLXpwZGUxeXdRLW5ad2JOZ2pVc21OWkZ2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTkyRi82MjlCNzk5MEVCQUYxMUU3OTI4OTlFNEVDNEY5QUUwMi9IMS16cGRlMXl3 US1uWndiTmdqVXNtTlpGdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPPphuyvpKH24CiASyZnyUj6ZSJmBdxpqntTRZFbrB3X22WBhRMMAo x7vyzziJvLR6A4febqz0KHmpYpQzhSJ2G56T9ZRFjBZwWQqilD3KzmyPd+2nP+q3 mEjS/kY80QscqjFrqWW1TxdTqFBgad9Cb3LlNMFzLNkLP9dPyrlnyy26GityeBZl w1hn8s3J0EM+YnHU1xkAKmoJKqWHdIhz8cbGMkLZIvxzIOURmI8qqoSCWYA2v8MM /LfxWtM+3IV+2ClFs9vGSTjO+9cnJ3meM0lpYDWhXUTu+/eICpXARoPEgs/VuAEQ PwocKFJwzr+M6WlG3r5ol0LSbFNhbD+N -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org