$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: RbGKfZgqTFRIzoRkvnmClCGIYBXkBitn4yWZ8wAmL64= Subject key identifier: 18:C6:C1:CF:7F:C1:68:A4:EC:74:08:14:AB:78:4D:86:89:7C:E0:A9 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 01B4 Signing time: Sun 19 May 2024 04:32:10 +0000 Manifest this update: Sun 19 May 2024 04:32:09 +0000 Manifest next update: Sun 26 May 2024 04:32:09 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: vlY1/uFpRfh6X1U3o86cjnuLZShoLqJHTXIT2VK1sJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: May 19 04:32:09 2024 GMT Not After : May 26 04:32:09 2024 GMT Subject: CN=664980c9-3880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:34:cf:c9:b3:cc:5c:18:ec:f4:76:a1:98: 84:11:fd:74:b8:23:9c:6a:de:80:fa:89:5f:a9:4d: b3:4a:fa:a1:5f:30:92:c3:2e:da:3a:f1:b7:e1:7a: 2e:78:a0:e9:01:cf:35:88:2b:4f:e8:66:ba:17:3f: 10:fb:87:91:66:d2:56:96:2e:e3:4e:1b:aa:9e:67: c9:2e:d9:e5:e9:bb:18:9f:30:d6:7d:cb:fd:71:85: e6:c3:06:2a:3f:f6:d2:c7:f7:d1:ca:00:5c:2e:00: 71:28:9c:56:3c:95:c7:8b:eb:26:b4:45:19:76:ed: d0:5a:9e:b3:62:ad:71:ca:a9:af:e7:92:5e:07:29: c8:cc:6e:76:dd:6b:c3:95:14:39:c0:c7:6c:04:7d: d5:3d:60:54:9a:cc:f6:0a:ac:0d:8e:0d:b0:11:12: 3d:55:89:d3:e2:8b:e1:0e:65:c9:84:1d:06:80:24: 81:40:b8:df:5d:b1:61:8b:cf:b5:a2:a3:d5:a9:d8: b9:d1:47:8c:15:50:68:c9:8a:ca:59:95:c3:90:ec: 32:a3:88:c4:29:a2:80:62:2f:16:76:f4:64:6c:52: 48:b6:b3:e5:bf:fc:6a:fc:cb:0b:91:e6:03:76:64: b0:33:45:b5:dd:6c:87:50:c1:3c:4c:4b:c9:bf:3b: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:C1:CF:7F:C1:68:A4:EC:74:08:14:AB:78:4D:86:89:7C:E0:A9 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:77:36:04:af:e4:cc:fc:bb:16:96:da:eb:06:5f:78:00:21: 52:b3:91:6d:9a:b6:3c:ce:76:4c:1b:4b:52:b1:80:ce:44:4d: 6a:ba:96:01:fc:5e:d3:18:7f:88:4a:af:04:87:22:d6:06:70: 36:97:90:97:fa:e3:54:90:01:cf:d5:58:20:90:d8:26:f0:8f: 5f:f4:6e:80:b8:6b:86:60:48:36:dc:11:44:da:7d:7a:ac:68: 43:0d:16:c9:f9:e0:d3:a3:6d:f0:44:7a:67:a6:19:b5:eb:23: 69:b4:b4:7f:25:23:c5:31:08:e0:ed:60:05:59:41:da:6a:04: ba:2b:16:34:dd:8f:af:93:a2:46:ef:f6:26:30:b0:27:69:22: a6:8f:6b:87:d0:20:c1:79:63:a1:18:d7:20:d9:1d:d0:2f:46: 57:34:12:48:dc:9d:af:14:4a:99:5a:eb:74:48:cf:48:51:f7: ad:c5:a8:46:ea:5e:7c:1e:2f:b0:02:5b:bc:da:7d:5b:e8:6f: 52:ae:e7:9b:85:f8:e5:bc:5b:8b:3a:ec:d5:95:52:34:14:04: de:9c:9d:18:dc:9a:fa:f3:bf:38:52:ba:20:0a:db:89:79:a5: 78:fa:83:e4:f3:e4:78:72:43:b5:1c:96:33:c6:96:4c:3f:2a: 60:74:be:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjQwNTE5MDQzMjA5WhcNMjQwNTI2MDQzMjA5WjAYMRYwFAYD VQQDEw02NjQ5ODBjOS0zODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcI0z8mzzFwY7PR2oZiEEf10uCOcat6A+olfqU2zSvqhXzCSwy7aOvG34Xou eKDpAc81iCtP6Ga6Fz8Q+4eRZtJWli7jThuqnmfJLtnl6bsYnzDWfcv9cYXmwwYq P/bSx/fRygBcLgBxKJxWPJXHi+smtEUZdu3QWp6zYq1xyqmv55JeBynIzG523WvD lRQ5wMdsBH3VPWBUmsz2CqwNjg2wERI9VYnT4ovhDmXJhB0GgCSBQLjfXbFhi8+1 oqPVqdi50UeMFVBoyYrKWZXDkOwyo4jEKaKAYi8WdvRkbFJItrPlv/xq/MsLkeYD dmSwM0W13WyHUME8TEvJvzt7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjGwc9/ wWik7HQIFKt4TYaJfOCpMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9dzYEr+TM/LsWltrrBl94ACFSs5FtmrY8znZMG0tSsYDORE1qupYB /F7TGH+ISq8EhyLWBnA2l5CX+uNUkAHP1VggkNgm8I9f9G6AuGuGYEg23BFE2n16 rGhDDRbJ+eDTo23wRHpnphm16yNptLR/JSPFMQjg7WAFWUHaagS6KxY03Y+vk6JG 7/YmMLAnaSKmj2uH0CDBeWOhGNcg2R3QL0ZXNBJI3J2vFEqZWut0SM9IUfetxahG 6l58Hi+wAlu82n1b6G9SruebhfjlvFuLOuzVlVI0FATenJ0Y3Jr68784UrogCtuJ eaV4+oPk8+R4ckO1HJYzxpZMPypgdL56 -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org