$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: obq24xn+g6zjhjmi0ohjIkn+mjTEzRihpQJdDvCtjXA= Subject key identifier: 62:39:D9:9A:30:6D:89:73:CB:55:CE:7F:7A:29:F8:FC:D2:04:14:66 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 169C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 169C Signing time: Fri 31 May 2024 17:20:18 +0000 Manifest this update: Fri 31 May 2024 17:20:17 +0000 Manifest next update: Fri 07 Jun 2024 17:20:17 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: hnJXaEaDk5gvPebMHIfUORLfyv7+HX97rVrUJYaY6po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5788 (0x169c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: May 31 17:20:17 2024 GMT Not After : Jun 7 17:20:17 2024 GMT Subject: CN=665a06d2-c39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:73:cc:17:48:46:3b:90:98:c5:42:0a:94: 03:ee:ad:05:67:e7:43:41:ca:84:32:5e:a3:d8:87: 9c:8a:1d:fa:42:af:a1:99:f9:a6:63:19:35:a0:cb: 3f:00:07:a6:bf:ec:c6:fd:53:db:9d:2a:fe:e4:fa: 7e:a3:ed:fb:d8:bd:fd:ad:0b:06:64:b6:d9:5f:16: 92:3e:03:f8:6f:3a:a1:aa:14:fd:0d:a1:b1:33:16: 1d:e3:d1:b8:d0:b5:55:e2:f1:16:f2:ad:fc:59:28: b9:3f:a8:7e:5c:83:f3:e4:19:fc:fd:6b:39:bf:4c: 62:61:d3:f4:37:41:b7:77:c1:27:18:05:46:88:2d: 5c:86:82:d4:d1:24:2b:30:e7:35:47:2c:e6:67:46: a8:cc:00:61:9c:26:38:fb:b5:42:04:14:75:6a:d9: ce:86:52:3a:79:32:a1:fd:0a:c9:95:b9:a4:a1:06: dc:ce:61:05:2f:63:97:f1:a7:88:4e:ca:e9:4b:4b: 35:0a:e8:a0:f1:c0:f9:99:32:f9:07:dd:6c:72:c9: 71:65:b5:cb:02:a9:5e:37:c2:f3:b5:92:77:0e:71: 27:48:28:c1:5f:38:b0:7d:c7:b0:a4:ae:1a:f6:a4: e6:57:0a:10:b8:3a:7d:8e:e2:95:42:4f:81:fd:0f: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:D9:9A:30:6D:89:73:CB:55:CE:7F:7A:29:F8:FC:D2:04:14:66 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:37:7b:d4:bd:1c:e6:6c:6d:64:39:81:9d:5a:d3:8f:1d:b0: 21:9b:7c:fe:55:7c:1c:d2:e4:3a:3d:94:aa:58:76:fe:2f:bc: c2:74:c7:07:45:01:f9:c6:cd:e8:00:79:67:98:1d:dc:2d:21: 09:d5:62:60:65:8f:5d:51:df:b4:7f:e4:0f:b0:3e:5c:5e:27: 7b:c1:f5:f2:02:5e:02:1b:75:11:e4:7f:d2:6e:ca:79:03:2b: 2d:49:d0:70:6b:6e:81:38:e9:76:45:cf:eb:bf:01:20:a8:b2: ac:22:29:99:87:6e:36:49:98:ee:85:f3:f5:d3:2d:c3:62:9e: 2e:93:63:90:39:f1:f1:9b:79:34:bd:05:85:26:bd:67:b2:dc: 52:bd:4b:34:76:ee:ca:84:84:11:56:7a:16:5b:b4:86:b0:c3: 1e:33:a7:19:86:ea:3a:b5:0e:87:b8:91:78:be:1a:82:2c:9b: c2:60:b6:8f:d5:81:c6:78:9f:03:81:ba:54:06:3d:e3:bd:59: 80:0d:11:bb:14:a5:02:de:87:b9:f3:aa:a1:46:76:f9:41:17: 7e:31:e5:be:2b:f2:81:ba:19:a0:2b:d8:19:06:47:bd:e0:81: a6:9b:a9:84:55:0d:6b:a4:6d:f8:d7:6c:36:68:6a:8c:c3:90: 39:8e:27:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjQwNTMxMTcyMDE3WhcNMjQwNjA3MTcyMDE3WjAYMRYwFAYD VQQDEw02NjVhMDZkMi1jMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTtzzBdIRjuQmMVCCpQD7q0FZ+dDQcqEMl6j2Iecih36Qq+hmfmmYxk1oMs/ AAemv+zG/VPbnSr+5Pp+o+372L39rQsGZLbZXxaSPgP4bzqhqhT9DaGxMxYd49G4 0LVV4vEW8q38WSi5P6h+XIPz5Bn8/Ws5v0xiYdP0N0G3d8EnGAVGiC1choLU0SQr MOc1RyzmZ0aozABhnCY4+7VCBBR1atnOhlI6eTKh/QrJlbmkoQbczmEFL2OX8aeI TsrpS0s1Cuig8cD5mTL5B91scslxZbXLAqleN8LztZJ3DnEnSCjBXziwfcewpK4a 9qTmVwoQuDp9juKVQk+B/Q9VmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI52Zow bYlzy1XOf3op+PzSBBRmMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuN3vUvRzmbG1kOYGdWtOPHbAhm3z+VXwc0uQ6PZSqWHb+L7zCdMcH RQH5xs3oAHlnmB3cLSEJ1WJgZY9dUd+0f+QPsD5cXid7wfXyAl4CG3UR5H/Sbsp5 AystSdBwa26BOOl2Rc/rvwEgqLKsIimZh242SZjuhfP10y3DYp4uk2OQOfHxm3k0 vQWFJr1nstxSvUs0du7KhIQRVnoWW7SGsMMeM6cZhuo6tQ6HuJF4vhqCLJvCYLaP 1YHGeJ8DgbpUBj3jvVmADRG7FKUC3oe586qhRnb5QRd+MeW+K/KBuhmgK9gZBke9 4IGmm6mEVQ1rpG3412w2aGqMw5A5jicq -----END CERTIFICATE-----Generated at Fri May 31 20:34:06 2024 by rpki-client on console-ams.rpki-client.org