$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: 7234BEv8iu61ihFf9QL8k/oFT/Ev4KWJWmL/dysKAeM= Subject key identifier: 97:F6:15:DE:19:B4:4E:A4:46:FF:1C:BF:EB:DC:15:20:5E:24:E3:5E Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 0240 Signing time: Sun 19 May 2024 03:57:50 +0000 Manifest this update: Sun 19 May 2024 03:57:50 +0000 Manifest next update: Sun 26 May 2024 03:57:50 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: VtblkUJVwFsAZBAjH7pCs4nN1orCxO9B0gz4Z/sxzzY=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: CSGiYLZ6NekAj6P19BCgjbtyPLp1eMOjuUs3W4mDezA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: May 19 03:57:50 2024 GMT Not After : May 26 03:57:50 2024 GMT Subject: CN=664978be-2289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:e0:f5:c7:90:9b:79:ad:af:39:2c:d9:6b: 35:bf:20:9e:ec:5a:c6:b6:a7:11:7f:8e:63:2b:48: bf:59:1a:f6:a9:79:dc:44:f5:64:48:a8:83:e7:c7: 6c:62:0b:07:cf:c9:16:b4:cd:a3:cf:90:87:88:59: 61:b5:41:49:4d:87:5a:e5:6c:67:98:94:ee:1b:63: 34:83:e6:52:73:80:46:e7:72:19:ac:71:ba:e1:90: 53:a4:c8:c5:31:33:74:4a:8a:c5:83:70:66:d4:06: f5:8e:f9:bd:5d:8e:20:c7:5c:31:d5:11:2a:63:76: e7:7d:36:2d:63:c9:a9:1f:f9:64:50:e6:a9:66:bf: ab:05:e1:7c:e9:01:a8:7f:13:ac:b6:2e:3f:98:f6: d1:65:73:0d:47:4a:67:db:56:8c:4d:f9:88:b8:fc: 97:e1:d5:a6:87:03:71:12:2d:87:00:71:5d:08:5d: e6:f0:4e:c1:05:86:a8:7d:9d:62:94:8e:1c:35:78: 52:e6:79:7b:71:87:9b:76:8b:43:98:ac:99:c7:2e: 8e:f2:ce:5d:5d:be:cb:28:60:21:44:e7:cf:ba:93: d9:17:be:d7:48:68:85:06:fb:d0:7b:6b:bb:2a:e3: bd:3d:98:16:65:ac:bd:73:ba:fe:50:87:da:c3:f3: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:15:DE:19:B4:4E:A4:46:FF:1C:BF:EB:DC:15:20:5E:24:E3:5E X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:7f:29:86:c3:0d:99:55:26:c0:ca:e1:af:7f:b1:46:7a: a8:83:13:1f:4f:ea:90:71:61:71:6d:a8:44:e9:bf:bd:b4:81: 64:84:4a:24:74:75:82:78:1d:ac:34:dc:94:44:ed:4b:5a:2c: e5:da:dd:5f:b4:24:23:79:ab:8d:59:2d:76:df:a7:92:11:2d: 33:1e:4d:c8:a2:eb:b1:dc:fd:a0:04:f6:bf:e1:c8:70:bd:c2: ba:ce:cd:1d:16:86:b3:99:c9:6a:85:9a:ad:55:28:0b:57:f7: 5a:98:6b:46:24:6b:75:e9:17:ca:2e:5b:1f:c8:70:ca:02:3e: 81:02:a7:e3:87:5e:1b:aa:ba:a5:9d:6f:6b:4a:61:da:ac:03: 12:d9:ea:8d:0c:31:0f:35:02:4f:2c:0a:6c:35:1c:46:dc:82: 07:0b:94:e9:85:ba:ac:bf:da:1e:5e:64:6b:ad:31:17:a4:de: 71:ff:86:d5:58:81:cf:db:02:75:f2:a9:ba:02:a8:7a:27:f8: 44:af:9d:de:e1:18:25:d9:79:5f:4c:99:72:73:77:b3:f5:84: d9:2a:22:06:c8:d4:37:7c:36:c5:7e:ff:47:74:16:3d:13:ed: 7b:6d:4e:eb:a3:44:67:1b:ef:ce:9d:00:9e:a1:d9:44:d2:5d: 38:74:19:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjQwNTE5MDM1NzUwWhcNMjQwNTI2MDM1NzUwWjAYMRYwFAYD VQQDEw02NjQ5NzhiZS0yMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9vg9ceQm3mtrzks2Ws1vyCe7FrGtqcRf45jK0i/WRr2qXncRPVkSKiD58ds YgsHz8kWtM2jz5CHiFlhtUFJTYda5WxnmJTuG2M0g+ZSc4BG53IZrHG64ZBTpMjF MTN0SorFg3Bm1Ab1jvm9XY4gx1wx1REqY3bnfTYtY8mpH/lkUOapZr+rBeF86QGo fxOsti4/mPbRZXMNR0pn21aMTfmIuPyX4dWmhwNxEi2HAHFdCF3m8E7BBYaofZ1i lI4cNXhS5nl7cYebdotDmKyZxy6O8s5dXb7LKGAhROfPupPZF77XSGiFBvvQe2u7 KuO9PZgWZay9c7r+UIfaw/NOcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf2Fd4Z tE6kRv8cv+vcFSBeJONeMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaX8phsMNmVUmwMrhr3+xRnqogxMfT+qQcWFxbahE6b+9tIFkhEok dHWCeB2sNNyURO1LWizl2t1ftCQjeauNWS1236eSES0zHk3Iouux3P2gBPa/4chw vcK6zs0dFoazmclqhZqtVSgLV/damGtGJGt16RfKLlsfyHDKAj6BAqfjh14bqrql nW9rSmHarAMS2eqNDDEPNQJPLApsNRxG3IIHC5Tphbqsv9oeXmRrrTEXpN5x/4bV WIHP2wJ18qm6Aqh6J/hEr53e4Rgl2XlfTJlyc3ez9YTZKiIGyNQ3fDbFfv9HdBY9 E+17bU7ro0RnG+/OnQCeodlE0l04dBle -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org