$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: KQSaiTOKqaH9969ovB1TPP8BByY+z1Yv40/RPbrg+4k= Subject key identifier: 4F:D8:D2:D9:F9:FD:57:CD:E6:C0:04:21:5D:03:D6:9B:9A:B1:AB:6A Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 0113 Signing time: Sun 19 May 2024 05:23:49 +0000 Manifest this update: Sun 19 May 2024 05:23:49 +0000 Manifest next update: Sun 26 May 2024 05:23:49 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: OhpblkwYfVN6MLcvzBioeQbWN2RkxVdjF5wq0JaNmPI=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: rrPEmKXiVA4a8WLwDvdoL75de2L3H/mip5CkrpQQib0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: May 19 05:23:49 2024 GMT Not After : May 26 05:23:49 2024 GMT Subject: CN=66498ce5-5251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:4d:61:2e:ef:f8:ed:c8:84:e5:62:77:a9: 2c:4c:94:da:0a:64:2b:0b:48:5b:8c:25:e4:19:54: 0d:0d:2c:11:57:79:87:32:0a:da:a6:ad:9d:95:f6: de:bf:c0:5d:59:38:22:d4:a6:64:5a:ab:0b:bf:ad: 59:03:b3:2d:a5:ae:62:55:0c:68:13:bb:65:5a:29: 3c:44:9f:a3:f4:5a:b0:30:1d:90:24:9d:0a:ba:3b: 73:60:bb:0c:8a:d7:4c:fe:de:c6:23:2e:65:c8:3b: f4:e1:8d:d6:7e:67:7f:72:b9:5d:80:9c:b0:99:ed: 5c:a6:a9:a7:76:bb:8d:02:9c:46:a3:d7:f5:c2:a6: 03:af:82:57:06:3a:38:b6:6b:fe:00:d5:80:73:ae: 5f:90:7e:ae:8a:c2:56:04:d1:5f:07:1f:f4:84:76: 93:1b:29:02:99:6e:29:be:08:bf:fd:70:f4:c2:e9: bb:24:e3:fa:88:da:f9:04:81:46:40:b0:15:93:09: 96:9a:64:34:a0:a2:0c:cc:5c:13:88:ec:18:43:e9: d4:4a:c5:1c:8f:bb:32:79:7a:15:c1:2e:2a:85:f3: 6a:00:5d:c0:4b:15:25:96:5a:93:b1:50:2c:76:76: 99:12:30:e3:91:1a:7b:84:2e:0e:19:a0:1a:b7:6e: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D8:D2:D9:F9:FD:57:CD:E6:C0:04:21:5D:03:D6:9B:9A:B1:AB:6A X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:81:c3:7b:06:5c:52:02:06:54:8d:b8:ad:d8:02:97:3a:70: 02:6d:62:b0:04:3a:7f:95:99:88:af:2c:32:b3:9d:d1:17:97: 00:27:c4:1e:96:97:a3:ab:e6:59:97:da:bd:e4:42:48:18:bb: dd:e3:4b:18:8c:f3:36:b9:44:a8:1f:0a:e0:ec:ca:e3:a0:97: 9f:05:70:d5:5e:16:51:07:0e:8a:35:4a:e8:07:89:00:63:1a: cc:9e:19:59:ed:2f:15:3e:18:90:5e:32:70:01:c4:ac:71:8b: 63:23:58:df:b2:4c:35:51:a6:86:1f:33:6a:5f:17:99:ca:79: 90:bb:8e:68:91:0e:e4:6d:b9:87:7d:4c:8c:2f:d2:7b:54:b2: 95:43:19:c4:d0:64:60:31:b9:f7:26:ca:7d:04:d0:a3:fd:79: 4f:44:0c:a5:ff:81:59:4f:cf:69:3f:45:43:2b:a7:36:eb:7b: 1f:67:1f:19:13:24:62:ff:40:44:8b:3e:ef:63:bb:b1:d4:af: 78:fb:3b:a2:92:22:99:3c:f1:53:fe:3f:9f:e7:6a:6d:27:de: b2:78:ec:ab:1f:d7:2a:f7:da:a9:ba:b7:36:35:a7:b9:3b:69: a6:a2:98:64:de:5e:47:d8:49:e2:f0:90:84:1c:c2:b9:f4:de: 2b:ca:f9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjQwNTE5MDUyMzQ5WhcNMjQwNTI2MDUyMzQ5WjAYMRYwFAYD VQQDEw02NjQ5OGNlNS01MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pRNYS7v+O3IhOVid6ksTJTaCmQrC0hbjCXkGVQNDSwRV3mHMgrapq2dlfbe v8BdWTgi1KZkWqsLv61ZA7Mtpa5iVQxoE7tlWik8RJ+j9FqwMB2QJJ0KujtzYLsM itdM/t7GIy5lyDv04Y3Wfmd/crldgJywme1cpqmndruNApxGo9f1wqYDr4JXBjo4 tmv+ANWAc65fkH6uisJWBNFfBx/0hHaTGykCmW4pvgi//XD0wum7JOP6iNr5BIFG QLAVkwmWmmQ0oKIMzFwTiOwYQ+nUSsUcj7syeXoVwS4qhfNqAF3ASxUlllqTsVAs dnaZEjDjkRp7hC4OGaAat27/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/Y0tn5 /VfN5sAEIV0D1puasatqMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChgcN7BlxSAgZUjbit2AKXOnACbWKwBDp/lZmIrywys53RF5cAJ8Qe lpejq+ZZl9q95EJIGLvd40sYjPM2uUSoHwrg7MrjoJefBXDVXhZRBw6KNUroB4kA YxrMnhlZ7S8VPhiQXjJwAcSscYtjI1jfskw1UaaGHzNqXxeZynmQu45okQ7kbbmH fUyML9J7VLKVQxnE0GRgMbn3Jsp9BNCj/XlPRAyl/4FZT89pP0VDK6c263sfZx8Z EyRi/0BEiz7vY7ux1K94+zuikiKZPPFT/j+f52ptJ96yeOyrH9cq99qpurc2Nae5 O2mmophk3l5H2Eni8JCEHMK59N4ryvnQ -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org