$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: fdCtPfVf05TqooOwWmd/ir8Ikb57kkpvz4tbbFpaCls= Subject key identifier: 3E:7F:20:50:AC:F9:B4:9D:6D:C0:56:91:B0:32:27:29:20:8B:34:10 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 054D Signing time: Sun 19 May 2024 00:51:42 +0000 Manifest this update: Sun 19 May 2024 00:51:41 +0000 Manifest next update: Sun 26 May 2024 00:51:41 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: zFxRjTe6d51jhtCInMl4kk5JEdVNG/ZYPUi7Tyk716g=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 0r8dNC3T3U5Gps7z0KLK3z7USX3hgA285YyOymm8LtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: May 19 00:51:41 2024 GMT Not After : May 26 00:51:41 2024 GMT Subject: CN=66494d1d-35c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:92:4d:e6:73:39:b7:8b:a4:fd:7c:a4:75: 3f:60:4f:ab:13:69:89:57:97:0b:a2:ab:72:58:15: d1:24:7b:5f:6d:7e:ac:3a:c6:48:15:cb:0c:81:cb: 05:f6:db:b0:cf:4b:96:57:db:27:61:1c:6c:ac:c2: 74:d1:21:0c:52:e0:f7:ec:d7:3d:cc:08:65:dd:19: 77:c5:23:67:6e:0e:58:7d:e8:be:64:70:a2:26:dc: 16:55:5d:74:26:7b:a1:ae:54:92:01:fc:13:b8:65: 61:ac:eb:ed:46:71:6b:38:8a:8f:49:db:f1:90:1e: 2f:34:ec:be:42:e8:04:60:b3:0d:45:f7:67:7c:d5: 0f:db:26:6a:a8:f0:06:34:2a:c3:c9:c3:f7:15:17: 3b:77:f8:fe:03:ab:91:45:e2:7a:f2:57:4a:d2:fb: 68:6e:27:61:d8:38:b9:e3:8a:11:ae:6d:df:34:13: 9f:60:fa:92:33:bd:01:c9:a5:c4:2b:1e:25:66:03: f1:36:05:d1:58:75:68:1a:8b:a0:87:9c:84:8c:23: c7:ce:6f:f2:a5:b3:97:8e:62:82:40:5f:86:2b:d8: fc:de:1c:8e:1d:6f:e4:ea:3c:fc:41:f4:a6:ca:7b: 88:b5:c5:5e:ea:f8:82:85:89:dd:ea:40:f4:98:3a: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:20:50:AC:F9:B4:9D:6D:C0:56:91:B0:32:27:29:20:8B:34:10 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fa:d6:82:5a:31:36:15:b0:e9:d6:59:46:57:cf:36:ab:f9: 7a:3d:d2:72:89:08:df:91:1a:34:65:55:97:47:08:1a:46:9b: 6a:d3:cf:f6:60:e3:36:74:d1:d2:29:33:71:aa:f6:db:f1:ae: 5d:a6:1e:ef:36:6e:e1:8e:c5:d0:12:7d:2c:91:5d:6b:56:de: d1:f0:63:2a:eb:4e:0d:69:b3:fe:6d:d5:bf:52:a9:c1:75:1e: 17:c0:b5:27:a1:21:23:91:af:33:42:7b:69:1f:7d:ed:90:16: 50:e8:5c:0d:de:54:d3:64:33:4a:fa:59:ee:7b:eb:19:25:51: 1e:69:84:9d:b0:53:94:5e:2f:98:eb:01:55:1b:c5:ca:c6:76: c0:08:32:7a:a3:37:25:92:72:79:78:88:c8:66:71:85:e8:d5: a5:d4:a0:da:44:4b:c3:59:1e:4c:36:86:d4:52:7e:8b:a2:d4: 07:c1:fc:d2:f1:85:b5:46:9a:47:62:94:7a:46:77:1e:a8:e3: 4b:bb:11:47:14:bd:7e:3f:ba:a3:ec:93:38:cc:fa:4d:8a:b9: 92:e2:7c:11:c1:d2:07:ac:ce:fe:5f:24:84:a1:dc:06:15:f9: de:cf:2c:b7:34:af:02:cc:e6:54:48:57:d2:f8:6e:a2:5e:de: cb:87:4a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjQwNTE5MDA1MTQxWhcNMjQwNTI2MDA1MTQxWjAYMRYwFAYD VQQDEw02NjQ5NGQxZC0zNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKySTeZzObeLpP18pHU/YE+rE2mJV5cLoqtyWBXRJHtfbX6sOsZIFcsMgcsF 9tuwz0uWV9snYRxsrMJ00SEMUuD37Nc9zAhl3Rl3xSNnbg5Yfei+ZHCiJtwWVV10 JnuhrlSSAfwTuGVhrOvtRnFrOIqPSdvxkB4vNOy+QugEYLMNRfdnfNUP2yZqqPAG NCrDycP3FRc7d/j+A6uRReJ68ldK0vtobidh2Di544oRrm3fNBOfYPqSM70ByaXE Kx4lZgPxNgXRWHVoGough5yEjCPHzm/ypbOXjmKCQF+GK9j83hyOHW/k6jz8QfSm ynuItcVe6viChYnd6kD0mDrqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5/IFCs +bSdbcBWkbAyJykgizQQMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7+taCWjE2FbDp1llGV882q/l6PdJyiQjfkRo0ZVWXRwgaRptq08/2 YOM2dNHSKTNxqvbb8a5dph7vNm7hjsXQEn0skV1rVt7R8GMq604NabP+bdW/UqnB dR4XwLUnoSEjka8zQntpH33tkBZQ6FwN3lTTZDNK+lnue+sZJVEeaYSdsFOUXi+Y 6wFVG8XKxnbACDJ6ozclknJ5eIjIZnGF6NWl1KDaREvDWR5MNobUUn6LotQHwfzS 8YW1RppHYpR6RnceqONLuxFHFL1+P7qj7JM4zPpNirmS4nwRwdIHrM7+XySEodwG Ffnezyy3NK8CzOZUSFfS+G6iXt7Lh0qz -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org