$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: EFK4DoVgnRfE1QURvnUJlsGQYS0j7H70axPhgBZ8mI0= Subject key identifier: 91:32:61:68:94:52:98:3C:A4:3F:5B:2B:84:46:50:37:FA:B8:83:49 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 0640 Signing time: Sat 18 May 2024 23:41:55 +0000 Manifest this update: Sat 18 May 2024 23:41:54 +0000 Manifest next update: Sat 25 May 2024 23:41:54 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: oKXMsxX5hqV8mXj7QFLOYKjljCYfB/2fSmtNHi9wX4I=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: AgcKAjaCRKIWP1a9YEXBW6Iro6Lq63Z3c3xlP1bvtXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: May 18 23:41:54 2024 GMT Not After : May 25 23:41:54 2024 GMT Subject: CN=66493cc3-ada5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:ce:11:82:d9:18:be:44:b3:16:b5:d7:80: e3:2f:2e:c4:3f:65:17:9d:b6:8d:e7:72:b2:e5:4a: d7:5f:eb:13:7b:89:51:81:0a:14:82:72:09:15:f6: 62:e5:2d:a3:21:89:2e:f5:6e:ab:ba:3a:52:02:22: e0:6c:da:22:81:3e:22:d5:4f:cb:1d:d5:07:a8:3f: 10:04:5b:7f:81:31:0a:25:d7:13:39:fa:67:ca:b1: 62:df:d5:46:42:79:c7:83:32:d5:1f:8e:05:47:b4: 5b:49:d7:74:ba:cb:88:9e:2a:c3:75:5a:d0:ef:b2: e5:6d:37:0a:8a:86:84:6f:33:d6:0a:98:8b:06:d0: 62:a7:78:d0:71:46:43:a2:e4:21:17:73:01:c8:aa: 34:a9:24:53:9e:70:c9:d8:ae:a4:86:f9:b4:1f:d4: 1c:2d:4d:18:5f:55:5a:09:4d:0d:51:ba:99:21:6c: 5a:ef:9e:14:10:7b:20:b3:81:ef:d5:43:65:26:73: 8d:1b:21:19:28:30:e3:46:1b:65:24:0a:3a:b6:38: 8b:ba:6e:fd:e1:c8:40:16:98:56:e5:1d:79:b1:46: 8e:2f:a3:18:ac:4d:78:28:ca:c8:d7:ff:61:cd:de: e9:f8:27:03:db:1a:59:14:67:d9:a1:38:80:b7:ff: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:32:61:68:94:52:98:3C:A4:3F:5B:2B:84:46:50:37:FA:B8:83:49 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:de:5d:c1:b6:45:e4:be:c8:cc:01:5d:aa:a4:85:b7:0f:a0: 97:83:ee:31:28:3e:9c:bb:d9:a8:c5:06:5b:b5:9d:fc:29:ac: 4a:b5:f3:6f:81:86:b2:c2:dc:6a:c5:8d:0b:fa:87:a7:5e:d1: 8c:9c:9f:21:d0:5b:ae:1e:c4:aa:e2:c1:2f:53:81:c5:56:57: 6e:49:60:e8:dd:41:51:62:0a:87:ac:83:8a:56:22:95:c6:25: e2:b9:77:be:32:58:15:9e:e7:25:b2:f1:4a:13:24:30:4e:1e: e8:8c:17:f8:fb:ca:8d:b9:0b:d8:5a:27:cb:41:d6:68:9c:17: c6:6a:f0:05:90:ae:f7:2e:bf:4c:39:13:90:52:d9:56:78:ae: 3b:d4:b9:34:67:fc:6c:bc:55:19:20:ff:e5:01:37:69:75:a9: 12:1e:a7:44:bd:58:71:ac:67:cd:9a:e7:31:48:a1:70:08:0f: 00:45:67:4e:4c:a2:d9:f3:92:bf:30:f5:1e:17:e2:9b:2a:c7: a4:35:eb:d8:28:61:46:3c:96:76:6d:f6:c3:b1:75:7a:ab:08: 82:19:a3:f1:26:65:a7:57:18:39:7c:48:6c:3d:1f:0d:61:3c: 88:2e:25:8a:c8:05:e8:15:72:f9:a7:fa:f4:37:3a:52:0d:1f: 00:82:7d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjQwNTE4MjM0MTU0WhcNMjQwNTI1MjM0MTU0WjAYMRYwFAYD VQQDEw02NjQ5M2NjMy1hZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAPOEYLZGL5Esxa114DjLy7EP2UXnbaN53Ky5UrXX+sTe4lRgQoUgnIJFfZi 5S2jIYku9W6rujpSAiLgbNoigT4i1U/LHdUHqD8QBFt/gTEKJdcTOfpnyrFi39VG QnnHgzLVH44FR7RbSdd0usuInirDdVrQ77LlbTcKioaEbzPWCpiLBtBip3jQcUZD ouQhF3MByKo0qSRTnnDJ2K6khvm0H9QcLU0YX1VaCU0NUbqZIWxa754UEHsgs4Hv 1UNlJnONGyEZKDDjRhtlJAo6tjiLum794chAFphW5R15sUaOL6MYrE14KMrI1/9h zd7p+CcD2xpZFGfZoTiAt/8hwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEyYWiU Upg8pD9bK4RGUDf6uINJMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC3l3BtkXkvsjMAV2qpIW3D6CXg+4xKD6cu9moxQZbtZ38KaxKtfNv gYaywtxqxY0L+oenXtGMnJ8h0FuuHsSq4sEvU4HFVlduSWDo3UFRYgqHrIOKViKV xiXiuXe+MlgVnuclsvFKEyQwTh7ojBf4+8qNuQvYWifLQdZonBfGavAFkK73Lr9M OROQUtlWeK471Lk0Z/xsvFUZIP/lATdpdakSHqdEvVhxrGfNmucxSKFwCA8ARWdO TKLZ85K/MPUeF+KbKsekNevYKGFGPJZ2bfbDsXV6qwiCGaPxJmWnVxg5fEhsPR8N YTyILiWKyAXoFXL5p/r0NzpSDR8Agn07 -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org