$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: Z9x1j0Z3lTozXQ/bMzcZNMm7DC+buU9Rb5DlVoTY/L4= Subject key identifier: A9:8D:49:FB:4F:FB:CE:86:CF:7B:31:22:68:10:57:02:A1:4F:40:75 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: F8 Signing time: Fri 03 May 2024 05:45:36 +0000 Manifest this update: Fri 03 May 2024 05:45:35 +0000 Manifest next update: Fri 10 May 2024 05:45:35 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: /2MRhAMUjZRx9UkEalQCdhfhckjAIwiR4NGHdNqEfu0=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: j2B/1YBlPE46G5yeDHdnDnb9mxYWTsPXU0v9hB2F54Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: May 3 05:45:35 2024 GMT Not After : May 10 05:45:35 2024 GMT Subject: CN=663479ff-8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:a9:b4:f5:0d:16:d6:38:c2:c9:95:e0:5e: 82:89:22:4b:d7:2a:98:2b:dd:f3:80:26:7f:c4:eb: 16:c3:5c:29:ae:a4:5d:51:5d:98:50:2c:f4:5a:a0: a2:91:bf:ca:fa:9d:c3:c3:ec:03:ea:1e:57:e7:f9: 52:90:48:d5:b5:29:53:20:94:1d:00:80:b7:b8:db: 88:28:76:5a:6a:66:3a:b5:97:f6:c1:bb:d2:ac:b8: 6e:6f:bd:07:8f:2c:73:b6:cf:c3:43:ee:c7:aa:fd: bd:f2:29:11:49:1a:22:f4:04:d3:2a:ba:2e:74:66: 86:fe:b2:36:de:65:aa:22:72:8c:da:28:a4:f4:fe: ca:40:d8:9c:5c:ce:a9:ef:cc:b6:85:06:80:2b:4f: 62:5b:b5:1a:f8:04:5b:33:5a:26:cf:eb:96:43:0c: f8:6a:65:33:74:99:f9:87:77:6b:21:fe:4a:c9:33: ed:44:e1:02:24:1a:25:c6:d0:d4:50:0c:7b:66:87: 48:f5:b3:a3:5b:5c:9b:43:7d:80:74:68:5c:67:de: d9:29:a8:53:75:52:fc:de:38:a3:cf:26:b9:5f:d3: b2:a2:43:4f:dd:19:12:52:6e:35:35:e6:e9:1d:6b: 61:2b:97:53:7a:5d:47:05:50:e5:99:cd:a0:c2:a9: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:49:FB:4F:FB:CE:86:CF:7B:31:22:68:10:57:02:A1:4F:40:75 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:43:7b:d2:f0:68:97:e1:ce:2c:75:49:df:44:b4:13:6f:a5: d0:04:46:70:f1:89:32:21:a5:61:be:1e:2d:d1:5d:21:7b:42: 54:0d:dc:71:90:bd:e0:dd:99:f7:59:55:51:70:3d:0f:6b:a7: 65:91:b2:43:b7:c5:47:58:e8:b5:f9:8c:78:b7:9f:08:83:bf: 5c:90:e7:27:76:73:df:2f:ea:03:26:bf:e6:ed:f0:cd:02:9b: ac:f3:07:f0:6f:21:1f:e5:bc:dc:b6:53:59:87:9a:af:d9:b4: 8b:17:5b:b0:5c:41:54:df:91:94:87:6c:3c:54:bb:bd:fc:db: e2:2f:0b:70:99:8e:55:8a:54:f6:7c:d3:60:7c:ec:27:a4:b8: e5:0f:77:ef:9d:1e:d3:29:5d:8b:a8:1b:64:4f:22:80:1c:bb: 83:5b:ef:02:38:4a:3e:6f:b6:6f:5b:68:c2:f1:80:7d:2f:08: f4:03:d4:59:1e:1b:c7:28:65:7d:6a:d5:fb:38:ae:ce:1c:6c: 5c:a0:fb:2d:b4:39:cd:75:8a:91:ed:18:20:bf:d8:5a:a3:99: b3:84:32:fd:4b:c7:b3:84:ed:eb:73:24:c5:a5:43:f7:6c:1d: f6:9f:69:24:4d:7d:f7:00:15:a0:17:c5:db:86:1b:f6:ac:1c: af:37:d5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjQwNTAzMDU0NTM1WhcNMjQwNTEwMDU0NTM1WjAYMRYwFAYD VQQDEw02NjM0NzlmZi04NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU2ptPUNFtY4wsmV4F6CiSJL1yqYK93zgCZ/xOsWw1wprqRdUV2YUCz0WqCi kb/K+p3Dw+wD6h5X5/lSkEjVtSlTIJQdAIC3uNuIKHZaamY6tZf2wbvSrLhub70H jyxzts/DQ+7Hqv298ikRSRoi9ATTKroudGaG/rI23mWqInKM2iik9P7KQNicXM6p 78y2hQaAK09iW7Ua+ARbM1omz+uWQwz4amUzdJn5h3drIf5KyTPtROECJBolxtDU UAx7ZodI9bOjW1ybQ32AdGhcZ97ZKahTdVL83jijzya5X9OyokNP3RkSUm41Nebp HWthK5dTel1HBVDlmc2gwqngzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmNSftP +86Gz3sxImgQVwKhT0B1MB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQ3vS8GiX4c4sdUnfRLQTb6XQBEZw8YkyIaVhvh4t0V0he0JUDdxx kL3g3Zn3WVVRcD0Pa6dlkbJDt8VHWOi1+Yx4t58Ig79ckOcndnPfL+oDJr/m7fDN Apus8wfwbyEf5bzctlNZh5qv2bSLF1uwXEFU35GUh2w8VLu9/NviLwtwmY5VilT2 fNNgfOwnpLjlD3fvnR7TKV2LqBtkTyKAHLuDW+8COEo+b7ZvW2jC8YB9Lwj0A9RZ HhvHKGV9atX7OK7OHGxcoPsttDnNdYqR7Rggv9hao5mzhDL9S8ezhO3rcyTFpUP3 bB32n2kkTX33ABWgF8Xbhhv2rByvN9UU -----END CERTIFICATE-----Generated at Fri May 3 06:18:28 2024 by rpki-client on console-ams.rpki-client.org