$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: C7dt/4dEBORdn4jsQ4gGH+YKd3DZ9eS/a3gxZk1Xkug= Subject key identifier: 95:C9:A8:1B:FB:3C:AE:2B:B1:4E:9C:3E:01:D4:73:3F:64:E5:29:F3 Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 1646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 163C Signing time: Tue 30 Apr 2024 17:21:08 +0000 Manifest this update: Tue 30 Apr 2024 17:21:07 +0000 Manifest next update: Tue 07 May 2024 17:21:07 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: ltDViwfwUxW9v5/cLBbaLBZYAHEX4buxxnGQLKEW3Fk=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: 1qrDjblkeP2tM8jzoukBBQ3Hg5xw3h46ujdJa0cnruI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5702 (0x1646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: Apr 30 17:21:07 2024 GMT Not After : May 7 17:21:07 2024 GMT Subject: CN=66312883-2281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b5:c6:ff:47:55:ec:0a:bd:e5:08:97:ea:7e: e8:f0:1e:9d:66:bb:80:16:d8:25:e2:67:c4:fd:7d: eb:81:6c:4b:64:31:b9:63:d5:10:1b:9b:3f:5e:4f: 5f:b5:f8:0b:21:24:4e:10:4b:33:88:dd:30:15:a3: 9e:44:65:fc:8a:8e:30:97:d1:4e:3a:20:eb:a7:36: dc:11:59:69:80:43:8c:81:00:04:b3:b7:4f:f8:d6: c3:92:32:c1:b9:7f:8d:4a:27:22:ef:8e:f6:bc:f1: 97:a8:e1:72:58:0e:49:64:14:97:62:a8:56:39:d6: a5:3b:35:3b:d9:dc:c0:d2:a4:c7:e8:c1:7c:a7:a3: c9:28:07:4d:db:62:91:af:4d:c4:c3:53:b3:7e:8a: 82:23:53:76:4b:81:5f:4e:7b:80:9e:08:af:09:39: 6f:27:91:e9:e5:94:63:c7:51:0f:06:46:15:e1:a1: 4e:1c:96:3d:19:46:b0:99:62:2d:15:e4:1f:7c:52: 11:13:d9:d6:e1:79:62:85:4b:14:90:5e:bb:18:a4: 5e:ac:75:7b:26:ed:3d:25:75:84:9c:cb:25:bb:75: 5f:de:dd:b0:17:7f:e9:b2:33:2a:1b:97:b4:ac:a4: 81:cf:80:c2:bf:d3:19:a9:83:5b:df:5f:da:4e:64: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C9:A8:1B:FB:3C:AE:2B:B1:4E:9C:3E:01:D4:73:3F:64:E5:29:F3 X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d6:bd:39:d5:cb:5e:ba:2a:90:c6:9b:2c:76:ba:d0:ed:f6: 1a:3f:36:a3:d7:0e:1e:67:0f:02:63:a3:06:5b:e6:5d:68:fa: 6c:80:73:fe:bf:0a:d4:53:b7:51:94:79:43:39:af:31:30:b9: ca:7c:b8:49:fe:25:80:74:09:c1:b8:b7:20:38:60:93:8b:f3: ae:e9:83:ff:5a:69:6a:ac:17:9f:ea:42:aa:ac:4a:e8:9f:e0: be:12:80:29:fc:01:c7:9b:f5:a2:7b:7a:87:9e:12:55:d8:40: 8f:c6:68:2c:5b:d3:27:ef:6f:9f:cf:a9:24:c2:6d:b6:ff:ef: 36:5c:14:5a:8c:aa:df:c0:af:a0:aa:3a:3a:17:1d:59:39:a5: 6d:37:96:1c:7c:ab:d4:cc:e3:cc:e0:71:36:41:cc:81:21:40: 19:fa:5a:b0:dc:90:14:bc:13:e1:da:e7:c4:7b:af:c3:29:5a: e1:11:62:09:69:47:80:12:8f:7a:7b:6f:19:99:95:32:b9:27: ee:27:c4:56:1f:44:1a:5b:8e:89:f5:9a:ba:14:36:cd:7f:e5: a2:03:a7:28:be:87:a2:ad:1b:e9:fc:e1:70:01:b1:0b:6b:09: 06:ea:58:c6:97:50:a9:3f:7b:52:2e:da:4a:57:e9:87:85:e2: f5:68:17:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjQwNDMwMTcyMTA3WhcNMjQwNTA3MTcyMTA3WjAYMRYwFAYD VQQDEw02NjMxMjg4My0yMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rXG/0dV7Aq95QiX6n7o8B6dZruAFtgl4mfE/X3rgWxLZDG5Y9UQG5s/Xk9f tfgLISROEEsziN0wFaOeRGX8io4wl9FOOiDrpzbcEVlpgEOMgQAEs7dP+NbDkjLB uX+NSici7472vPGXqOFyWA5JZBSXYqhWOdalOzU72dzA0qTH6MF8p6PJKAdN22KR r03Ew1OzfoqCI1N2S4FfTnuAngivCTlvJ5Hp5ZRjx1EPBkYV4aFOHJY9GUawmWIt FeQffFIRE9nW4XlihUsUkF67GKRerHV7Ju09JXWEnMslu3Vf3t2wF3/psjMqG5e0 rKSBz4DCv9MZqYNb31/aTmQGawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXJqBv7 PK4rsU6cPgHUcz9k5SnzMB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO1r051cteuiqQxpssdrrQ7fYaPzaj1w4eZw8CY6MGW+ZdaPpsgHP+ vwrUU7dRlHlDOa8xMLnKfLhJ/iWAdAnBuLcgOGCTi/Ou6YP/WmlqrBef6kKqrEro n+C+EoAp/AHHm/Wie3qHnhJV2ECPxmgsW9Mn72+fz6kkwm22/+82XBRajKrfwK+g qjo6Fx1ZOaVtN5YcfKvUzOPM4HE2QcyBIUAZ+lqw3JAUvBPh2ufEe6/DKVrhEWIJ aUeAEo96e28ZmZUyuSfuJ8RWH0QaW46J9Zq6FDbNf+WiA6covoeirRvp/OFwAbEL awkG6ljGl1CpP3tSLtpKV+mHheL1aBdx -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:02 2024 by rpki-client on console-fra.rpki-client.org