$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json) Hash identifier: qI4knVKWHnWrd70AwM/D3wumRmyjjEk9dZJgNGwgzjk= Subject key identifier: BD:8E:98:05:73:5F:BD:41:94:FF:E2:EA:4B:0E:4E:8D:AE:64:43:A3 Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft Manifest number: 052C Signing time: Sat 27 Apr 2024 00:58:28 +0000 Manifest this update: Sat 27 Apr 2024 00:58:28 +0000 Manifest next update: Sat 04 May 2024 00:58:28 +0000 Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: n1dMovRddVbZlCvswFQUnoZf1GVvX35YPthjmXwCbDQ=) 2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: qXECf2jd3YFbV0dkm4BI5o/k7Qx5MHMWmZ0P/f7Exss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Validity Not Before: Apr 27 00:58:28 2024 GMT Not After : May 4 00:58:28 2024 GMT Subject: CN=662c4db4-b7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:49:0c:27:2c:4a:8f:9c:a2:27:f8:28:4b: 40:11:bf:7d:a2:a0:24:97:9b:94:72:35:70:84:ec: 28:a8:49:95:fb:ca:bb:d2:0d:bb:8e:87:22:3f:cd: 8a:b4:a8:9f:bb:96:de:6e:68:d8:a2:a4:d7:14:54: 6a:b9:72:76:32:71:37:f0:36:1f:6e:11:ee:39:5b: 27:e2:52:66:79:2b:80:d6:09:cd:7d:62:f1:2a:6d: e7:1a:68:f5:15:8d:7e:8a:7c:49:29:52:e2:80:5d: 32:60:9c:01:cc:13:24:0f:67:04:d2:0b:a0:a8:d8: 82:ce:ac:92:73:5d:45:fe:f7:74:c7:e8:dd:2e:08: 66:32:b4:ee:3b:be:61:5e:93:02:2a:85:29:32:be: b5:af:94:be:ed:24:c0:e0:e7:c2:f4:cc:dd:bf:65: 12:19:00:04:5e:d6:96:08:3e:4a:47:23:2c:4f:61: 07:ae:42:ff:12:0d:db:bc:e7:32:12:08:e7:f4:7f: 55:32:8e:15:96:1a:27:5b:bf:b0:4d:25:dc:1e:c9: e1:d7:5b:4e:60:1a:80:56:5e:95:1c:c7:4e:85:f4: 52:82:78:94:25:89:e6:7a:37:a0:f3:b1:f1:4a:0f: c2:c1:69:f7:d1:ec:f0:0c:ec:44:9b:0f:33:71:4d: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:98:05:73:5F:BD:41:94:FF:E2:EA:4B:0E:4E:8D:AE:64:43:A3 X509v3 Authority Key Identifier: keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d8:51:8c:24:06:30:f6:a6:bf:30:40:cd:11:b4:25:36:af: ac:ad:a7:b1:c1:25:75:2a:58:c9:d3:a4:9b:1e:fc:c1:98:9f: 5d:7f:bd:74:d4:7a:09:0a:4e:93:6c:25:f2:0e:14:0b:79:3f: 6d:69:aa:1a:e6:36:ed:67:76:c0:a0:0f:b2:50:04:a7:93:90: 82:9d:00:9d:26:df:7c:16:bb:63:72:f8:91:a3:59:eb:9d:01: 47:77:db:cb:8d:64:0e:77:e6:0e:84:fd:50:24:e5:d5:dc:d0: f7:3f:75:7b:65:fa:0d:82:13:3c:b0:8a:b5:5f:9d:5c:ef:87: 3d:5f:a2:76:cd:74:47:cd:82:cf:0a:4c:8a:95:18:84:fe:96: 58:d9:4d:4f:10:c3:f5:6e:27:6e:ad:89:29:2c:39:c9:d3:49: 87:48:6b:c2:02:38:2a:11:79:43:49:80:94:4e:bf:bc:d9:14: 70:2f:27:ca:3f:01:0b:38:53:aa:69:e1:84:58:6d:88:ae:f8: d9:09:c8:53:94:76:b0:f0:92:e0:b9:2a:8a:3c:c6:e5:2d:e4: d3:35:51:f8:bd:2c:89:d6:35:74:69:e5:51:14:1c:b1:96:2e: 0c:4c:f9:67:c1:2b:31:38:5a:20:eb:f4:a4:6b:0f:ee:ce:bb: 64:68:23:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD QUEyMjFFMzcwHhcNMjQwNDI3MDA1ODI4WhcNMjQwNTA0MDA1ODI4WjAYMRYwFAYD VQQDEw02NjJjNGRiNC1iN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwslJDCcsSo+coif4KEtAEb99oqAkl5uUcjVwhOwoqEmV+8q70g27jociP82K tKifu5bebmjYoqTXFFRquXJ2MnE38DYfbhHuOVsn4lJmeSuA1gnNfWLxKm3nGmj1 FY1+inxJKVLigF0yYJwBzBMkD2cE0gugqNiCzqySc11F/vd0x+jdLghmMrTuO75h XpMCKoUpMr61r5S+7STA4OfC9Mzdv2USGQAEXtaWCD5KRyMsT2EHrkL/Eg3bvOcy Egjn9H9VMo4VlhonW7+wTSXcHsnh11tOYBqAVl6VHMdOhfRSgniUJYnmejeg87Hx Sg/CwWn30ezwDOxEmw8zcU3CGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2OmAVz X71BlP/i6ksOTo2uZEOjMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz VXExLURndkRMUGZLb2lIamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu2FGMJAYw9qa/MEDNEbQlNq+sraexwSV1KljJ06SbHvzBmJ9df710 1HoJCk6TbCXyDhQLeT9taaoa5jbtZ3bAoA+yUASnk5CCnQCdJt98FrtjcviRo1nr nQFHd9vLjWQOd+YOhP1QJOXV3ND3P3V7ZfoNghM8sIq1X51c74c9X6J2zXRHzYLP CkyKlRiE/pZY2U1PEMP1bidurYkpLDnJ00mHSGvCAjgqEXlDSYCUTr+82RRwLyfK PwELOFOqaeGEWG2IrvjZCchTlHaw8JLguSqKPMblLeTTNVH4vSyJ1jV0aeVRFByx li4MTPlnwSsxOFog6/Skaw/uzrtkaCP0 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:15 2024 by rpki-client on console-ams.rpki-client.org