$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: 4N/Mm17dkxvDaVErvmqvZtVfJJ75oGhDP79Zz9LAjAA= Subject key identifier: D9:E2:C6:8F:A8:8D:B7:2B:0F:B0:3C:C2:76:49:F3:10:2C:0E:16:E3 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 0239 Signing time: Fri 03 May 2024 04:05:36 +0000 Manifest this update: Fri 03 May 2024 04:05:35 +0000 Manifest next update: Fri 10 May 2024 04:05:35 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: d25KOF/h3ET4CytSEAnrtjBY+JN0yY1qwvFPCdSNxA0=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: CSGiYLZ6NekAj6P19BCgjbtyPLp1eMOjuUs3W4mDezA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: May 3 04:05:35 2024 GMT Not After : May 10 04:05:35 2024 GMT Subject: CN=66346290-c5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:c0:d6:2a:0e:eb:91:dc:5c:ba:30:52:78: 90:de:92:f0:d5:ae:0b:6c:0c:d7:e3:dd:aa:7f:64: da:16:41:b3:d4:10:b3:bc:b2:c0:22:42:b5:dc:f0: a2:c8:7b:9d:a4:bd:65:00:08:12:23:8a:e7:1f:56: e6:29:0f:40:44:a9:ce:e2:0d:1a:ef:8d:85:de:62: 9c:b1:e2:12:7d:ec:ec:da:a2:28:44:7c:1a:22:b4: 68:3d:44:c4:d5:2a:aa:7f:d6:a1:d7:dc:dc:75:52: 08:51:10:20:f0:dd:25:d3:3f:c1:56:d2:18:66:93: 65:f6:fd:0b:53:4d:44:a0:78:6b:58:6b:66:23:ca: 4b:34:ca:04:d8:20:63:a6:93:f8:83:5d:3e:d4:90: a5:4b:db:42:12:c5:4a:d9:ae:d4:e2:bc:f0:0c:74: 9c:79:14:b3:40:e7:47:4a:26:eb:78:3c:14:3e:b5: 1b:68:21:93:83:d6:8f:9f:5e:56:00:01:4c:3d:5a: ce:cc:68:7c:c2:52:1d:3d:6b:1c:49:3f:fc:7b:57: 4a:63:69:03:43:aa:4f:0d:1f:52:15:02:e2:cb:ea: 83:6d:21:68:8c:25:65:c3:86:ea:3a:f3:72:05:07: f5:d8:b0:0c:e2:02:06:67:29:6e:17:c9:fa:8e:88: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:C6:8F:A8:8D:B7:2B:0F:B0:3C:C2:76:49:F3:10:2C:0E:16:E3 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:66:e7:ad:0c:f4:d1:b7:97:16:15:f8:fc:e3:9b:0e:34:3f: 29:3b:f7:13:44:d5:75:84:8d:be:c2:ed:a7:16:a0:1b:26:eb: d8:60:30:f1:e7:7e:b1:e9:d2:49:c0:89:7b:e8:c3:7c:d6:e0: a9:d0:33:68:ef:a0:59:77:7e:90:93:c5:9e:51:35:8f:8f:ff: f7:ef:50:f8:5b:92:c2:f3:d4:02:99:05:2d:56:e8:96:3b:9b: 6a:1e:9f:e1:6f:16:9c:e2:b8:81:c9:52:2c:2f:bd:7e:f3:54: 57:e8:60:ab:6d:0d:0a:e6:a8:26:a4:c4:0c:e9:2b:61:4f:15: c0:59:2f:02:ec:28:5b:4b:1c:35:89:0a:37:c5:0b:7c:19:9c: cf:65:1a:c2:70:46:5b:7d:3b:6d:2e:1f:b1:96:74:b5:c0:e5: ac:5e:f6:2a:1a:fa:a9:62:43:c8:78:0c:9d:e8:57:0e:86:b1: 97:6c:e0:ed:d3:21:0e:db:32:02:b4:5a:30:be:5a:23:c7:42: 71:3a:12:7f:8a:33:22:a9:68:d4:0b:c8:60:ac:4c:02:d6:2a: be:07:d1:94:84:e4:46:3e:6c:56:fd:f7:8d:01:60:a5:07:3f: ff:71:e0:85:d1:11:b1:55:0c:d9:bc:51:53:fc:ef:5b:b8:b4: 6e:83:bc:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjQwNTAzMDQwNTM1WhcNMjQwNTEwMDQwNTM1WjAYMRYwFAYD VQQDEw02NjM0NjI5MC1jNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAHA1ioO65HcXLowUniQ3pLw1a4LbAzX492qf2TaFkGz1BCzvLLAIkK13PCi yHudpL1lAAgSI4rnH1bmKQ9ARKnO4g0a742F3mKcseISfezs2qIoRHwaIrRoPUTE 1Sqqf9ah19zcdVIIURAg8N0l0z/BVtIYZpNl9v0LU01EoHhrWGtmI8pLNMoE2CBj ppP4g10+1JClS9tCEsVK2a7U4rzwDHSceRSzQOdHSibreDwUPrUbaCGTg9aPn15W AAFMPVrOzGh8wlIdPWscST/8e1dKY2kDQ6pPDR9SFQLiy+qDbSFojCVlw4bqOvNy BQf12LAM4gIGZyluF8n6johtwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnixo+o jbcrD7A8wnZJ8xAsDhbjMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByZuetDPTRt5cWFfj845sOND8pO/cTRNV1hI2+wu2nFqAbJuvYYDDx 536x6dJJwIl76MN81uCp0DNo76BZd36Qk8WeUTWPj//371D4W5LC89QCmQUtVuiW O5tqHp/hbxac4riByVIsL71+81RX6GCrbQ0K5qgmpMQM6SthTxXAWS8C7ChbSxw1 iQo3xQt8GZzPZRrCcEZbfTttLh+xlnS1wOWsXvYqGvqpYkPIeAyd6FcOhrGXbODt 0yEO2zICtFowvlojx0JxOhJ/ijMiqWjUC8hgrEwC1iq+B9GUhORGPmxW/feNAWCl Bz//ceCF0RGxVQzZvFFT/O9buLRug7w3 -----END CERTIFICATE-----Generated at Fri May 3 06:29:20 2024 by rpki-client on console-fra.rpki-client.org