$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: dTw4quinpuN/2EXuw5PPE+jMpBo2omEw6FWbMQFrR7U= Subject key identifier: 3B:7A:25:6B:E6:D7:B1:2C:90:66:31:9A:BD:C1:67:CF:48:CD:70:C5 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 166A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1661 Signing time: Sat 04 May 2024 17:16:43 +0000 Manifest this update: Sat 04 May 2024 17:16:42 +0000 Manifest next update: Sat 11 May 2024 17:16:42 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: IobAfvLu5A45a/hrTfpVfEUnMUEwtydhpWOYMM+en6Y=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: 0B5XjdTUQe/6kyGZQwflhiLlLmj0ih1n7mLCVY4kiuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5738 (0x166a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: May 4 17:16:42 2024 GMT Not After : May 11 17:16:42 2024 GMT Subject: CN=66366d7a-6a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:8d:d7:4b:16:3d:00:43:69:f1:0d:37:b9: 2c:c3:06:ad:cf:29:e1:5a:9e:ab:71:8b:bc:b6:0d: 1a:5f:04:78:3c:83:7f:54:0f:58:5e:76:1f:73:6c: 43:0e:ed:b5:a0:a5:81:37:47:f7:04:fd:84:1c:99: 76:4d:7e:8e:73:f4:52:e4:57:77:28:fc:79:a5:41: 29:f0:60:b3:cb:93:47:96:19:02:1c:03:8c:67:0d: 3c:21:1c:75:c8:0f:bc:4b:9c:ab:f7:43:d2:75:d9: 21:f3:c0:71:79:aa:b2:45:67:a9:de:3c:96:58:cc: 5a:f9:c8:2d:dd:a6:e5:7e:30:52:41:0a:92:ef:6a: ec:43:53:e4:cb:87:d5:cd:a7:ce:e5:81:45:c0:29: f3:b7:42:00:d7:9b:0e:b6:bb:c9:b1:8f:91:5e:51: 24:71:21:af:91:78:2b:24:00:37:cd:e3:38:40:ea: 7a:a3:a9:a0:12:91:39:13:e7:1d:e3:96:4e:cf:fb: ae:7e:a5:fa:4a:b9:67:3c:12:b4:06:e3:b3:57:bf: b2:9b:98:98:f2:d8:76:48:28:02:92:81:19:46:69: bf:5c:58:ed:a1:57:0f:1a:3a:d0:03:19:65:93:d7: 9a:74:80:0d:01:1f:a7:8a:53:59:14:1c:80:d2:ef: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7A:25:6B:E6:D7:B1:2C:90:66:31:9A:BD:C1:67:CF:48:CD:70:C5 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cb:0c:10:f4:4c:a1:3d:63:ff:3a:62:cc:be:50:74:66:c1: 2e:69:f3:8d:39:99:32:50:c0:45:5c:72:66:be:9e:e8:35:4f: 47:9c:d3:23:e8:08:5a:35:50:1f:ae:8f:04:a4:82:4a:90:16: 7a:5f:72:15:cb:a2:b8:9d:0f:52:06:88:49:96:8f:76:38:8e: 69:4f:fb:57:d2:80:7d:38:f4:ac:f5:41:0a:9a:63:75:fa:86: 59:22:48:af:3d:7d:7a:a1:d9:8b:c0:50:7a:fa:72:b1:ea:27: 2d:59:86:46:29:38:d5:86:7c:fb:6d:a9:3f:73:fc:6c:26:cb: 20:24:c6:2a:1a:f8:2f:89:2d:a5:47:f7:2d:a1:70:e1:e1:ac: 23:39:ef:5b:62:7d:d9:ec:3a:1c:f9:61:7a:ab:b2:8f:16:17: 39:7a:b5:fe:02:98:3a:44:53:70:9a:18:ec:98:b3:09:60:17: 91:55:bf:eb:2e:b8:03:75:ab:09:22:27:85:ad:22:2a:e9:b9: 1d:f3:cc:95:3d:b6:fd:9f:25:b5:63:55:f7:47:ca:83:d8:f0: 30:d7:19:5e:f3:8f:bb:03:fc:33:64:df:e4:5f:b5:0e:6b:db: da:f0:aa:06:5e:23:22:aa:6c:f4:ad:bc:df:2e:82:22:a0:cc: b0:92:e1:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjQwNTA0MTcxNjQyWhcNMjQwNTExMTcxNjQyWjAYMRYwFAYD VQQDEw02NjM2NmQ3YS02YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAON10sWPQBDafENN7kswwatzynhWp6rcYu8tg0aXwR4PIN/VA9YXnYfc2xD Du21oKWBN0f3BP2EHJl2TX6Oc/RS5Fd3KPx5pUEp8GCzy5NHlhkCHAOMZw08IRx1 yA+8S5yr90PSddkh88BxeaqyRWep3jyWWMxa+cgt3ablfjBSQQqS72rsQ1Pky4fV zafO5YFFwCnzt0IA15sOtrvJsY+RXlEkcSGvkXgrJAA3zeM4QOp6o6mgEpE5E+cd 45ZOz/uufqX6SrlnPBK0BuOzV7+ym5iY8th2SCgCkoEZRmm/XFjtoVcPGjrQAxll k9eadIANAR+nilNZFByA0u/IjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDt6JWvm 17EskGYxmr3BZ89IzXDFMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPywwQ9EyhPWP/OmLMvlB0ZsEuafONOZkyUMBFXHJmvp7oNU9HnNMj 6AhaNVAfro8EpIJKkBZ6X3IVy6K4nQ9SBohJlo92OI5pT/tX0oB9OPSs9UEKmmN1 +oZZIkivPX16odmLwFB6+nKx6ictWYZGKTjVhnz7bak/c/xsJssgJMYqGvgviS2l R/ctoXDh4awjOe9bYn3Z7Doc+WF6q7KPFhc5erX+Apg6RFNwmhjsmLMJYBeRVb/r LrgDdasJIieFrSIq6bkd88yVPbb9nyW1Y1X3R8qD2PAw1xle84+7A/wzZN/kX7UO a9va8KoGXiMiqmz0rbzfLoIioMywkuFy -----END CERTIFICATE-----Generated at Sat May 4 19:58:43 2024 by rpki-client on console-ams.rpki-client.org