$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: ZpnO9ZcmYZ9G3RosTgBe9vj90erU9ZdC0I+esSw0mcQ= Subject key identifier: 0E:9F:04:54:ED:9E:0E:6C:23:53:11:30:66:43:7E:D6:15:8D:FA:90 Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 0108 Signing time: Thu 25 Apr 2024 05:23:27 +0000 Manifest this update: Thu 25 Apr 2024 05:23:27 +0000 Manifest next update: Thu 02 May 2024 05:23:27 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: +C/UG8Ab3GPcenlRuZwKJrxpxipeMrnu5y2v4iYJFLg=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: rrPEmKXiVA4a8WLwDvdoL75de2L3H/mip5CkrpQQib0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 05:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Apr 25 05:23:27 2024 GMT Not After : May 2 05:23:27 2024 GMT Subject: CN=6629e8cf-8179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:5f:d5:fe:78:82:d9:67:ec:89:7e:b2:b6: 2c:ef:9e:da:e1:23:bd:4f:20:e4:54:70:be:a7:11: 3f:74:5b:d4:5a:68:32:86:87:2d:00:56:0a:f7:f1: 53:78:fb:d1:46:4a:8b:f3:48:2f:e2:7f:e3:a6:11: ea:b6:c3:6e:01:8f:95:fb:63:ed:16:c7:a2:d5:82: 60:bc:4e:79:11:d1:4a:29:24:67:5a:ed:93:6d:20: ee:63:53:5e:fb:54:12:88:43:ec:9e:dd:d5:b2:8e: 12:b6:ad:ff:90:17:9a:79:ff:a7:1c:75:4b:7b:42: b7:5b:43:2e:31:28:06:20:65:69:dc:00:b7:84:c8: de:14:c3:fe:48:1b:bb:f0:c3:ce:75:62:ab:b2:dc: 5d:f2:06:52:2d:74:1c:bb:95:1d:63:89:af:f4:b5: 14:b6:1b:40:b6:98:57:ab:51:35:07:59:bc:bd:37: e0:63:79:4e:f3:49:6a:16:fc:b3:e8:c4:59:1c:94: 3d:ed:7f:98:bd:0d:8f:86:b0:ff:8c:53:f2:b2:d2: 4a:92:c4:1d:25:26:de:2d:07:13:17:37:dd:62:1f: fc:92:ba:86:63:29:76:d8:9a:c0:61:54:2e:82:0a: b2:6b:fa:73:29:ae:f0:2a:86:c9:a2:8d:6b:33:3f: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:04:54:ED:9E:0E:6C:23:53:11:30:66:43:7E:D6:15:8D:FA:90 X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:14:31:13:db:95:26:9a:73:bc:6c:5e:c5:15:9d:83:67:8e: 9d:fe:9a:35:34:0d:25:a7:33:ed:b1:ff:aa:19:b2:7a:50:43: 62:ef:cf:cc:12:f1:34:6f:08:04:65:b3:f4:e2:e3:76:8d:5c: 39:90:d6:3f:c1:bf:76:49:a4:55:9a:56:66:ea:78:ab:61:b2: 31:ef:2c:2e:68:29:0c:e0:fb:c0:c8:3f:04:ed:f8:c4:15:fd: b1:fa:ab:30:d5:bd:fb:eb:e9:8f:e1:42:cc:6b:93:8c:bb:a6: fb:10:88:9e:9b:58:4c:40:f6:3c:3a:88:76:11:ba:34:07:09: 86:0b:e7:1e:dc:05:bb:92:ae:b9:95:c8:78:c9:2c:69:63:c5: ce:87:3f:90:73:b5:4d:d9:64:98:db:d6:79:d3:f6:81:3e:2f: d8:4f:01:ea:70:d9:38:fc:f7:f4:2d:27:32:9a:3e:c1:09:6b: 40:13:3d:a2:54:e3:40:4e:f9:2b:ba:cb:bc:51:10:fc:ef:63: 62:68:6e:0e:d3:74:f9:60:34:a1:9a:3a:84:34:52:b0:76:f5: cb:53:5b:44:f0:36:af:48:8d:7b:bc:d9:70:03:ad:31:ab:19: e0:07:ad:69:5b:02:aa:41:82:0c:24:fc:22:60:76:28:3c:76: 53:2c:68:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjQwNDI1MDUyMzI3WhcNMjQwNTAyMDUyMzI3WjAYMRYwFAYD VQQDEw02NjI5ZThjZi04MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32lf1f54gtln7Il+srYs757a4SO9TyDkVHC+pxE/dFvUWmgyhoctAFYK9/FT ePvRRkqL80gv4n/jphHqtsNuAY+V+2PtFsei1YJgvE55EdFKKSRnWu2TbSDuY1Ne +1QSiEPsnt3Vso4Stq3/kBeaef+nHHVLe0K3W0MuMSgGIGVp3AC3hMjeFMP+SBu7 8MPOdWKrstxd8gZSLXQcu5UdY4mv9LUUthtAtphXq1E1B1m8vTfgY3lO80lqFvyz 6MRZHJQ97X+YvQ2PhrD/jFPystJKksQdJSbeLQcTFzfdYh/8krqGYyl22JrAYVQu ggqya/pzKa7wKobJoo1rMz/gSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6fBFTt ng5sI1MRMGZDftYVjfqQMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFDET25UmmnO8bF7FFZ2DZ46d/po1NA0lpzPtsf+qGbJ6UENi78/M EvE0bwgEZbP04uN2jVw5kNY/wb92SaRVmlZm6nirYbIx7ywuaCkM4PvAyD8E7fjE Ff2x+qsw1b376+mP4ULMa5OMu6b7EIiem1hMQPY8Ooh2Ebo0BwmGC+ce3AW7kq65 lch4ySxpY8XOhz+Qc7VN2WSY29Z50/aBPi/YTwHqcNk4/Pf0LScymj7BCWtAEz2i VONATvkrusu8URD872NiaG4O03T5YDShmjqENFKwdvXLU1tE8DavSI17vNlwA60x qxngB61pWwKqQYIMJPwiYHYoPHZTLGg6 -----END CERTIFICATE-----Generated at Thu Apr 25 06:38:26 2024 by rpki-client on console-fra.rpki-client.org