$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: t+K5Ikja4TcjqaKIbdbKBAhQWK0jk6nqFTuJJljUZC8= Subject key identifier: 49:2E:76:8F:08:8E:3C:1C:8D:18:BA:16:64:0A:D9:3E:9C:6A:AB:01 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 3420 Signing time: Sun 24 Nov 2024 15:07:07 +0000 Manifest this update: Sun 24 Nov 2024 15:07:06 +0000 Manifest next update: Sun 01 Dec 2024 15:07:06 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: WTZu3pGGoIuxz4Hr7myVMzRLH2/PaKHomkLV9DAa0dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Nov 24 15:07:06 2024 GMT Not After : Dec 1 15:07:06 2024 GMT Subject: CN=6743411b-512c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:87:31:ea:90:8e:46:24:93:87:cb:5f:65: 62:49:ae:16:d9:f6:65:3c:59:4e:70:c9:d6:9b:3e: 71:56:e7:a4:2e:f1:19:9f:ea:6d:58:4d:e2:c2:5c: 62:45:6d:08:f2:f1:99:40:c8:82:2e:0f:ab:d9:2d: 9c:55:ee:6c:88:df:ed:2f:dc:6d:d7:12:91:54:bb: e6:1b:12:4f:b4:b3:1e:21:bb:b0:ef:96:8f:fc:98: c6:cd:22:8d:af:da:06:6e:87:b0:bb:3d:89:36:f6: 4a:6c:e8:8d:ae:70:e6:3a:6d:bc:52:8b:8b:b3:77: eb:a9:0b:05:9f:94:44:b3:49:5e:70:16:cc:a7:10: 1a:9c:b8:b8:0e:cd:ba:43:90:e0:0e:c3:ae:e9:10: e5:38:d5:f9:3e:99:05:7c:88:7c:78:08:ae:a1:12: 95:80:d2:26:a4:be:85:93:22:6e:e5:b9:0b:5d:0d: f8:13:09:10:38:fd:dd:d3:ca:79:4d:d4:e6:c2:ca: 4c:03:1a:9f:f9:3a:db:2a:9d:c4:d1:d0:10:a7:0e: 65:a2:86:8c:c1:3c:6d:21:cb:4e:21:17:09:de:d3: 60:bb:1f:dc:2f:fe:13:23:a0:54:12:60:2d:d8:9a: c3:30:ab:81:bb:9d:22:bf:1c:f2:cd:24:df:76:19: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:76:8F:08:8E:3C:1C:8D:18:BA:16:64:0A:D9:3E:9C:6A:AB:01 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:21:58:5a:be:b9:c2:9a:d5:60:a1:0e:7c:c4:af:95:8a:ab: 9e:52:c6:36:4f:96:1a:e7:94:98:fc:a8:5a:b1:44:da:8d:bd: 75:7f:d5:8c:c8:09:a6:51:68:0c:a4:d0:2a:95:a1:ef:65:df: 62:b1:ea:3e:0f:70:33:78:08:ab:70:15:43:04:52:f6:6c:59: ea:b5:42:a0:ae:20:00:3e:22:0f:18:2e:2a:84:b5:9b:74:99: cd:7f:6a:73:a0:07:13:a2:65:9b:d4:4a:cf:60:83:1f:ef:ed: 04:8e:3f:87:33:1c:95:16:31:50:02:ad:62:0c:45:14:9f:45: c1:c1:db:27:0f:91:a4:ba:d6:ba:41:53:08:ff:31:f3:a4:13: 32:10:e2:89:70:9c:3d:a6:5e:ee:e9:ce:d1:ea:5f:b6:80:15: 50:50:09:f9:57:90:73:a9:f3:de:d0:ca:ad:7b:4a:65:40:4b: 34:a5:ad:b4:cd:3b:1d:db:92:d2:0e:2a:28:3a:ee:af:7c:f5: 53:e8:b6:43:84:64:70:6a:3a:8c:41:dc:e4:64:46:94:54:46: 77:d9:49:2e:41:34:9b:ba:44:fb:3f:4b:91:8c:12:f8:b0:3c: 07:9f:12:65:34:fc:aa:9e:a5:a7:61:54:76:34:57:73:94:d0: 9b:22:ad:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjQxMTI0MTUwNzA2WhcNMjQxMjAxMTUwNzA2WjAYMRYwFAYD VQQDEw02NzQzNDExYi01MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1OHMeqQjkYkk4fLX2ViSa4W2fZlPFlOcMnWmz5xVuekLvEZn+ptWE3iwlxi RW0I8vGZQMiCLg+r2S2cVe5siN/tL9xt1xKRVLvmGxJPtLMeIbuw75aP/JjGzSKN r9oGboewuz2JNvZKbOiNrnDmOm28UouLs3frqQsFn5REs0lecBbMpxAanLi4Ds26 Q5DgDsOu6RDlONX5PpkFfIh8eAiuoRKVgNImpL6FkyJu5bkLXQ34EwkQOP3d08p5 TdTmwspMAxqf+TrbKp3E0dAQpw5looaMwTxtIctOIRcJ3tNgux/cL/4TI6BUEmAt 2JrDMKuBu50ivxzyzSTfdhmTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkudo8I jjwcjRi6FmQK2T6caqsBMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuIVhavrnCmtVgoQ58xK+ViqueUsY2T5Ya55SY/KhasUTajb11f9WM yAmmUWgMpNAqlaHvZd9iseo+D3AzeAircBVDBFL2bFnqtUKgriAAPiIPGC4qhLWb dJnNf2pzoAcTomWb1ErPYIMf7+0Ejj+HMxyVFjFQAq1iDEUUn0XBwdsnD5Gkuta6 QVMI/zHzpBMyEOKJcJw9pl7u6c7R6l+2gBVQUAn5V5BzqfPe0Mqte0plQEs0pa20 zTsd25LSDiooOu6vfPVT6LZDhGRwajqMQdzkZEaUVEZ32UkuQTSbukT7P0uRjBL4 sDwHnxJlNPyqnqWnYVR2NFdzlNCbIq3s -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:59 2024 by rpki-client on console-fra.rpki-client.org