$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft File: H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft (raw, json) Hash identifier: 3daYDHBl8LEiGg7OMBQCE9JQsdVY4mRKhcRhA6XcIKI= Subject key identifier: 1E:7B:01:1C:F8:6D:08:51:70:AF:9C:34:9B:66:54:7E:3B:CA:2C:47 Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4 Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4 Certificate serial: 16BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft Manifest number: 16A4 Signing time: Sun 24 Nov 2024 16:33:34 +0000 Manifest this update: Sun 24 Nov 2024 16:33:33 +0000 Manifest next update: Sun 01 Dec 2024 16:33:33 +0000 Files and hashes: 1: H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl (hash: VmwWQh3A88b083afGEQ9YltU1RRYr1EOnXurW/Zfuno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5821 (0x16bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4 Validity Not Before: Nov 24 16:33:33 2024 GMT Not After : Dec 1 16:33:33 2024 GMT Subject: CN=6743555d-fb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:ed:f1:10:85:87:12:b4:d3:74:2f:89:44: 0e:c3:05:0f:c6:09:46:d2:5e:ff:6d:a6:6c:bf:f9: 4d:49:cb:a7:8d:be:35:49:7c:46:d6:c9:64:d7:d5: 81:e5:d0:67:ee:80:a8:8a:e5:ba:8c:e6:4c:9a:6d: 5f:2b:72:a2:0a:b2:0d:6a:82:57:d6:71:cf:06:b2: cd:54:82:8f:ce:f4:23:72:b4:d6:0b:fa:85:e6:8c: 20:d9:48:dc:27:17:64:87:20:95:8f:5d:8d:46:22: 8e:2d:11:7f:23:83:eb:58:d6:39:98:f9:24:c9:c4: 91:c5:6f:89:f2:2d:8d:fd:a8:70:95:58:96:55:18: ef:ba:41:68:0b:95:09:b8:eb:2a:23:7b:41:df:31: da:da:2f:65:cf:b9:04:4c:3e:d4:1a:77:6f:85:9a: 23:a5:1c:8f:eb:4b:0a:f8:9e:20:20:53:0d:fc:ad: 56:68:54:cd:08:13:af:0d:e2:cd:96:b3:e6:57:5b: 75:0e:0f:92:c3:0f:91:9b:81:dd:ec:49:0d:60:c0: 3e:92:f6:42:82:17:ec:9d:73:02:95:3c:ff:39:6a: 0d:e0:8d:90:c6:5f:a7:c0:ce:df:4a:ed:00:75:ff: 4f:ef:3d:76:14:27:e1:ba:b0:ed:ec:09:b7:f4:49: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:01:1C:F8:6D:08:51:70:AF:9C:34:9B:66:54:7E:3B:CA:2C:47 X509v3 Authority Key Identifier: keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:07:12:f9:68:ec:c7:a6:fa:cd:5f:a2:ae:b5:3a:b7:0f:bf: 21:a4:e1:00:54:66:5f:a5:37:e1:75:a3:14:39:10:73:72:d4: 3d:a0:db:f1:f5:b3:6c:aa:cc:e1:a4:b9:4a:61:ff:e2:12:e3: 26:1d:8d:30:33:bb:29:4a:e5:c2:42:57:aa:49:ef:e3:86:c3: 6c:e2:4e:8c:da:8c:35:d6:d7:4c:68:73:28:8f:6a:f7:07:5a: 64:a7:b5:c1:ac:fb:f7:65:dd:98:b7:77:e8:a2:ed:de:45:2b: 8f:ee:57:1c:07:c1:ed:fc:3b:82:8b:88:6b:d0:57:f3:82:79: e0:6c:c4:5c:15:99:86:40:b6:13:33:0d:f3:05:7f:99:44:b2: e6:d2:2e:c0:4c:dd:1a:60:ef:9f:14:ff:94:6d:e6:53:2d:2b: be:5f:00:f0:ee:3f:53:5e:a7:25:45:2f:78:10:3e:a3:41:0b: 7e:a8:5a:de:b3:e0:18:46:b9:54:68:9b:cb:9e:b7:de:8f:cd: 9d:70:4a:59:0c:47:f4:2d:a0:33:38:c3:1c:3b:ac:4d:3f:89: 5e:a4:a1:e4:7f:07:f3:88:87:7a:cd:91:56:94:5f:3e:94:a1: ee:9e:85:0d:c6:38:ea:14:79:80:3f:fe:a3:49:dc:ef:7b:77: ac:e9:e4:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk5MkYxMTAvBgNVBAUTKDFGNUZCM0E1RDdCNUNCMDQzRTlEOUMxQjM2MDhENEIy NjM1OTE2RjQwHhcNMjQxMTI0MTYzMzMzWhcNMjQxMjAxMTYzMzMzWjAYMRYwFAYD VQQDEw02NzQzNTU1ZC1mYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhXt8RCFhxK003QviUQOwwUPxglG0l7/baZsv/lNScunjb41SXxG1slk19WB 5dBn7oCoiuW6jOZMmm1fK3KiCrINaoJX1nHPBrLNVIKPzvQjcrTWC/qF5owg2Ujc JxdkhyCVj12NRiKOLRF/I4PrWNY5mPkkycSRxW+J8i2N/ahwlViWVRjvukFoC5UJ uOsqI3tB3zHa2i9lz7kETD7UGndvhZojpRyP60sK+J4gIFMN/K1WaFTNCBOvDeLN lrPmV1t1Dg+Sww+Rm4Hd7EkNYMA+kvZCghfsnXMClTz/OWoN4I2Qxl+nwM7fSu0A df9P7z12FCfhurDt7Am39ElVLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB57ARz4 bQhRcK+cNJtmVH47yixHMB8GA1UdIwQYMBaAFB9fs6XXtcsEPp2cGzYI1LJjWRb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkyRi82MjlCNzk5MEVC QUYxMUU3OTI4OTlFNEVDNEY5QUUwMi9IMS16cGRlMXl3US1uWndiTmdqVXNtTlpG dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxLXpwZGUxeXdRLW5ad2JOZ2pVc21OWkZ2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTkyRi82MjlCNzk5MEVCQUYxMUU3OTI4OTlFNEVDNEY5QUUwMi9IMS16cGRlMXl3 US1uWndiTmdqVXNtTlpGdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADBxL5aOzHpvrNX6KutTq3D78hpOEAVGZfpTfhdaMUORBzctQ9oNvx 9bNsqszhpLlKYf/iEuMmHY0wM7spSuXCQleqSe/jhsNs4k6M2ow11tdMaHMoj2r3 B1pkp7XBrPv3Zd2Yt3foou3eRSuP7lccB8Ht/DuCi4hr0FfzgnngbMRcFZmGQLYT Mw3zBX+ZRLLm0i7ATN0aYO+fFP+UbeZTLSu+XwDw7j9TXqclRS94ED6jQQt+qFre s+AYRrlUaJvLnrfej82dcEpZDEf0LaAzOMMcO6xNP4lepKHkfwfziId6zZFWlF8+ lKHunoUNxjjqFHmAP/6jSdzve3es6eSe -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:00 2024 by rpki-client on console-fra.rpki-client.org