$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: RIvZ5BcX6vBJHo+lXbT0IfHaBSNTa2sjDM591xDcSt4= Subject key identifier: 91:02:18:0C:8E:15:96:3B:26:0F:16:7E:8B:EA:C1:4E:63:D0:30:05 Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0AA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0A82 Signing time: Fri 22 Nov 2024 19:28:37 +0000 Manifest this update: Fri 22 Nov 2024 19:28:36 +0000 Manifest next update: Fri 29 Nov 2024 19:28:36 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: FkzePOrKEMJDnW9rRITUt3Odj/YER5nQUMS0VaXw9cA=) 2: FDC0F2F89AEC11EFA68D4760C4F9AE02.roa (hash: UFuamErfceQj29/LKMOZcfd9a9NTziJPo7BP3Lh5pAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2727 (0xaa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Nov 22 19:28:36 2024 GMT Not After : Nov 29 19:28:36 2024 GMT Subject: CN=6740db64-7913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:d7:ae:f3:7a:1f:4f:50:43:30:b7:c1:78: 88:46:fe:a7:60:b2:aa:87:cf:6a:a5:35:8e:fc:67: 8b:9f:4c:c8:4e:69:68:ce:d1:ef:e3:84:06:94:57: 81:96:d5:62:ec:3f:23:9c:98:69:dc:69:fe:bc:b5: d8:5b:70:f1:a2:16:f7:7c:fc:f9:d6:22:77:86:36: 09:a5:48:1c:2f:96:f0:a0:56:8f:6c:ef:44:e7:b8: 03:de:20:ad:2f:0b:c2:5d:17:e9:cc:a6:b0:60:51: a1:81:13:67:05:95:92:d1:cc:3d:e0:02:16:2c:9e: 04:7b:a4:3e:27:18:84:6b:0b:7a:04:2d:d5:c4:5b: f9:b6:36:0d:a6:87:07:c8:a6:42:b4:cf:48:2c:95: 6f:2e:51:0f:e4:4c:27:c8:e6:c1:b7:b9:59:25:20: 02:2a:dd:03:93:44:ba:37:08:19:a0:7e:33:7c:62: c4:1b:36:84:da:a1:b2:4e:1b:43:ba:c7:bd:f9:a8: 83:d5:35:16:9e:52:7c:77:a5:11:e4:f4:95:d3:04: f1:ce:8e:24:2e:72:89:30:9a:21:f0:fc:14:3c:b8: 98:23:51:5c:aa:c1:ed:c0:ae:f4:1b:53:d0:52:ba: 49:2a:bb:eb:2f:6f:7a:9b:d0:63:20:2b:61:df:15: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:02:18:0C:8E:15:96:3B:26:0F:16:7E:8B:EA:C1:4E:63:D0:30:05 X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:46:45:56:b8:2d:30:c8:82:07:45:83:e4:c9:be:1c:70:04: f5:a5:20:c0:2b:d0:e2:07:4b:a9:84:e3:5e:c8:11:1c:ba:68: f0:48:d3:49:bf:67:d5:62:61:9e:77:14:6b:57:3a:40:2f:76: c9:a9:65:85:0b:55:9e:7b:7a:b0:6b:8d:07:ee:da:f2:f3:82: fa:bb:b9:42:bf:d1:08:a3:56:d0:d8:55:5e:af:43:a0:fe:95: 89:f4:bd:2b:60:24:a0:7a:76:87:90:2e:25:ea:ea:88:49:83: d3:6b:c2:6b:d2:b7:f0:6f:90:35:0e:f9:2c:37:a5:bf:fe:d7: 20:b4:7f:ef:a9:db:f0:39:b0:04:d1:dc:c7:cb:c6:b7:3b:90: 8f:12:45:be:e0:7f:82:02:3c:e9:00:62:8a:06:d9:d5:22:14: 8a:5c:11:b1:42:18:a2:56:17:8d:0b:7d:e2:b1:24:62:17:5e: 68:01:c3:d6:7b:c5:16:f9:41:9b:2e:9e:05:4f:40:39:85:f9: 97:94:8c:83:3f:0c:70:6f:95:ac:00:65:7a:f2:fd:48:9c:f6: 59:76:21:33:18:35:34:af:1a:4f:d9:0e:d7:19:b2:55:48:8d: f3:77:73:f7:0b:19:2e:4b:0b:81:db:8b:1c:df:a6:75:bc:db: 7c:0e:2c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjQxMTIyMTkyODM2WhcNMjQxMTI5MTkyODM2WjAYMRYwFAYD VQQDEw02NzQwZGI2NC03OTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs/XrvN6H09QQzC3wXiIRv6nYLKqh89qpTWO/GeLn0zITmloztHv44QGlFeB ltVi7D8jnJhp3Gn+vLXYW3Dxohb3fPz51iJ3hjYJpUgcL5bwoFaPbO9E57gD3iCt LwvCXRfpzKawYFGhgRNnBZWS0cw94AIWLJ4Ee6Q+JxiEawt6BC3VxFv5tjYNpocH yKZCtM9ILJVvLlEP5EwnyObBt7lZJSACKt0Dk0S6NwgZoH4zfGLEGzaE2qGyThtD use9+aiD1TUWnlJ8d6UR5PSV0wTxzo4kLnKJMJoh8PwUPLiYI1FcqsHtwK70G1PQ UrpJKrvrL296m9BjICth3xW2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJECGAyO FZY7Jg8WfovqwU5j0DAFMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgRkVWuC0wyIIHRYPkyb4ccAT1pSDAK9DiB0uphONeyBEcumjwSNNJ v2fVYmGedxRrVzpAL3bJqWWFC1Wee3qwa40H7try84L6u7lCv9EIo1bQ2FVer0Og /pWJ9L0rYCSgenaHkC4l6uqISYPTa8Jr0rfwb5A1DvksN6W//tcgtH/vqdvwObAE 0dzHy8a3O5CPEkW+4H+CAjzpAGKKBtnVIhSKXBGxQhiiVheNC33isSRiF15oAcPW e8UW+UGbLp4FT0A5hfmXlIyDPwxwb5WsAGV68v1InPZZdiEzGDU0rxpP2Q7XGbJV SI3zd3P3CxkuSwuB24sc36Z1vNt8DixO -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org