$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: 9I2qX203ACyt81Qa3OB2Pqy5pKWZWsKT82qQUkCc+J4= Subject key identifier: 41:C0:B8:77:5E:F2:0E:FE:E3:C3:74:D7:73:4E:63:76:96:DB:AB:85 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0B20 Signing time: Fri 22 Nov 2024 18:59:43 +0000 Manifest this update: Fri 22 Nov 2024 18:59:42 +0000 Manifest next update: Fri 29 Nov 2024 18:59:42 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: l6mTYtrRCEvkEovyjEs+vLjfJ8rQUZSRKS9/Kcrn9RU=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: RtTKCFPI3qJRyDL5O6Q2LMX3dhxqXJB2E8cnAtCFD8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Nov 22 18:59:42 2024 GMT Not After : Nov 29 18:59:42 2024 GMT Subject: CN=6740d49f-42cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:15:7a:e9:65:ad:2a:c1:08:ed:40:68:f4: 90:03:f3:35:50:f0:13:0e:85:0c:6a:b5:d8:df:83: c1:5c:cc:22:6d:05:92:cd:99:2a:5f:44:de:dc:36: e9:2c:fa:67:52:33:92:31:9f:47:1f:82:a7:5e:a9: 80:dd:ec:c7:15:40:43:2d:77:c1:ce:d1:e3:8f:97: 11:57:16:ad:5d:be:c3:da:e2:35:39:8b:cd:04:8f: d5:9e:d0:be:cc:77:24:ae:ba:33:15:76:bc:fc:e6: d2:f1:63:d6:40:b9:1c:c3:23:67:8e:15:8c:e2:b9: 9b:5f:ff:2d:a3:f4:d0:ad:8b:82:d2:aa:29:da:92: d6:ed:7c:7f:42:cc:29:c5:a7:8b:bf:13:30:97:79: bd:a1:70:a3:61:88:c8:d2:ce:08:db:73:e5:79:08: 0f:63:c5:c1:74:4f:06:45:1c:8b:a3:ef:9f:68:85: 09:97:27:e2:a9:84:c4:dd:9c:42:21:a1:ab:49:50: 3a:50:05:a2:fa:87:aa:f2:01:3c:12:9c:55:5f:71: 2b:7e:bf:db:7a:15:9c:3a:38:09:fb:08:59:8d:e2: 5e:c0:86:4c:39:88:42:87:87:e4:3e:8a:ab:ca:c2: be:1b:b9:6a:d1:ae:72:a3:a2:11:91:1d:00:e4:9d: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:B8:77:5E:F2:0E:FE:E3:C3:74:D7:73:4E:63:76:96:DB:AB:85 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:18:c1:b6:c6:1d:09:25:c6:7e:db:47:bf:62:6a:2a:43:5a: 9e:4f:8a:70:96:54:39:8d:48:ff:2c:de:10:9e:50:a4:06:e1: 1f:07:f0:22:e2:67:42:f8:28:9f:92:0d:d7:06:d6:a2:a7:5f: 7a:fc:b8:47:ad:ac:d8:ac:c8:0c:d4:12:fb:92:c0:d0:85:c6: 12:17:93:53:e4:0f:9e:b2:48:fd:6a:dd:0e:e5:9d:d6:f1:65: 5a:dc:96:02:2e:90:35:bd:b8:4a:67:27:4a:34:9e:c4:27:88: 5e:6d:ad:ad:3b:2d:61:73:ce:2e:b2:51:af:a0:1b:4c:6e:0f: 9e:b0:79:37:e0:e2:ad:a9:90:cf:df:ff:7a:1d:72:44:11:84: 2d:90:cd:53:8c:fa:3f:06:1c:e3:40:bc:84:26:85:c5:f6:1a: ef:ba:de:fa:a1:42:82:b9:6a:2b:66:00:77:13:21:a9:51:b7: 08:ac:73:bc:72:eb:db:cf:3a:53:0a:c1:46:1e:18:f4:45:e0: b1:4b:1d:27:b3:32:fc:6a:7a:1c:8d:3e:ad:45:30:bf:3f:88: 2e:c9:7d:dd:b2:a0:07:e4:10:40:51:7b:15:8c:52:27:27:34: 52:f4:69:a3:ac:5e:2a:9a:30:49:fe:76:db:e0:ac:a4:af:05: a5:ad:1b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjQxMTIyMTg1OTQyWhcNMjQxMTI5MTg1OTQyWjAYMRYwFAYD VQQDEw02NzQwZDQ5Zi00MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbYVeullrSrBCO1AaPSQA/M1UPATDoUMarXY34PBXMwibQWSzZkqX0Te3Dbp LPpnUjOSMZ9HH4KnXqmA3ezHFUBDLXfBztHjj5cRVxatXb7D2uI1OYvNBI/VntC+ zHckrrozFXa8/ObS8WPWQLkcwyNnjhWM4rmbX/8to/TQrYuC0qop2pLW7Xx/Qswp xaeLvxMwl3m9oXCjYYjI0s4I23PleQgPY8XBdE8GRRyLo++faIUJlyfiqYTE3ZxC IaGrSVA6UAWi+oeq8gE8EpxVX3Erfr/behWcOjgJ+whZjeJewIZMOYhCh4fkPoqr ysK+G7lq0a5yo6IRkR0A5J1KrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHAuHde 8g7+48N013NOY3aW26uFMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTGMG2xh0JJcZ+20e/YmoqQ1qeT4pwllQ5jUj/LN4QnlCkBuEfB/Ai 4mdC+Cifkg3XBtaip196/LhHrazYrMgM1BL7ksDQhcYSF5NT5A+eskj9at0O5Z3W 8WVa3JYCLpA1vbhKZydKNJ7EJ4heba2tOy1hc84uslGvoBtMbg+esHk34OKtqZDP 3/96HXJEEYQtkM1TjPo/BhzjQLyEJoXF9hrvut76oUKCuWorZgB3EyGpUbcIrHO8 cuvbzzpTCsFGHhj0ReCxSx0nszL8anocjT6tRTC/P4guyX3dsqAH5BBAUXsVjFIn JzRS9GmjrF4qmjBJ/nbb4KykrwWlrRs1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org