$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: rNLdVFfNzkWg6DM3DgunpoS4z/j49UVb0GoUCfiS5Os= Subject key identifier: 04:E9:07:55:0D:1A:51:E1:64:BF:58:0A:ED:7D:22:8F:AD:1E:68:46 Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 1624 Signing time: Fri 22 Nov 2024 16:44:14 +0000 Manifest this update: Fri 22 Nov 2024 16:44:13 +0000 Manifest next update: Fri 29 Nov 2024 16:44:13 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: JYU6EVNaD29o5zXW824lkovYSgy0x97jWTwdzpbxZNY=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: DwaSXkwadhXmFgNGjila+YsFoYHDPOwpBM4h3mtwuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: Nov 22 16:44:13 2024 GMT Not After : Nov 29 16:44:13 2024 GMT Subject: CN=6740b4de-5a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:c3:2a:95:b0:72:24:22:d6:be:5e:2a:4f: ed:e4:84:73:ca:b9:5b:fc:41:1a:96:a6:73:71:1d: 7e:fe:b6:0f:06:b5:3b:15:59:46:41:a4:97:0a:7f: cd:ad:cf:75:74:ba:a9:12:a9:bf:a8:27:f0:14:c8: 90:c5:5d:68:6b:fd:0a:04:a5:03:5a:0a:ba:b0:9b: 89:85:39:da:45:56:c2:5a:dc:5e:8b:15:fa:4d:fb: 8a:16:e3:fc:b0:9a:4b:9f:52:2e:00:a9:03:3b:91: ce:10:60:4b:ec:50:cb:be:65:3b:b2:81:b9:56:bf: 92:57:05:2c:54:04:44:29:89:1b:f5:de:3d:e7:20: 9a:c8:80:83:91:28:d8:4b:61:7f:8d:2c:5c:96:43: 4a:d6:a0:43:f3:65:58:ec:1a:81:da:2a:2b:54:d6: 33:45:a9:96:35:f1:ef:a8:a2:f2:98:f7:f1:77:63: 93:7c:8c:0e:46:bc:4f:3b:3f:82:e4:9f:63:82:80: 58:ae:f3:f9:83:e1:3e:71:d3:09:36:b9:2b:c5:16: 88:f9:e1:32:72:a3:36:d4:db:4d:7a:7f:b3:7e:5b: 78:7b:5f:66:a0:3c:29:ba:8c:5f:e7:1d:ab:18:c4: 0b:93:92:3a:31:10:34:fa:00:ed:fd:29:3f:bf:26: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E9:07:55:0D:1A:51:E1:64:BF:58:0A:ED:7D:22:8F:AD:1E:68:46 X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:e4:fd:8c:c4:a2:87:76:99:bc:16:4f:3b:e6:cc:bf:38:95: 8a:15:c3:db:3f:f9:7c:ae:f1:33:33:5e:f9:0f:18:31:07:0f: 05:f0:5d:1d:47:c1:1e:6e:ae:64:9e:a5:de:7b:c9:db:e2:f8: 04:1e:f5:c1:d7:cc:43:f0:df:a9:ba:91:3b:f4:48:30:bf:6a: 45:b0:c3:9e:b1:58:0c:bc:65:f7:fa:09:3e:1e:d4:8e:0a:1e: 62:1b:69:5d:12:78:3c:f5:89:1f:1c:f3:b6:a6:89:54:c3:cf: ef:91:a4:48:86:6c:63:bb:bc:a8:0b:86:7c:01:90:2a:83:71: f4:cb:b3:95:82:0a:06:30:d6:a1:ac:14:f4:b2:85:44:d9:8c: cf:46:f0:72:63:b0:f5:f6:01:5e:35:a8:76:e5:ee:b8:37:53: 97:c5:61:fb:79:25:f9:fc:06:67:b1:4e:90:a1:ad:36:41:82: ec:89:6a:e0:f1:ff:5c:e2:ea:25:be:f1:9e:b9:f1:9d:5d:18: 19:12:c7:43:3f:91:a8:ee:71:d2:9b:e5:0c:5b:81:31:56:24: 66:86:f7:13:22:a5:12:c9:85:1e:80:4c:58:83:31:bc:66:ab: 7d:e8:a7:22:7f:41:2c:d0:54:0b:9c:7f:94:28:19:64:2d:14: f3:96:57:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjQxMTIyMTY0NDEzWhcNMjQxMTI5MTY0NDEzWjAYMRYwFAYD VQQDEw02NzQwYjRkZS01YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30HDKpWwciQi1r5eKk/t5IRzyrlb/EEalqZzcR1+/rYPBrU7FVlGQaSXCn/N rc91dLqpEqm/qCfwFMiQxV1oa/0KBKUDWgq6sJuJhTnaRVbCWtxeixX6TfuKFuP8 sJpLn1IuAKkDO5HOEGBL7FDLvmU7soG5Vr+SVwUsVAREKYkb9d495yCayICDkSjY S2F/jSxclkNK1qBD82VY7BqB2iorVNYzRamWNfHvqKLymPfxd2OTfIwORrxPOz+C 5J9jgoBYrvP5g+E+cdMJNrkrxRaI+eEycqM21NtNen+zflt4e19moDwpuoxf5x2r GMQLk5I6MRA0+gDt/Sk/vyaB/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATpB1UN GlHhZL9YCu19Io+tHmhGMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC75P2MxKKHdpm8Fk875sy/OJWKFcPbP/l8rvEzM175DxgxBw8F8F0d R8Eebq5knqXee8nb4vgEHvXB18xD8N+pupE79Egwv2pFsMOesVgMvGX3+gk+HtSO Ch5iG2ldEng89YkfHPO2polUw8/vkaRIhmxju7yoC4Z8AZAqg3H0y7OVggoGMNah rBT0soVE2YzPRvByY7D19gFeNah25e64N1OXxWH7eSX5/AZnsU6Qoa02QYLsiWrg 8f9c4uolvvGeufGdXRgZEsdDP5Go7nHSm+UMW4ExViRmhvcTIqUSyYUegExYgzG8 Zqt96Kcif0Es0FQLnH+UKBlkLRTzlley -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org