$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: fHUYjLRofeoZLA2mST+xWkXQEU2S7p0JTo629qRFc2o= Subject key identifier: 4E:C9:61:0A:FD:0D:6E:40:A8:10:1C:3A:CF:B0:AA:D2:C5:C6:34:4A Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 06EB Signing time: Fri 22 Nov 2024 21:32:08 +0000 Manifest this update: Fri 22 Nov 2024 21:32:08 +0000 Manifest next update: Fri 29 Nov 2024 21:32:08 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: G2SBS5IVIFEZ++NF2v40vuQmaFWqkyEWn+u7/WF/2Cg=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: RZxYTwJ2J9vJ/UsV8bgMmz9tZbmDhHbH267Nc52jlFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Nov 22 21:32:08 2024 GMT Not After : Nov 29 21:32:08 2024 GMT Subject: CN=6740f858-55c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:f9:6e:18:bc:22:5c:49:e5:08:5d:44:66: ee:0b:cf:39:ff:68:0e:81:55:0a:05:d6:a6:b8:80: dd:f5:bf:00:8e:4f:12:7d:c7:98:fc:99:48:b1:39: c1:54:cd:a0:9d:49:e2:68:2f:0d:a3:7e:ca:e5:db: cb:d8:1f:c4:94:48:97:41:59:d8:e6:78:05:20:97: 07:0d:0b:9d:7b:1e:b1:5c:92:c6:72:b2:d4:97:d7: 7d:2f:46:a1:c9:f0:79:ac:1e:b7:44:9e:84:24:b1: c4:dc:aa:4c:93:06:13:e0:57:aa:d9:0a:c6:82:71: a1:2f:0a:55:12:33:e6:db:a0:fa:68:61:19:83:d8: b1:9b:82:20:eb:40:8d:77:88:8e:91:22:7c:c6:02: 03:27:fb:03:c2:95:1f:c7:c6:4e:df:3f:c9:30:65: 56:8d:d2:73:cc:5c:80:b3:48:61:d7:e4:e1:10:91: 75:19:e5:09:1b:4b:98:de:5e:b2:16:aa:f9:10:c3: 32:18:01:6d:a8:a7:a6:80:4d:e9:a4:a4:02:12:41: a0:30:4b:02:5e:ef:e4:da:be:59:ec:51:c0:7a:07: 4b:db:84:83:16:15:cc:a3:55:0c:0e:96:a0:3f:ca: d8:81:07:f9:53:9c:0d:42:7d:8c:0e:4c:93:11:bc: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C9:61:0A:FD:0D:6E:40:A8:10:1C:3A:CF:B0:AA:D2:C5:C6:34:4A X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1b:83:33:28:02:10:20:24:9d:91:77:a1:77:a0:da:1a:71: e0:37:01:cc:1a:cd:88:df:8d:f2:ec:a1:2a:8d:77:0e:d9:29: 64:d1:44:a3:d9:32:0a:1b:9b:54:07:e5:71:56:fb:85:48:5b: 07:b2:32:41:13:0a:d3:5c:60:ec:a0:43:a4:af:8c:98:a4:e9: a5:79:8a:64:81:e7:7e:91:2f:19:16:4c:f9:52:e4:41:d9:ac: 37:8f:74:60:95:26:22:18:ed:e3:48:44:5c:0e:a7:1b:93:05: 55:44:1b:3a:84:e3:42:69:bb:41:70:97:13:ad:3c:b2:61:0a: 54:b6:46:2a:fd:66:8f:98:7e:19:53:95:be:35:51:6c:cd:f2: 15:6b:7d:04:ba:8b:e8:78:75:b7:0a:14:7f:f3:80:3e:6e:34: 61:36:46:95:9b:9f:62:2a:aa:88:31:3b:15:a4:5b:23:3d:8a: 99:25:ea:b9:f0:b0:71:57:cd:d3:67:bd:8f:0f:79:99:f2:6e: 6f:61:d8:ad:f2:ff:36:8a:ab:9e:00:03:14:bb:5d:0e:60:03: 43:2c:e5:3a:8f:17:c3:39:b0:7e:f0:9d:a0:37:35:5b:79:82: ec:ad:d3:97:fb:c5:c6:30:b4:09:fe:2b:0f:33:c4:2e:cf:9f: 35:12:37:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjQxMTIyMjEzMjA4WhcNMjQxMTI5MjEzMjA4WjAYMRYwFAYD VQQDEw02NzQwZjg1OC01NWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vb5bhi8IlxJ5QhdRGbuC885/2gOgVUKBdamuIDd9b8Ajk8SfceY/JlIsTnB VM2gnUniaC8No37K5dvL2B/ElEiXQVnY5ngFIJcHDQudex6xXJLGcrLUl9d9L0ah yfB5rB63RJ6EJLHE3KpMkwYT4Feq2QrGgnGhLwpVEjPm26D6aGEZg9ixm4Ig60CN d4iOkSJ8xgIDJ/sDwpUfx8ZO3z/JMGVWjdJzzFyAs0hh1+ThEJF1GeUJG0uY3l6y Fqr5EMMyGAFtqKemgE3ppKQCEkGgMEsCXu/k2r5Z7FHAegdL24SDFhXMo1UMDpag P8rYgQf5U5wNQn2MDkyTEbwNTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7JYQr9 DW5AqBAcOs+wqtLFxjRKMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVG4MzKAIQICSdkXehd6DaGnHgNwHMGs2I343y7KEqjXcO2Slk0USj 2TIKG5tUB+VxVvuFSFsHsjJBEwrTXGDsoEOkr4yYpOmleYpkged+kS8ZFkz5UuRB 2aw3j3RglSYiGO3jSERcDqcbkwVVRBs6hONCabtBcJcTrTyyYQpUtkYq/WaPmH4Z U5W+NVFszfIVa30EuovoeHW3ChR/84A+bjRhNkaVm59iKqqIMTsVpFsjPYqZJeq5 8LBxV83TZ72PD3mZ8m5vYdit8v82iqueAAMUu10OYANDLOU6jxfDObB+8J2gNzVb eYLsrdOX+8XGMLQJ/isPM8Quz581Ejdg -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org