$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: +a8WvJTc8qhO2YUr6LD/1PM5Qqk6QMWv89Mu/XlLmO4= Subject key identifier: AD:88:3C:48:60:91:9A:AA:12:04:7A:17:72:5D:75:99:D5:5B:B5:80 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 1432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 141B Signing time: Fri 22 Nov 2024 16:56:55 +0000 Manifest this update: Fri 22 Nov 2024 16:56:54 +0000 Manifest next update: Fri 29 Nov 2024 16:56:54 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: INw6Fi13/3zgJfnXNDPsOiB1rEzY5IdxfhH9W5lOi8Y=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5170 (0x1432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Nov 22 16:56:54 2024 GMT Not After : Nov 29 16:56:54 2024 GMT Subject: CN=6740b7d6-c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:d9:1e:8f:24:63:7b:d5:04:28:44:dd:37: 0a:d6:3c:13:76:4b:a5:fa:6c:9d:f6:0b:7a:c4:db: 13:ff:53:2c:03:46:12:a7:fb:00:57:29:ff:b6:38: 6e:03:57:f0:74:1b:d7:38:3e:69:ae:0d:ed:33:06: 9a:2c:da:d6:d4:71:62:bd:4c:a1:bf:ae:fb:fa:13: 61:f1:1b:e3:6f:c4:d0:2d:4a:fb:ad:c2:1e:3c:07: 3f:13:02:ec:54:68:7f:67:70:92:5a:3b:08:0e:82: 0c:88:1c:ee:9a:2e:38:cf:bd:66:7a:8d:81:42:8f: 71:99:4e:54:75:7f:83:13:c5:a0:fb:b4:ee:bb:e9: 3f:74:b4:9f:7b:5a:08:47:da:78:e9:90:8b:9f:50: ce:26:d1:1d:3f:97:17:df:e8:b9:1b:ed:b8:13:80: 77:c9:55:8f:22:db:52:21:96:3c:11:a8:6d:23:f0: 98:5a:d0:93:9e:8f:d9:d5:f7:57:51:5b:dc:89:46: 42:6e:a4:a1:af:3e:02:4a:6f:91:f2:52:6e:fd:17: 07:49:aa:57:df:a3:dd:23:d8:02:60:48:31:4c:2b: 35:af:27:c5:0a:a3:6c:f9:f2:f3:1c:74:a6:f1:48: 50:e5:01:5d:3f:82:b3:63:a5:7c:0e:95:ac:df:f9: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:3C:48:60:91:9A:AA:12:04:7A:17:72:5D:75:99:D5:5B:B5:80 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:52:a7:6b:e5:f2:ee:ef:ba:97:2f:9b:88:58:c5:c2:2d:94: 2b:d9:ae:48:79:c2:2a:8b:05:9f:a6:9d:fa:a2:d6:6e:49:8e: 20:e9:4a:76:42:e2:72:25:4a:e0:0b:8d:91:2c:39:56:ab:3f: a2:3f:26:67:76:0c:c4:c2:66:f3:c9:6c:bd:03:97:a2:00:65: 29:d2:b9:9d:11:9a:cb:d1:f8:f7:72:ae:59:96:60:65:59:28: 5b:d2:1c:8e:6a:28:f5:ac:9e:ac:2c:a7:8d:f4:9a:1a:bf:8a: 5a:0e:51:6a:17:2c:93:09:84:a8:b8:06:39:3c:b8:07:7f:3d: 4e:87:61:44:7d:66:a1:8e:f3:92:c3:f0:f6:d1:6b:19:d2:72: 13:3a:e3:1d:be:cf:b6:60:8f:4b:a2:f3:61:5c:e7:76:9d:8d: 39:78:d6:f0:ab:d7:a9:70:8c:bb:5e:08:eb:73:11:f9:98:6a: 73:89:19:10:a6:c9:14:2e:38:7e:ef:a8:17:62:c0:3e:ba:03: cd:44:03:8a:e8:c9:76:6a:13:73:04:5c:76:02:5b:0a:4b:b8: 7c:b7:83:8f:a3:87:3a:a9:21:91:bb:67:c2:15:ef:61:e9:82: 02:01:3b:31:74:ed:f6:8a:b0:e4:c0:ca:f9:09:4e:80:ac:5e: 67:de:f7:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjQxMTIyMTY1NjU0WhcNMjQxMTI5MTY1NjU0WjAYMRYwFAYD VQQDEw02NzQwYjdkNi1jOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCPZHo8kY3vVBChE3TcK1jwTdkul+myd9gt6xNsT/1MsA0YSp/sAVyn/tjhu A1fwdBvXOD5prg3tMwaaLNrW1HFivUyhv677+hNh8Rvjb8TQLUr7rcIePAc/EwLs VGh/Z3CSWjsIDoIMiBzumi44z71meo2BQo9xmU5UdX+DE8Wg+7Tuu+k/dLSfe1oI R9p46ZCLn1DOJtEdP5cX3+i5G+24E4B3yVWPIttSIZY8EahtI/CYWtCTno/Z1fdX UVvciUZCbqShrz4CSm+R8lJu/RcHSapX36PdI9gCYEgxTCs1ryfFCqNs+fLzHHSm 8UhQ5QFdP4KzY6V8DpWs3/lLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2IPEhg kZqqEgR6F3JddZnVW7WAMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCUqdr5fLu77qXL5uIWMXCLZQr2a5IecIqiwWfpp36otZuSY4g6Up2 QuJyJUrgC42RLDlWqz+iPyZndgzEwmbzyWy9A5eiAGUp0rmdEZrL0fj3cq5ZlmBl WShb0hyOaij1rJ6sLKeN9Joav4paDlFqFyyTCYSouAY5PLgHfz1Oh2FEfWahjvOS w/D20WsZ0nITOuMdvs+2YI9LovNhXOd2nY05eNbwq9epcIy7XgjrcxH5mGpziRkQ pskULjh+76gXYsA+ugPNRAOK6Ml2ahNzBFx2AlsKS7h8t4OPo4c6qSGRu2fCFe9h 6YICATsxdO32irDkwMr5CU6ArF5n3vdM -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org