$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: a4i17mifxgoqBp8WAATeJVmXU1DTLe+CU3xZjpTYRqQ= Subject key identifier: D7:CF:22:14:E1:0F:87:D3:BE:F3:93:4D:5D:53:80:47:79:B0:65:A5 Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 0568 Signing time: Fri 22 Nov 2024 22:55:34 +0000 Manifest this update: Fri 22 Nov 2024 22:55:34 +0000 Manifest next update: Fri 29 Nov 2024 22:55:34 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: Dq24gPH3pcH+Qws5DHPN6nHjQaRQ9HbuFXutNzWP/5A=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Nov 22 22:55:34 2024 GMT Not After : Nov 29 22:55:34 2024 GMT Subject: CN=67410be6-6eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:06:d6:69:c2:11:88:a7:aa:06:bc:2b:c1: 7e:a7:7f:a8:31:16:c1:24:16:38:8f:3a:ae:81:a9: 0f:4f:26:1d:f1:52:34:27:59:ab:2e:c9:62:16:0a: c7:c3:ec:83:7f:0b:43:5e:43:43:b3:cf:b8:b7:8b: 85:03:40:b5:1e:9d:82:7c:b1:ca:9a:ff:f7:c9:21: fc:e0:2d:6e:15:82:46:72:cb:9d:61:28:bf:e7:58: 69:23:59:73:df:e4:69:75:28:c6:e9:83:74:d7:b8: ec:45:f3:e8:e0:26:25:20:e3:ee:36:01:98:a7:4d: 53:25:96:0f:9e:8e:da:82:60:2f:2f:3b:3d:93:dd: 80:19:ca:c5:c6:f1:be:5e:65:a7:30:f0:ba:cc:12: 2a:b4:e4:55:c8:fd:3f:1d:bf:da:78:82:2e:cc:f5: 40:21:a3:40:dd:02:92:87:89:16:bc:5a:ba:ec:47: 60:45:6c:9b:65:0a:65:17:5d:44:a3:25:ea:f7:eb: db:a7:6c:7b:86:25:e5:58:49:d3:ac:9b:f2:58:f9: f7:dd:b0:6f:a4:c2:45:3c:1e:3d:65:53:d6:20:78: 08:99:df:96:db:91:78:63:27:24:f8:6e:a3:fe:1b: 18:db:23:f5:be:b7:8f:52:db:50:31:87:24:c8:b6: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:22:14:E1:0F:87:D3:BE:F3:93:4D:5D:53:80:47:79:B0:65:A5 X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d3:23:3e:2a:bf:ea:d8:3f:47:d0:fd:47:cc:3f:5c:57:85: a0:b1:e3:ee:06:c5:ab:93:6e:b2:c3:ee:a6:c0:de:7c:6f:7a: 0e:88:c5:df:72:d9:04:e0:54:f9:12:21:75:27:4b:2b:9d:79: 0c:54:8c:d8:15:d1:88:17:80:59:d8:55:a5:92:73:71:9d:23: 67:76:05:03:dc:51:0b:1a:b0:61:8d:82:f4:e0:9e:44:7b:b3: f9:b3:7a:ad:b3:db:8c:07:c5:2a:42:de:20:82:54:dd:f4:1b: 18:b3:38:84:86:ca:50:79:52:1b:e8:dc:da:12:6e:9e:6c:8f: 2d:de:10:49:60:2c:f7:e2:0e:86:dc:78:4b:e0:d2:bc:22:7f: 98:5b:d2:a0:0e:7b:75:84:b7:84:47:80:90:74:f8:c4:85:59: 43:a8:ba:96:28:c2:c6:21:25:dc:90:3a:a5:e4:68:96:eb:ad: 38:20:de:b7:88:bb:0d:aa:27:40:7b:d1:20:38:30:0e:c8:52: cf:bd:0c:d2:52:66:37:01:d7:e4:89:ea:1d:60:96:02:b3:2a: e9:85:c1:c6:ca:6b:b8:6e:44:3e:c6:a7:9a:eb:95:a9:5e:ef: ea:37:aa:30:a1:f0:6d:65:bf:02:fe:84:ef:cb:1f:9b:8b:3b: 0f:ff:3a:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjQxMTIyMjI1NTM0WhcNMjQxMTI5MjI1NTM0WjAYMRYwFAYD VQQDEw02NzQxMGJlNi02ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIAG1mnCEYinqga8K8F+p3+oMRbBJBY4jzqugakPTyYd8VI0J1mrLsliFgrH w+yDfwtDXkNDs8+4t4uFA0C1Hp2CfLHKmv/3ySH84C1uFYJGcsudYSi/51hpI1lz 3+RpdSjG6YN017jsRfPo4CYlIOPuNgGYp01TJZYPno7agmAvLzs9k92AGcrFxvG+ XmWnMPC6zBIqtORVyP0/Hb/aeIIuzPVAIaNA3QKSh4kWvFq67EdgRWybZQplF11E oyXq9+vbp2x7hiXlWEnTrJvyWPn33bBvpMJFPB49ZVPWIHgImd+W25F4Yyck+G6j /hsY2yP1vrePUttQMYckyLYmywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfPIhTh D4fTvvOTTV1TgEd5sGWlMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm0yM+Kr/q2D9H0P1HzD9cV4WgsePuBsWrk26yw+6mwN58b3oOiMXf ctkE4FT5EiF1J0srnXkMVIzYFdGIF4BZ2FWlknNxnSNndgUD3FELGrBhjYL04J5E e7P5s3qts9uMB8UqQt4gglTd9BsYsziEhspQeVIb6NzaEm6ebI8t3hBJYCz34g6G 3HhL4NK8In+YW9KgDnt1hLeER4CQdPjEhVlDqLqWKMLGISXckDql5GiW6604IN63 iLsNqidAe9EgODAOyFLPvQzSUmY3AdfkieodYJYCsyrphcHGymu4bkQ+xqea65Wp Xu/qN6owofBtZb8C/oTvyx+bizsP/zq/ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org