$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: lJWcphXl+lTEQKWgjIlRxWVdCEly3o/wr4teX/KhwnE= Subject key identifier: 18:42:82:C0:66:E4:B4:CC:6D:55:39:1B:27:F6:02:AF:36:CB:F8:78 Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: BB Signing time: Sat 23 Nov 2024 03:59:07 +0000 Manifest this update: Sat 23 Nov 2024 03:59:07 +0000 Manifest next update: Sat 30 Nov 2024 03:59:07 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: vIA3ACRFgTwEbmiuvIYrBxmwXfgjdWzEjls5BP72GVA=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: yux+dEwmBwNyU/hTLCnztj/y9rn0KtneR4FPzepCfkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: Nov 23 03:59:07 2024 GMT Not After : Nov 30 03:59:07 2024 GMT Subject: CN=6741530b-4862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:55:09:13:0d:25:4b:d0:d8:13:2d:9f:7e: f9:b2:c1:36:80:92:76:49:22:f1:79:e7:8c:9a:64: 9f:b8:9b:18:a6:7b:21:1c:e6:1c:3b:8c:4c:af:17: 15:56:f4:42:6c:18:87:09:12:f4:f6:7d:b1:18:68: 79:72:19:0d:fe:71:5e:ca:41:59:e3:8e:d7:97:81: 8e:39:d0:8f:17:bf:e1:3d:b1:53:b1:f8:fd:81:15: d7:64:da:86:5c:d3:8c:47:9e:1d:a5:e4:83:97:f8: fb:87:95:c3:b4:19:03:d7:5a:63:bb:1f:72:54:28: 4a:5a:68:3b:44:3c:63:43:93:34:fe:58:67:e6:73: 99:d2:96:72:c9:1e:9a:3f:c3:0a:20:7f:ce:1e:19: fb:35:7e:63:6c:10:75:d3:ce:32:cb:fa:94:38:42: 2b:91:40:ab:c7:71:bd:bd:14:70:c1:1b:ec:63:42: f7:0c:11:31:19:a0:80:26:ea:aa:00:a7:9c:e2:ac: 63:e3:0e:bf:15:31:6c:f5:06:56:aa:53:95:d9:d8: 15:f5:43:15:0b:14:b5:26:55:58:35:a9:7b:13:f1: 94:99:0d:5e:4d:e4:b5:86:69:9a:a3:4d:1e:d7:86: cf:c5:b9:fa:0f:28:53:e7:71:e0:4f:f5:d7:83:5e: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:42:82:C0:66:E4:B4:CC:6D:55:39:1B:27:F6:02:AF:36:CB:F8:78 X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:09:d8:ee:ee:aa:a4:fb:62:6c:11:19:bd:96:3f:ef:f7:9e: ec:50:82:ec:fa:f3:ea:5b:5f:65:fe:00:ae:d8:3a:ab:5f:4f: 4c:de:f5:63:e8:f6:ab:fa:b2:06:13:ae:9c:46:9e:93:bc:2f: 8a:a5:bc:42:5d:47:b9:08:29:6d:77:f4:ce:13:71:d0:4e:7d: e0:ac:67:78:30:05:6c:c2:bd:08:7a:4e:56:c8:8c:32:34:46: e3:59:55:b7:24:93:23:6e:35:6b:10:04:27:c6:64:ed:08:c4: f9:b5:6c:0d:16:a6:0d:85:80:dc:13:d3:6f:0e:c9:aa:01:18: 87:b0:af:ac:6f:f7:f2:42:c6:1e:21:db:ae:1d:54:e4:d4:3c: 5a:2d:a0:63:d4:93:ed:80:3c:01:34:c6:e9:3b:7f:33:11:85: ce:ff:4e:ad:3a:a9:ea:3b:8e:0b:d2:94:4c:92:46:5a:15:14: 46:08:b1:d2:71:86:4f:12:79:31:19:f4:c4:82:3c:28:b5:7c: 55:f9:84:79:a6:6d:90:e5:5a:9e:8f:74:f7:5d:fe:bf:3e:72: a0:ca:4f:aa:ea:a5:81:95:1e:3a:bc:2f:55:9b:5f:1c:a0:ff: 76:c2:88:9a:78:dd:64:85:37:20:05:d0:f0:c0:e3:9e:b2:ad: a0:63:b5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjQxMTIzMDM1OTA3WhcNMjQxMTMwMDM1OTA3WjAYMRYwFAYD VQQDEw02NzQxNTMwYi00ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XdVCRMNJUvQ2BMtn375ssE2gJJ2SSLxeeeMmmSfuJsYpnshHOYcO4xMrxcV VvRCbBiHCRL09n2xGGh5chkN/nFeykFZ447Xl4GOOdCPF7/hPbFTsfj9gRXXZNqG XNOMR54dpeSDl/j7h5XDtBkD11pjux9yVChKWmg7RDxjQ5M0/lhn5nOZ0pZyyR6a P8MKIH/OHhn7NX5jbBB1084yy/qUOEIrkUCrx3G9vRRwwRvsY0L3DBExGaCAJuqq AKec4qxj4w6/FTFs9QZWqlOV2dgV9UMVCxS1JlVYNal7E/GUmQ1eTeS1hmmao00e 14bPxbn6DyhT53HgT/XXg14n7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhCgsBm 5LTMbVU5Gyf2Aq82y/h4MB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHCdju7qqk+2JsERm9lj/v957sUILs+vPqW19l/gCu2DqrX09M3vVj 6Par+rIGE66cRp6TvC+KpbxCXUe5CCltd/TOE3HQTn3grGd4MAVswr0Iek5WyIwy NEbjWVW3JJMjbjVrEAQnxmTtCMT5tWwNFqYNhYDcE9NvDsmqARiHsK+sb/fyQsYe IduuHVTk1DxaLaBj1JPtgDwBNMbpO38zEYXO/06tOqnqO44L0pRMkkZaFRRGCLHS cYZPEnkxGfTEgjwotXxV+YR5pm2Q5Vqej3T3Xf6/PnKgyk+q6qWBlR46vC9Vm18c oP92woiaeN1khTcgBdDwwOOesq2gY7W7 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org