$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: zSdyi6TvYCrtBjCyzqmGRMWmuiNPlPXflbv5zZIt3tw= Subject key identifier: C9:1F:B7:86:A0:68:FA:1F:5B:72:BE:94:48:77:DA:E5:30:74:B9:56 Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: 0C Signing time: Sat 23 Nov 2024 06:02:12 +0000 Manifest this update: Sat 23 Nov 2024 06:02:11 +0000 Manifest next update: Sat 30 Nov 2024 06:02:11 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: Braqu6DiaJlK05om7eUdziBIU6lN1Yxvm2iO6F07agU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Nov 23 06:02:11 2024 GMT Not After : Nov 30 06:02:11 2024 GMT Subject: CN=67416fe3-4418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:1e:17:2b:f9:8c:a2:9c:fb:52:b7:a6:e0: 6b:af:1a:7f:03:8a:e4:b2:06:0f:53:bf:12:ce:58: db:97:38:29:bd:f7:34:70:df:ad:76:81:aa:e9:68: 24:36:55:29:cd:47:31:ac:13:dd:a3:ba:c0:fc:96: 9d:1f:9e:a3:59:5e:3c:55:3f:a5:8b:e9:51:d6:3b: 44:08:c8:13:40:01:b9:03:24:49:57:27:fb:aa:ed: b6:9b:91:c6:36:0d:dd:47:8f:be:ed:8b:c4:ed:59: e9:9b:58:0f:f7:9e:f6:ed:c5:5c:e4:98:28:d9:5f: 22:36:c3:aa:3b:8f:c8:23:fe:a2:85:74:74:93:aa: 9b:6d:e8:66:e8:bb:97:c6:68:d9:d0:af:76:9e:3d: fb:bc:e0:cf:ca:16:44:e0:2d:b6:09:bc:68:d5:12: 84:97:b6:eb:ab:25:1e:f2:fc:6c:6c:7f:74:97:fc: 4b:58:3f:7b:e8:6e:44:23:65:26:6f:64:c6:df:62: a5:76:8d:cf:e9:b0:0e:28:9c:10:64:72:65:48:79: d6:1f:7d:57:4c:62:b5:40:eb:6e:59:d2:8f:09:eb: 6a:09:df:9b:fb:67:d3:16:d2:c8:97:a7:cf:72:fd: 75:f6:9f:32:cf:90:30:3b:00:3f:d7:1d:ae:66:75: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1F:B7:86:A0:68:FA:1F:5B:72:BE:94:48:77:DA:E5:30:74:B9:56 X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:10:36:0c:84:ee:32:2d:e1:7b:e9:48:c0:13:1b:c2:ca:e9: 0b:45:7a:5e:dd:e6:f1:9e:d7:94:f4:86:c7:14:72:4b:e5:8d: aa:ab:7a:9e:7b:6a:dc:ec:c4:f8:5a:7c:de:38:0c:8b:b2:8a: c9:a9:55:ac:fb:b4:5e:a5:b7:8a:6c:00:24:d9:a3:e9:c3:0f: 53:72:cd:d9:2f:35:08:97:19:c2:e6:c6:9d:14:65:7f:4d:2b: 05:6c:76:7b:4a:9a:c8:2a:b5:77:2f:59:b6:21:41:52:f2:78: a9:e6:b0:d7:ab:c9:e6:1c:9b:e3:aa:22:81:5c:bd:05:62:74: 01:0a:52:2f:bb:d7:5a:17:d2:cd:eb:8f:a5:c9:be:cc:db:30: 52:df:dc:6f:ba:bd:b0:29:a9:8c:d0:7b:b2:1f:b4:b4:de:27: de:9b:55:8b:0e:c1:d4:39:25:5c:7b:ac:fd:c7:40:79:35:18: 9e:c1:39:48:0a:c2:2d:6d:bd:57:bd:65:f2:82:00:58:cd:49: 52:1c:26:06:45:8a:71:07:aa:47:8b:38:17:25:c9:56:a3:9e: 90:8e:27:42:cc:f5:a3:fb:af:de:3c:b3:de:75:7b:d2:02:19: 2c:c3:d1:0f:0f:e7:6f:63:59:2e:a8:51:72:bf:40:85:97:5f: c6:39:c8:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFNDExMC8GA1UEBRMoODY3Nzk5MDUzRUM5MTc0QjExMUNCQjQ2QjI5N0ZBNjQ3 RTk4MkFBNTAeFw0yNDExMjMwNjAyMTFaFw0yNDExMzAwNjAyMTFaMBgxFjAUBgNV BAMTDTY3NDE2ZmUzLTQ0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQmx4XK/mMopz7Urem4GuvGn8DiuSyBg9TvxLOWNuXOCm99zRw3612garpaCQ2 VSnNRzGsE92jusD8lp0fnqNZXjxVP6WL6VHWO0QIyBNAAbkDJElXJ/uq7babkcY2 Dd1Hj77ti8TtWembWA/3nvbtxVzkmCjZXyI2w6o7j8gj/qKFdHSTqptt6Gbou5fG aNnQr3aePfu84M/KFkTgLbYJvGjVEoSXtuurJR7y/Gxsf3SX/EtYP3vobkQjZSZv ZMbfYqV2jc/psA4onBBkcmVIedYffVdMYrVA625Z0o8J62oJ35v7Z9MW0siXp89y /XX2nzLPkDA7AD/XHa5mdegJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyR+3hqBo +h9bcr6USHfa5TB0uVYwHwYDVR0jBBgwFoAUhneZBT7JF0sRHLtGspf6ZH6YKqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEU0LzU2MDhBNDk4OUE2 NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaG5lWkJUN0pGMHNSSEx0R3NwZjZaSDZZS3FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEU0LzU2MDhBNDk4OUE2NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBz UkhMdEdzcGY2Wkg2WUtxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwQNgyE7jIt4XvpSMATG8LK6QtFel7d5vGe15T0hscUckvljaqrep57 atzsxPhafN44DIuyismpVaz7tF6lt4psACTZo+nDD1NyzdkvNQiXGcLmxp0UZX9N KwVsdntKmsgqtXcvWbYhQVLyeKnmsNeryeYcm+OqIoFcvQVidAEKUi+711oX0s3r j6XJvszbMFLf3G+6vbApqYzQe7IftLTeJ96bVYsOwdQ5JVx7rP3HQHk1GJ7BOUgK wi1tvVe9ZfKCAFjNSVIcJgZFinEHqkeLOBclyVajnpCOJ0LM9aP7r948s951e9IC GSzD0Q8P529jWS6oUXK/QIWXX8Y5yHo= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org