$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: aDOx1+ZGmNJwQpUi0ZuA6Vj36sf97j/e8bjXjLqyG2k= Subject key identifier: 34:BA:20:6C:67:C6:51:E9:FD:2A:1E:3C:B0:99:A6:AD:05:6C:A3:27 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 13A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 13A0 Signing time: Fri 22 Nov 2024 16:58:34 +0000 Manifest this update: Fri 22 Nov 2024 16:58:34 +0000 Manifest next update: Fri 29 Nov 2024 16:58:34 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: 5cuI653o0ostU+es32R6ObBMKAOFvAHrxndaQTFBXU8=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: 5pUcv+0LLLp1O/NzGX71FS1/aeQUGa83zSCV7bRjRQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5032 (0x13a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Nov 22 16:58:34 2024 GMT Not After : Nov 29 16:58:34 2024 GMT Subject: CN=6740b83a-8f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:56:bf:7b:ac:69:b1:ad:24:33:d7:44:46: 1f:3a:dd:8d:e3:38:bf:06:33:d0:e3:69:36:8d:20: 53:33:0a:0c:b3:df:f8:f3:43:8d:c4:e8:84:ff:bb: cf:2e:c9:04:81:88:87:19:25:cf:f6:16:1e:37:f5: 2c:05:1e:0e:8d:ca:fa:3c:0e:6e:84:a6:11:1b:61: e1:12:f4:db:21:52:2f:6d:f5:35:52:63:cc:37:c5: 3c:1f:d1:d5:38:34:16:c4:a6:c8:89:9b:80:9d:f0: 17:18:44:8c:67:3b:15:87:32:9b:58:04:1b:ab:4e: ee:e5:19:89:10:ff:ca:fe:5f:73:5b:7e:be:72:9b: e3:bb:f4:b9:13:19:fb:01:3f:00:57:72:ce:9b:ca: b4:7f:7c:80:72:a6:0e:f4:90:26:c9:cd:cb:5e:a2: f3:3a:d5:ca:af:06:a7:41:ae:95:36:e0:4d:44:b7: 50:f9:1d:67:96:37:0d:ec:f6:c5:03:85:63:8d:7c: 3e:5d:15:4a:91:00:90:13:f1:d2:04:c7:79:39:a6: 1d:be:fb:ed:0e:6a:74:c6:a3:bd:0d:17:11:3b:f1: c0:f0:d8:cd:7b:d0:35:72:51:71:5c:34:0b:b7:df: 75:15:ef:f4:5a:4a:da:21:8e:43:1a:29:49:7b:f6: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:20:6C:67:C6:51:E9:FD:2A:1E:3C:B0:99:A6:AD:05:6C:A3:27 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e9:11:51:82:3c:62:90:3f:a3:2a:68:2d:de:96:8e:69:c3: f4:01:9e:9d:6d:ab:7b:ae:ba:9e:0d:7c:d1:5f:ec:33:87:f2: 4f:05:be:a6:97:03:e4:97:73:64:47:a7:c6:dc:f0:a9:2f:8a: 14:f5:d9:6e:3e:f3:23:4e:f6:f9:b7:fb:1e:9a:c6:8d:69:d0: 5b:1e:f9:da:b0:fc:48:1a:d0:d0:bf:57:8b:a4:77:d4:7b:db: dc:66:1c:54:42:36:81:c4:0f:94:e9:5c:e0:eb:95:5c:1b:9c: 94:fe:ff:27:78:5f:aa:a4:41:e2:85:e0:e0:fd:ec:58:d4:c0: 05:36:13:9f:d8:a0:ec:a0:a0:4e:67:ad:3b:c2:52:b4:83:53: 77:2e:25:f0:e1:f5:e1:f5:9d:96:cd:69:a2:8a:16:0a:70:f0: c1:a6:af:5a:ba:ba:be:13:55:55:a6:ce:3e:6f:55:c6:bf:02: 3e:75:79:1b:3b:0d:0b:92:39:1d:e4:e9:60:3b:f4:90:08:8f: dd:91:2e:a7:a8:b8:a6:d4:2f:d2:f7:d6:df:8a:6a:b3:51:bf: 58:61:7f:92:55:61:be:b0:70:1b:db:a5:86:24:b8:93:6f:8f: 56:6f:e6:f8:8a:1c:f8:00:b7:c4:e5:4e:1b:ef:3c:ed:89:a7: 0e:9a:2d:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjQxMTIyMTY1ODM0WhcNMjQxMTI5MTY1ODM0WjAYMRYwFAYD VQQDEw02NzQwYjgzYS04ZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh1Wv3usabGtJDPXREYfOt2N4zi/BjPQ42k2jSBTMwoMs9/480ONxOiE/7vP LskEgYiHGSXP9hYeN/UsBR4Ojcr6PA5uhKYRG2HhEvTbIVIvbfU1UmPMN8U8H9HV ODQWxKbIiZuAnfAXGESMZzsVhzKbWAQbq07u5RmJEP/K/l9zW36+cpvju/S5Exn7 AT8AV3LOm8q0f3yAcqYO9JAmyc3LXqLzOtXKrwanQa6VNuBNRLdQ+R1nljcN7PbF A4VjjXw+XRVKkQCQE/HSBMd5OaYdvvvtDmp0xqO9DRcRO/HA8NjNe9A1clFxXDQL t991Fe/0WkraIY5DGilJe/ZuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS6IGxn xlHp/SoePLCZpq0FbKMnMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB6RFRgjxikD+jKmgt3paOacP0AZ6dbat7rrqeDXzRX+wzh/JPBb6m lwPkl3NkR6fG3PCpL4oU9dluPvMjTvb5t/semsaNadBbHvnasPxIGtDQv1eLpHfU e9vcZhxUQjaBxA+U6Vzg65VcG5yU/v8neF+qpEHiheDg/exY1MAFNhOf2KDsoKBO Z607wlK0g1N3LiXw4fXh9Z2WzWmiihYKcPDBpq9aurq+E1VVps4+b1XGvwI+dXkb Ow0Lkjkd5OlgO/SQCI/dkS6nqLim1C/S99bfimqzUb9YYX+SVWG+sHAb26WGJLiT b49Wb+b4ihz4ALfE5U4b7zztiacOmi1o -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org