$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: a94F7sgL8r/1I33orlMugI1+yxzUiK8rV5JE0nMUAXo= Subject key identifier: C3:22:2D:46:F4:B2:29:DB:A5:9D:E6:41:51:BD:0E:6D:97:51:F4:38 Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 3424 Signing time: Sun 24 Nov 2024 14:54:46 +0000 Manifest this update: Sun 24 Nov 2024 14:54:45 +0000 Manifest next update: Sun 01 Dec 2024 14:54:45 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: EiHRgb+PsLTzlq3nBNt2jaWoZLdF63CEc+SegDOEy9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Nov 24 14:54:45 2024 GMT Not After : Dec 1 14:54:45 2024 GMT Subject: CN=67433e35-1b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:6b:52:76:9a:92:6b:39:f5:22:30:a3:17: 3f:69:91:a1:66:93:1c:19:96:93:dc:27:f9:3d:46: 5e:63:82:bb:66:cf:86:56:41:b5:7e:67:26:ce:d2: fd:7d:d9:97:ba:3e:0e:3f:39:5c:be:45:2a:f0:ac: 52:98:1c:d4:9c:3a:3e:19:b2:4a:59:21:b9:86:a2: c6:9a:6b:90:5b:09:4e:9c:a5:f3:b7:28:01:33:5c: 52:54:4e:d4:48:f2:b9:d9:00:a4:c6:eb:c0:c4:b4: e3:7c:c8:ac:ba:61:3c:cb:0a:2c:fa:4e:04:62:45: a5:45:88:4a:62:40:67:32:4f:a6:46:22:0d:74:f1: ef:a6:ba:fc:da:ec:9d:4a:d1:3d:34:ca:9a:74:4d: e7:0c:61:ff:46:5c:6b:d2:f0:4d:b2:37:67:08:a7: e6:64:59:0b:e6:e8:74:3a:95:50:9b:95:3d:78:3e: 95:fb:9a:c7:d1:10:ff:6e:d2:32:66:51:0e:35:f0: 1a:fd:6b:3a:53:35:68:fc:fe:ba:9f:42:ff:2f:23: a3:f1:fb:77:da:82:65:1c:3a:e4:89:ef:d9:ee:8e: fa:27:0f:73:d7:84:70:12:61:3b:01:0d:fa:24:94: 47:c7:13:fa:d5:5d:99:0d:f7:d0:ed:32:77:e2:0e: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:2D:46:F4:B2:29:DB:A5:9D:E6:41:51:BD:0E:6D:97:51:F4:38 X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:11:4d:aa:c8:81:81:d4:75:39:9b:6d:6c:b1:ec:37:5d:16: 8f:57:80:a3:f3:d1:7a:18:ef:5d:63:85:c1:e2:bf:7e:5d:22: 06:6e:d2:85:13:55:4c:b7:6a:49:3e:74:33:94:8f:6a:e8:75: 1c:5c:86:94:fc:79:84:88:76:e4:e5:97:ff:7f:df:ed:b2:f9: 0b:9b:d5:1c:48:70:26:19:a4:c5:03:ec:6f:e1:3e:95:3b:f9: 23:75:3a:94:e9:e1:5f:f0:f0:5f:5b:81:d5:41:e2:3b:d1:4f: bf:73:44:b8:3a:bd:c6:b4:fc:f3:52:ce:74:ec:dc:5c:36:92: ae:63:e1:74:c8:ed:b6:ab:79:a7:9f:8e:2c:8c:af:3d:d1:a0: 20:ab:1a:78:3e:47:41:9e:b0:e9:31:eb:3c:19:e1:cc:95:84: 69:98:61:ca:23:5e:3b:20:c6:ba:64:99:41:d4:1d:59:07:59: 08:92:f8:dd:e6:76:d2:b6:ee:b7:15:a2:bf:7a:52:f8:b4:69: e0:94:fb:e5:4f:fd:73:f0:c7:ee:13:23:9b:76:6a:50:ff:76: 9b:79:f4:fb:15:42:0d:79:7f:5b:6b:f4:45:82:12:9a:ff:46: 72:cb:75:9f:d1:3f:17:8c:5c:cd:72:b1:b2:80:a9:ae:7c:df: 6d:0e:2a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjQxMTI0MTQ1NDQ1WhcNMjQxMjAxMTQ1NDQ1WjAYMRYwFAYD VQQDEw02NzQzM2UzNS0xYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmS9rUnaakms59SIwoxc/aZGhZpMcGZaT3Cf5PUZeY4K7Zs+GVkG1fmcmztL9 fdmXuj4OPzlcvkUq8KxSmBzUnDo+GbJKWSG5hqLGmmuQWwlOnKXztygBM1xSVE7U SPK52QCkxuvAxLTjfMisumE8ywos+k4EYkWlRYhKYkBnMk+mRiINdPHvprr82uyd StE9NMqadE3nDGH/Rlxr0vBNsjdnCKfmZFkL5uh0OpVQm5U9eD6V+5rH0RD/btIy ZlEONfAa/Ws6UzVo/P66n0L/LyOj8ft32oJlHDrkie/Z7o76Jw9z14RwEmE7AQ36 JJRHxxP61V2ZDffQ7TJ34g537QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMiLUb0 sinbpZ3mQVG9Dm2XUfQ4MB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWEU2qyIGB1HU5m21ssew3XRaPV4Cj89F6GO9dY4XB4r9+XSIGbtKF E1VMt2pJPnQzlI9q6HUcXIaU/HmEiHbk5Zf/f9/tsvkLm9UcSHAmGaTFA+xv4T6V O/kjdTqU6eFf8PBfW4HVQeI70U+/c0S4Or3GtPzzUs507NxcNpKuY+F0yO22q3mn n44sjK890aAgqxp4PkdBnrDpMes8GeHMlYRpmGHKI147IMa6ZJlB1B1ZB1kIkvjd 5nbStu63FaK/elL4tGnglPvlT/1z8MfuEyObdmpQ/3abefT7FUINeX9ba/RFghKa /0Zyy3Wf0T8XjFzNcrGygKmufN9tDipE -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org