$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: 9rUhbRWo9xWAjZarhSrm24XdVIU9rZA4/1OYg6JqySs= Subject key identifier: 96:71:24:F5:D3:F7:E9:B7:F0:FF:26:17:12:DF:16:8D:6A:85:E1:6B Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 05C4 Signing time: Fri 22 Nov 2024 22:35:56 +0000 Manifest this update: Fri 22 Nov 2024 22:35:56 +0000 Manifest next update: Fri 29 Nov 2024 22:35:56 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: 84EdO0mhpP6de8zIMLaVrFUbqCqDvRDNMeA4EolfvDo=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: qG6STwlDbN6NW6ARno6ilKFIOOqEukZRWb32de5Epio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Nov 22 22:35:56 2024 GMT Not After : Nov 29 22:35:56 2024 GMT Subject: CN=6741074c-bab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:31:78:5d:0a:73:d3:77:6b:b8:4f:8a:76: 52:bb:50:09:4f:ea:6e:74:59:57:f2:54:f0:2d:6b: fc:48:ae:01:04:e7:3b:86:ab:0f:a8:f6:38:8b:d3: 6a:35:29:8c:10:7f:89:72:da:f4:a1:af:6c:10:90: a6:7f:ea:0d:eb:07:34:33:1e:96:27:24:9f:1f:91: 56:85:37:73:b1:86:56:47:7a:9b:a5:c2:fe:cd:c6: e9:7d:a0:76:02:23:8d:83:f9:f2:84:ef:7e:b8:5a: 27:d2:7a:00:fc:b5:5e:40:f0:7d:61:b2:3c:54:ae: 1d:09:91:4f:72:fc:02:01:5d:88:d5:c4:c9:a7:5c: c6:b6:6a:70:25:ea:9b:f1:61:77:b5:bb:84:60:8f: 84:8c:9f:e7:b9:e8:78:05:57:89:29:5b:74:0b:b2: 56:ee:68:06:d7:4c:d7:8f:6f:0a:77:00:3b:13:09: 73:8d:fb:2b:d3:38:ce:7c:62:f6:63:67:d1:f0:ca: 35:95:40:05:11:8c:47:96:5c:0d:ba:8c:bc:76:1a: c8:ad:52:22:52:34:55:49:3e:5a:a0:03:d0:b2:31: f9:e4:b4:1d:99:01:b6:c4:33:55:74:c1:96:ed:92: 71:09:b2:f8:29:44:f3:64:fa:b5:95:fd:7c:6e:49: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:71:24:F5:D3:F7:E9:B7:F0:FF:26:17:12:DF:16:8D:6A:85:E1:6B X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:55:f4:cf:a0:34:9f:25:1e:ad:24:bf:66:b6:3b:74:fc: c3:c7:c1:51:aa:84:17:bb:20:3c:31:26:19:30:a9:75:9b:ee: df:b6:98:bf:7a:e7:90:ec:7a:d0:96:b8:20:3e:d2:43:00:b6: 62:36:04:37:e8:65:56:9d:46:bd:01:48:11:4a:ae:72:f8:11: 3a:e4:65:9a:ca:66:d8:09:2c:21:2a:d6:e7:dc:0b:94:f9:b4: 0a:27:50:00:fb:d5:49:59:b6:3c:26:2f:61:01:8a:9d:5d:8a: d3:fa:02:69:0b:82:b6:5b:d2:f7:1a:d1:fb:83:30:75:0e:f5: 6a:a2:d4:d7:0d:79:05:5d:41:a0:48:3a:db:bd:4c:77:e6:33: 87:91:7b:a4:a2:ec:65:4b:2c:8b:98:9f:dc:3c:67:65:6f:0a: 4b:0f:46:93:7d:a0:0e:fb:6d:32:15:9a:b2:4b:06:26:97:4d: 62:e8:73:ef:bb:a0:5c:39:77:7b:3f:72:b9:e2:a0:2d:e2:47: b8:54:f4:2e:b8:96:02:49:9e:da:72:8f:2f:27:18:11:f6:8c: 7b:15:38:98:80:bd:e5:ea:22:3f:f7:ab:fc:77:d7:be:e1:f8: f1:0e:c4:57:b0:56:13:02:f3:ee:f4:e7:06:fc:1b:3f:89:8c: 6b:64:9d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjQxMTIyMjIzNTU2WhcNMjQxMTI5MjIzNTU2WjAYMRYwFAYD VQQDEw02NzQxMDc0Yy1iYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34oxeF0Kc9N3a7hPinZSu1AJT+pudFlX8lTwLWv8SK4BBOc7hqsPqPY4i9Nq NSmMEH+Jctr0oa9sEJCmf+oN6wc0Mx6WJySfH5FWhTdzsYZWR3qbpcL+zcbpfaB2 AiONg/nyhO9+uFon0noA/LVeQPB9YbI8VK4dCZFPcvwCAV2I1cTJp1zGtmpwJeqb 8WF3tbuEYI+EjJ/nueh4BVeJKVt0C7JW7mgG10zXj28KdwA7Ewlzjfsr0zjOfGL2 Y2fR8Mo1lUAFEYxHllwNuoy8dhrIrVIiUjRVST5aoAPQsjH55LQdmQG2xDNVdMGW 7ZJxCbL4KUTzZPq1lf18bkljYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZxJPXT 9+m38P8mFxLfFo1qheFrMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcQlX0z6A0nyUerSS/ZrY7dPzDx8FRqoQXuyA8MSYZMKl1m+7ftpi/ eueQ7HrQlrggPtJDALZiNgQ36GVWnUa9AUgRSq5y+BE65GWaymbYCSwhKtbn3AuU +bQKJ1AA+9VJWbY8Ji9hAYqdXYrT+gJpC4K2W9L3GtH7gzB1DvVqotTXDXkFXUGg SDrbvUx35jOHkXukouxlSyyLmJ/cPGdlbwpLD0aTfaAO+20yFZqySwYml01i6HPv u6BcOXd7P3K54qAt4ke4VPQuuJYCSZ7aco8vJxgR9ox7FTiYgL3l6iI/96v8d9e+ 4fjxDsRXsFYTAvPu9OcG/Bs/iYxrZJ0/ -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org