$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft File: HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json) Hash identifier: b2Z5NygFw1euHUkT10kNhYPIcCQ3XO5vbaC4M4CaZkU= Subject key identifier: D0:2A:19:30:5F:3E:C3:47:1F:3C:66:AB:58:D4:D1:2D:1A:AD:30:76 Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft Manifest number: 04BB Signing time: Fri 22 Nov 2024 23:27:30 +0000 Manifest this update: Fri 22 Nov 2024 23:27:30 +0000 Manifest next update: Fri 29 Nov 2024 23:27:30 +0000 Files and hashes: 1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: cth3FjLa7F5KvtoMLTZMZdIAdCo6fAk2cBmwY5AUfmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Validity Not Before: Nov 22 23:27:30 2024 GMT Not After : Nov 29 23:27:30 2024 GMT Subject: CN=67411362-2504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:80:48:cb:de:01:22:3c:d3:b9:dc:fd:1e: 49:3d:dd:51:3a:73:88:dd:f0:af:30:ac:6d:f6:2b: 79:07:9f:ba:29:77:f8:f1:8d:28:6f:fd:39:83:fc: ba:e4:23:f8:fc:09:90:89:d4:d7:d2:a5:59:f7:42: e8:9d:be:ab:b1:66:e2:7b:97:28:b8:ff:fb:28:10: f4:31:ed:ef:08:92:db:bd:18:d2:18:03:54:c8:25: d2:0d:d5:e0:e8:83:a9:a4:2d:78:29:de:77:2c:50: 6e:3f:d1:8f:80:6b:23:59:e4:40:da:96:af:9b:2f: 07:77:24:d9:d1:f6:8a:70:41:d0:c9:27:2b:a1:58: bb:c4:59:8c:91:fd:81:ec:c8:ac:20:a7:01:d7:73: ff:53:de:99:78:ce:56:12:b1:e7:d4:ec:3e:5c:56: a7:8e:a5:94:4c:d5:d5:91:1d:d9:ce:2e:e9:53:01: 6d:4a:fb:97:e2:1a:04:d5:4c:41:d0:cf:ed:30:c8: b2:83:e2:ed:14:8c:b1:af:a8:86:ba:91:38:da:e8: 7d:27:09:df:85:53:7e:2f:4f:c7:3b:c6:c5:99:74: 07:87:2d:9a:09:c0:68:a8:c7:8e:6c:98:12:b1:ce: 4e:20:51:91:b3:bd:74:a1:c7:37:6a:6c:b7:ca:0e: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:19:30:5F:3E:C3:47:1F:3C:66:AB:58:D4:D1:2D:1A:AD:30:76 X509v3 Authority Key Identifier: keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:55:b7:fd:f5:91:02:3e:06:0b:0a:b0:91:62:fd:7e:d8:8d: b5:73:25:82:1c:bc:cb:f9:2b:b9:5e:a2:89:39:07:32:31:85: b3:f2:ef:d4:cc:b6:fe:fa:f5:24:a8:94:09:33:b7:fa:1e:70: 83:9d:20:88:ef:45:ab:6b:3c:b4:50:6b:dd:17:88:6c:16:f8: f6:2a:c3:e9:20:fb:d6:95:47:0c:e8:5d:f6:4f:fa:0d:59:12: 68:72:3c:e6:37:e7:27:b4:ef:df:ac:dd:2a:fd:f7:4b:b3:c7: c8:bf:bc:26:61:5b:f9:c2:f0:db:f1:a9:ea:10:59:94:57:7b: 9d:71:14:c9:94:91:a4:9c:1d:0c:0c:a3:90:f6:06:87:69:c4: f6:14:2d:11:bf:d7:33:b3:3d:67:3e:c3:49:c5:38:3b:71:0a: 41:82:3c:95:ac:36:de:63:e9:0f:fe:36:7d:ec:5c:78:a9:43: a9:2c:a2:17:48:23:9b:af:5f:e3:30:31:2f:73:99:b1:26:57: 26:51:79:e6:ce:a3:18:09:d8:dc:6e:57:d5:58:80:ea:67:69: 5d:70:d3:51:a3:7e:ed:98:91:ae:3d:be:6a:35:0a:9f:a1:d8: a7:ff:c7:39:4b:b9:f3:9f:db:f0:89:f4:a9:fd:dd:4b:fa:42: ac:dc:cb:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4 MzZBNDBGRjgwHhcNMjQxMTIyMjMyNzMwWhcNMjQxMTI5MjMyNzMwWjAYMRYwFAYD VQQDEw02NzQxMTM2Mi0yNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz6ASMveASI807nc/R5JPd1ROnOI3fCvMKxt9it5B5+6KXf48Y0ob/05g/y6 5CP4/AmQidTX0qVZ90Lonb6rsWbie5couP/7KBD0Me3vCJLbvRjSGANUyCXSDdXg 6IOppC14Kd53LFBuP9GPgGsjWeRA2pavmy8HdyTZ0faKcEHQyScroVi7xFmMkf2B 7MisIKcB13P/U96ZeM5WErHn1Ow+XFanjqWUTNXVkR3Zzi7pUwFtSvuX4hoE1UxB 0M/tMMiyg+LtFIyxr6iGupE42uh9JwnfhVN+L0/HO8bFmXQHhy2aCcBoqMeObJgS sc5OIFGRs710occ3amy3yg6rQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAqGTBf PsNHHzxmq1jU0S0arTB2MB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1 NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQ2QS82OUMyRDM1MDA1NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0y LWlobk5mamdhUm1EYWtEX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEVbf99ZECPgYLCrCRYv1+2I21cyWCHLzL+Su5XqKJOQcyMYWz8u/U zLb++vUkqJQJM7f6HnCDnSCI70Wrazy0UGvdF4hsFvj2KsPpIPvWlUcM6F32T/oN WRJocjzmN+cntO/frN0q/fdLs8fIv7wmYVv5wvDb8anqEFmUV3udcRTJlJGknB0M DKOQ9gaHacT2FC0Rv9czsz1nPsNJxTg7cQpBgjyVrDbeY+kP/jZ97Fx4qUOpLKIX SCObr1/jMDEvc5mxJlcmUXnmzqMYCdjcblfVWIDqZ2ldcNNRo37tmJGuPb5qNQqf odin/8c5S7nzn9vwifSp/d1L+kKs3MsL -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org