$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: elM5l7QnHw+QIZyJf59vGFzjf00bv9AsZrFhlKQyVpg= Subject key identifier: 93:C1:5C:E5:CE:12:D3:7A:09:8C:75:1D:D1:15:93:96:68:35:AC:23 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 03C9 Signing time: Sat 23 Nov 2024 00:14:07 +0000 Manifest this update: Sat 23 Nov 2024 00:14:06 +0000 Manifest next update: Sat 30 Nov 2024 00:14:06 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: IeznyVmY4cvU29OuFQ9yr/Wlo9TueYg3dT28t20NfJU=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: gmAKTnkoBJEmeqKGoCzX2HBg7rYRJBOwpBq/YNgBUCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Nov 23 00:14:06 2024 GMT Not After : Nov 30 00:14:06 2024 GMT Subject: CN=67411e4e-0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:09:2b:75:a8:66:e2:45:29:c6:09:89:39: f1:e2:f6:47:4b:ca:44:a9:9a:49:e9:e0:07:58:79: e7:c0:e7:d2:1e:cf:b1:c6:c0:38:54:a9:91:e1:b3: e3:a8:72:8f:40:a2:6a:8b:e9:25:45:e5:52:3e:44: ac:29:8a:a8:86:42:f6:3c:d2:a7:a5:17:85:b6:e3: 96:80:d8:06:44:76:de:db:6c:f7:c9:e3:9d:c0:ca: 4a:ca:0a:0b:18:f6:5f:c2:c0:a3:b0:c1:4d:96:c1: a8:47:f9:92:ba:07:88:7d:a0:bb:47:2a:9f:9a:e5: c1:c6:32:77:a0:fd:25:af:8f:8a:bd:6b:f7:4f:f2: cc:fd:f1:49:2e:81:e1:3b:72:05:d4:37:aa:e4:67: 34:11:0b:8c:fd:51:f1:d5:e6:8f:25:1e:20:92:57: 3c:31:63:03:d7:08:77:3f:ba:92:7b:ba:f3:0d:46: 57:a7:3c:ef:19:9e:3b:8b:95:fb:b6:93:bc:ff:20: ac:53:14:28:ba:49:b6:10:cb:b8:b4:68:b7:59:65: c4:b9:41:71:85:01:d6:20:3a:e2:ba:f4:7a:39:75: 05:b6:aa:61:1a:6a:a0:69:37:88:8f:5b:37:5d:ac: 2b:a0:ff:7f:17:86:81:85:cb:62:83:83:d4:0c:75: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C1:5C:E5:CE:12:D3:7A:09:8C:75:1D:D1:15:93:96:68:35:AC:23 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:0c:04:8d:f5:ab:fd:13:0d:cd:67:3f:a7:db:9b:ef:10: ba:c9:b4:b9:ad:2c:84:35:be:2f:b6:d9:43:8f:a6:b5:9c:2c: 3e:01:c2:80:fa:eb:af:29:f4:ff:cb:77:55:56:13:4b:27:bf: 6c:a0:b0:19:01:63:8f:71:d9:d5:1f:c2:34:dc:5b:7e:07:7f: 6e:2f:3e:f7:ac:d3:72:99:ec:bd:61:5e:bd:fb:3d:dc:33:dd: 90:95:a5:92:8b:28:06:a7:37:d4:ba:63:28:67:29:bd:30:f9: dd:91:26:f1:3c:83:c0:52:99:5a:a9:bc:6c:f3:e5:b1:54:ee: b7:1c:41:c2:eb:5b:d7:99:58:ae:52:f0:8f:d3:cc:79:3f:85: 1b:f1:1c:09:bc:f5:ba:9b:7b:b5:45:c8:d6:d5:d7:5f:cf:a0: b0:db:1e:e1:41:d4:e1:11:4e:86:c2:67:1c:f7:a2:b7:1f:3d: dd:41:8f:20:11:d1:39:20:5b:40:33:5b:fc:62:63:89:d3:80: 77:85:a9:5a:9d:20:4d:de:91:cd:83:8a:7b:40:83:5d:df:a2: c9:33:fb:fd:7b:a2:ed:40:2c:65:08:63:87:f4:ae:9f:d6:49: 7c:1b:60:0e:b8:79:68:7e:9b:87:ca:25:a1:44:46:8e:cd:eb: 2f:a8:c1:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjQxMTIzMDAxNDA2WhcNMjQxMTMwMDAxNDA2WjAYMRYwFAYD VQQDEw02NzQxMWU0ZS0wZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUMJK3WoZuJFKcYJiTnx4vZHS8pEqZpJ6eAHWHnnwOfSHs+xxsA4VKmR4bPj qHKPQKJqi+klReVSPkSsKYqohkL2PNKnpReFtuOWgNgGRHbe22z3yeOdwMpKygoL GPZfwsCjsMFNlsGoR/mSugeIfaC7RyqfmuXBxjJ3oP0lr4+KvWv3T/LM/fFJLoHh O3IF1Deq5Gc0EQuM/VHx1eaPJR4gklc8MWMD1wh3P7qSe7rzDUZXpzzvGZ47i5X7 tpO8/yCsUxQoukm2EMu4tGi3WWXEuUFxhQHWIDriuvR6OXUFtqphGmqgaTeIj1s3 XawroP9/F4aBhctig4PUDHWogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPBXOXO EtN6CYx1HdEVk5ZoNawjMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLQwEjfWr/RMNzWc/p9ub7xC6ybS5rSyENb4vttlDj6a1nCw+AcKA +uuvKfT/y3dVVhNLJ79soLAZAWOPcdnVH8I03Ft+B39uLz73rNNymey9YV69+z3c M92QlaWSiygGpzfUumMoZym9MPndkSbxPIPAUplaqbxs8+WxVO63HEHC61vXmViu UvCP08x5P4Ub8RwJvPW6m3u1RcjW1ddfz6Cw2x7hQdThEU6Gwmcc96K3Hz3dQY8g EdE5IFtAM1v8YmOJ04B3halanSBN3pHNg4p7QINd36LJM/v9e6LtQCxlCGOH9K6f 1kl8G2AOuHlofpuHyiWhREaOzesvqMEh -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org