$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: ZUxwgdsDGtuKHdk36Na4rbadrCf1eQOFahdGVqH+z1I= Subject key identifier: 64:BC:0F:A0:D0:FE:F4:88:FD:E5:B1:9C:74:44:62:65:FB:29:BF:68 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0F7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0F76 Signing time: Fri 22 Nov 2024 17:31:35 +0000 Manifest this update: Fri 22 Nov 2024 17:31:35 +0000 Manifest next update: Fri 29 Nov 2024 17:31:35 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: 9DVDiFzBIpi+foCiIdB6mriYSlzpKSIBmcACRAqggQw=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: /iSIvvhUoXFHLziQJqcGFPcc3ui1ySSnlRKhsUVXnlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3966 (0xf7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Nov 22 17:31:35 2024 GMT Not After : Nov 29 17:31:35 2024 GMT Subject: CN=6740bff7-ef84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:5b:79:52:32:9a:a3:47:b6:a6:e9:a7:87: 54:c1:a3:88:08:28:ba:68:aa:27:16:71:f3:1e:62: 44:90:8f:95:03:75:a5:57:be:73:1f:3d:7d:d9:6d: 00:3d:0d:b4:42:cb:2a:5f:4d:02:7e:c7:d6:c0:90: d7:c8:8e:52:70:49:bf:fe:ee:2f:fb:82:33:05:6d: 77:a5:28:6a:28:61:7f:68:f0:6e:0c:40:1b:35:5e: ab:3a:8a:8d:a7:65:59:03:46:59:a7:24:ed:8f:ba: 16:e3:69:35:d4:5a:6c:fa:38:39:cb:94:6a:0a:73: 3f:a4:7a:1a:35:9f:99:81:35:ae:25:8c:63:64:aa: 06:66:5b:0f:52:1f:9d:68:5b:5b:b4:ae:38:38:9d: 70:31:78:3f:cc:f8:ff:5c:4a:f7:26:81:81:99:27: 9b:a9:f4:d5:26:f1:6e:fc:20:be:06:60:41:b1:f6: 27:73:bb:5f:e8:44:e3:9a:66:ac:d7:02:ff:16:96: bc:aa:93:e3:40:3f:ae:4f:5d:89:7b:3f:94:24:f5: dc:b9:97:cd:7f:fd:da:94:b2:f6:b2:18:4e:fd:93: 7e:ae:88:ab:88:56:ae:be:41:28:9b:79:4c:10:04: 34:b8:d9:92:a1:60:dd:60:d1:c1:a7:f5:8c:db:b7: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BC:0F:A0:D0:FE:F4:88:FD:E5:B1:9C:74:44:62:65:FB:29:BF:68 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b6:29:4a:80:27:12:82:75:30:b9:03:a7:39:c5:6a:20:65: 44:eb:d2:1e:c1:ec:84:a1:85:2c:44:9c:9c:27:e5:8d:e3:61: 66:fb:be:40:f2:9f:1e:6a:65:0a:ff:bf:f9:28:58:3d:b0:d6: b4:be:38:24:fe:4d:c2:5d:fb:5f:3e:02:97:00:8f:7a:79:67: f8:03:88:44:f5:fc:5f:5f:05:0e:f7:8e:05:4e:1f:40:6f:53: e6:aa:1b:a5:be:63:28:fb:a6:13:a2:e0:aa:7e:1e:a4:00:41: c9:6c:82:0d:fe:4d:fc:0a:1e:b4:26:ce:63:1c:b1:a7:c5:f4: 74:96:2d:2f:22:01:5c:3a:fe:0c:b0:e1:30:ca:59:00:0d:74: 4a:12:f9:a6:89:9e:4a:df:15:50:81:62:f9:4e:19:7f:17:36: dd:30:ef:0c:f3:e9:79:6e:aa:c3:6f:bb:e8:00:14:ad:59:3b: 89:80:a6:71:40:54:5d:e9:e4:66:95:fc:14:58:35:5a:71:02: e7:22:f2:56:32:45:d4:b5:49:c3:89:ba:56:0b:ea:77:0a:11: 56:37:95:85:6a:f2:33:77:62:06:2a:26:0b:9a:eb:13:95:fb: 71:29:e6:f6:a4:86:1c:32:fc:5e:d2:98:f6:4e:81:e2:9f:36: e5:4e:77:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjQxMTIyMTczMTM1WhcNMjQxMTI5MTczMTM1WjAYMRYwFAYD VQQDEw02NzQwYmZmNy1lZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7ZbeVIymqNHtqbpp4dUwaOICCi6aKonFnHzHmJEkI+VA3WlV75zHz192W0A PQ20QssqX00CfsfWwJDXyI5ScEm//u4v+4IzBW13pShqKGF/aPBuDEAbNV6rOoqN p2VZA0ZZpyTtj7oW42k11Fps+jg5y5RqCnM/pHoaNZ+ZgTWuJYxjZKoGZlsPUh+d aFtbtK44OJ1wMXg/zPj/XEr3JoGBmSebqfTVJvFu/CC+BmBBsfYnc7tf6ETjmmas 1wL/Fpa8qpPjQD+uT12Jez+UJPXcuZfNf/3alLL2shhO/ZN+roiriFauvkEom3lM EAQ0uNmSoWDdYNHBp/WM27d7sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS8D6DQ /vSI/eWxnHREYmX7Kb9oMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2tilKgCcSgnUwuQOnOcVqIGVE69IeweyEoYUsRJycJ+WN42Fm+75A 8p8eamUK/7/5KFg9sNa0vjgk/k3CXftfPgKXAI96eWf4A4hE9fxfXwUO944FTh9A b1PmqhulvmMo+6YTouCqfh6kAEHJbIIN/k38Ch60Js5jHLGnxfR0li0vIgFcOv4M sOEwylkADXRKEvmmiZ5K3xVQgWL5Thl/FzbdMO8M8+l5bqrDb7voABStWTuJgKZx QFRd6eRmlfwUWDVacQLnIvJWMkXUtUnDibpWC+p3ChFWN5WFavIzd2IGKiYLmusT lftxKeb2pIYcMvxe0pj2ToHinzblTneM -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org