$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: 5+86iowZn85XHghI5Ee1uGD1o5aZ31RcZtCi/GQG48w= Subject key identifier: C1:1D:CA:00:76:8B:75:19:05:23:C2:35:3F:63:83:B9:6A:68:C0:36 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: AA Signing time: Sat 23 Nov 2024 04:22:08 +0000 Manifest this update: Sat 23 Nov 2024 04:22:07 +0000 Manifest next update: Sat 30 Nov 2024 04:22:07 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: 6/PBvRYWAcmt/2zWForqtmpt9VMWT1UIvn4sR8xJEnI=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: Xkd+Op7ObANSl7hSEgXBDp6fu8FLqlrIdcxaq4iFP2k=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Nov 23 04:22:07 2024 GMT Not After : Nov 30 04:22:07 2024 GMT Subject: CN=6741586f-00d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:7b:e1:a7:4a:b1:b0:97:d3:a4:6f:3a:bd: 95:31:f2:ad:99:35:76:9e:6b:30:dd:4e:10:ef:76: 79:62:be:ed:b6:57:00:67:72:1e:f1:af:96:b6:da: 25:20:c2:e5:2a:76:9d:34:2a:e4:71:33:f0:9a:33: 20:0b:12:5c:5f:f9:81:fa:16:43:e3:7d:af:29:76: 42:b4:aa:0b:21:28:7b:da:e6:bd:d2:e7:91:4a:40: e3:9a:7b:ce:5c:24:a5:71:f5:e8:0c:96:4f:43:9b: 4c:76:ed:43:8d:96:90:12:3d:25:48:16:f7:e6:bd: ae:46:e2:bb:08:46:0e:46:2f:30:8b:81:f9:d4:98: 87:30:98:f8:71:c5:3d:12:ef:5b:49:4e:f5:32:57: ed:38:b0:4b:46:7e:ab:c0:23:78:c5:df:74:ba:82: 69:30:19:a6:11:71:3a:d3:58:4b:0a:e4:b9:d7:b9: 04:54:37:a0:3b:fd:c8:35:80:0f:3c:c2:79:00:83: 3a:01:62:81:71:08:2e:8a:7c:4a:0d:8e:7a:6b:37: 7d:60:91:ad:98:07:8f:6a:b3:19:be:c1:7f:9e:c4: af:f1:2b:e8:53:d3:6c:bd:a9:48:34:76:2e:57:7e: 36:36:c7:d5:78:35:a7:54:59:4b:ec:4c:96:c5:10: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:CA:00:76:8B:75:19:05:23:C2:35:3F:63:83:B9:6A:68:C0:36 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8f:3e:63:03:46:21:2f:1c:90:80:27:07:2e:d7:dc:13:79: ba:ec:64:81:64:0f:d7:1e:3b:e2:20:d8:9a:fd:1c:86:de:ab: a7:99:96:04:bd:4e:71:c8:88:d8:ba:1e:58:5c:29:4a:e4:22: c4:88:c2:d1:a0:81:f0:ea:e1:c4:43:ed:21:eb:27:e5:e6:93: 96:b8:42:a9:06:a5:e0:45:e4:e2:f5:29:56:7f:49:18:95:ea: b3:de:94:31:48:82:19:de:71:93:ea:0a:d5:d3:c4:ba:2a:d1: e3:96:87:3f:31:68:e5:4e:67:c5:d7:9b:df:0e:aa:44:fb:c5: d3:e9:83:db:6f:90:02:af:dd:58:76:d1:13:5a:f2:dc:0f:ff: 81:61:a4:a0:22:db:42:8e:b6:10:7d:5d:8f:b4:b4:a9:a8:02: dc:a8:e9:d2:ce:2e:35:42:0a:63:1a:68:a0:00:57:b8:8f:6e: 28:46:d1:01:a8:61:bd:2c:c9:e1:08:1b:d1:82:80:ab:cc:ed: 2c:c8:91:51:b0:af:06:53:c5:fc:c6:75:f2:70:36:70:11:a2: 17:43:a6:ae:59:4e:e6:e8:90:bf:da:77:3a:a7:00:c7:25:5f: 35:89:bf:d4:72:e3:62:e7:e9:c5:46:49:c4:07:30:74:e3:c2: 14:2a:d9:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjQxMTIzMDQyMjA3WhcNMjQxMTMwMDQyMjA3WjAYMRYwFAYD VQQDEw02NzQxNTg2Zi0wMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTt74adKsbCX06RvOr2VMfKtmTV2nmsw3U4Q73Z5Yr7ttlcAZ3Ie8a+Wttol IMLlKnadNCrkcTPwmjMgCxJcX/mB+hZD432vKXZCtKoLISh72ua90ueRSkDjmnvO XCSlcfXoDJZPQ5tMdu1DjZaQEj0lSBb35r2uRuK7CEYORi8wi4H51JiHMJj4ccU9 Eu9bSU71MlftOLBLRn6rwCN4xd90uoJpMBmmEXE601hLCuS517kEVDegO/3INYAP PMJ5AIM6AWKBcQguinxKDY56azd9YJGtmAeParMZvsF/nsSv8SvoU9NsvalINHYu V342NsfVeDWnVFlL7EyWxRDZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEdygB2 i3UZBSPCNT9jg7lqaMA2MB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByjz5jA0YhLxyQgCcHLtfcE3m67GSBZA/XHjviINia/RyG3qunmZYE vU5xyIjYuh5YXClK5CLEiMLRoIHw6uHEQ+0h6yfl5pOWuEKpBqXgReTi9SlWf0kY leqz3pQxSIIZ3nGT6grV08S6KtHjloc/MWjlTmfF15vfDqpE+8XT6YPbb5ACr91Y dtETWvLcD/+BYaSgIttCjrYQfV2PtLSpqALcqOnSzi41QgpjGmigAFe4j24oRtEB qGG9LMnhCBvRgoCrzO0syJFRsK8GU8X8xnXycDZwEaIXQ6auWU7m6JC/2nc6pwDH JV81ib/UcuNi5+nFRknEBzB048IUKtny -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org