$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: Od3wIG5Q4Z4VdM7ZaRuTqqrB6xdEVEtw/Kp9TmXCcFw= Subject key identifier: 75:5B:CB:78:10:F6:F2:20:B4:B9:4A:DD:F2:F7:67:7F:B3:7C:12:26 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 016F Signing time: Sat 23 Nov 2024 02:13:49 +0000 Manifest this update: Sat 23 Nov 2024 02:13:48 +0000 Manifest next update: Sat 30 Nov 2024 02:13:48 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: Oroz17chnFgcWgZUD3t4yhnll9QR0iFvw/iQXnRvUhY=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: 1F0H2dbwEQAZ11mjRklbJAe3otm+tJQyGGpBTqSZ0C0=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: yUnpz9eBONeeUf/ARcjSeazIrSPZziYwbK0ejyuueSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Nov 23 02:13:48 2024 GMT Not After : Nov 30 02:13:48 2024 GMT Subject: CN=67413a5d-71eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:e9:02:a7:45:3e:ce:c9:e2:21:b7:d8:65: 4a:fd:6d:4b:ab:32:47:f4:27:e7:bf:42:02:f1:3a: c0:89:cb:c0:d4:01:d8:f7:15:3f:80:92:3e:0a:8e: ae:d8:da:2d:30:f0:de:cf:24:ff:8e:07:2e:f4:46: b2:d4:e4:55:f4:34:de:d5:06:8a:5f:22:4e:35:56: ab:30:96:71:d2:d3:d6:3f:43:ab:a0:fd:a6:fb:1b: c7:bf:b1:60:1e:9d:ea:72:2c:dd:f0:b2:53:5f:eb: dd:48:5a:04:77:20:48:10:1c:43:e4:3d:38:c4:dd: a4:32:4d:ff:f1:a7:02:2c:89:62:f9:72:b4:2f:48: 30:ab:fc:1a:5c:67:3e:47:cc:8d:b6:8d:9c:45:6e: 50:6e:5f:6e:4c:a3:c0:03:a3:ac:64:ef:50:bd:69: 39:87:5a:09:3e:3a:58:86:e8:79:eb:4f:14:e7:b7: a1:18:de:0c:1f:fe:e0:ef:57:be:95:38:b5:e3:09: 22:94:24:ef:80:2d:d0:2d:df:5f:85:e9:73:58:8f: 64:b7:2b:d8:ca:fd:c3:fa:1b:cc:57:34:9c:86:0e: 40:f8:d9:08:11:af:4f:5f:15:9c:ee:59:cf:be:8c: fc:92:30:a4:f7:e9:af:2d:a9:ae:4b:70:f8:c0:41: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:CB:78:10:F6:F2:20:B4:B9:4A:DD:F2:F7:67:7F:B3:7C:12:26 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:9b:20:98:5f:ca:36:d9:f6:d4:a3:15:1e:e8:ad:b1:4b: 9a:eb:a0:38:53:13:63:4b:30:e4:59:ba:7a:ba:8d:52:e4:49: 61:bc:3d:92:2c:61:d5:ec:f2:94:60:10:c5:a1:ef:48:84:f2: fe:ca:52:26:17:17:0f:45:c5:5e:67:24:2f:ca:6e:a5:50:91: de:b9:c3:24:7d:a3:12:9e:eb:ad:14:23:e3:57:2f:a5:7d:44: 4c:b9:c1:b3:84:fc:30:a4:77:8c:45:d9:b6:65:0f:ca:1f:c4: 3d:62:c7:46:b0:90:27:41:a3:8a:2f:a7:c3:82:82:cf:6b:19: 25:ab:d2:5a:d8:19:6d:82:c2:62:78:a3:0c:35:87:0d:d6:14: 5d:1f:64:39:b1:38:17:0b:a7:c0:e3:60:21:3f:a7:c1:c0:59: 22:36:bd:c9:cc:dc:af:a9:0c:da:8d:4e:e3:1b:bf:7f:70:a6: af:9d:9f:ee:6e:b0:b1:92:e2:38:12:2e:a6:0a:b7:a0:1f:36: 19:70:8b:44:2d:fd:c5:cb:a5:c4:03:a3:51:5e:50:33:86:60: 7f:94:4d:e4:03:fa:68:b1:4d:cb:03:7d:c7:9a:7b:57:dc:1d: 70:ea:49:27:e1:fc:7d:a6:e2:ea:98:70:9b:14:74:0f:a7:95: 6a:d7:7a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjQxMTIzMDIxMzQ4WhcNMjQxMTMwMDIxMzQ4WjAYMRYwFAYD VQQDEw02NzQxM2E1ZC03MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXPpAqdFPs7J4iG32GVK/W1LqzJH9Cfnv0IC8TrAicvA1AHY9xU/gJI+Co6u 2NotMPDezyT/jgcu9Eay1ORV9DTe1QaKXyJONVarMJZx0tPWP0OroP2m+xvHv7Fg Hp3qcizd8LJTX+vdSFoEdyBIEBxD5D04xN2kMk3/8acCLIli+XK0L0gwq/waXGc+ R8yNto2cRW5Qbl9uTKPAA6OsZO9QvWk5h1oJPjpYhuh5608U57ehGN4MH/7g71e+ lTi14wkilCTvgC3QLd9fhelzWI9ktyvYyv3D+hvMVzSchg5A+NkIEa9PXxWc7lnP voz8kjCk9+mvLamuS3D4wEFkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVby3gQ 9vIgtLlK3fL3Z3+zfBImMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB29JsgmF/KNtn21KMVHuitsUua66A4UxNjSzDkWbp6uo1S5ElhvD2S LGHV7PKUYBDFoe9IhPL+ylImFxcPRcVeZyQvym6lUJHeucMkfaMSnuutFCPjVy+l fURMucGzhPwwpHeMRdm2ZQ/KH8Q9YsdGsJAnQaOKL6fDgoLPaxklq9Ja2BltgsJi eKMMNYcN1hRdH2Q5sTgXC6fA42AhP6fBwFkiNr3JzNyvqQzajU7jG79/cKavnZ/u brCxkuI4Ei6mCregHzYZcItELf3Fy6XEA6NRXlAzhmB/lE3kA/posU3LA33HmntX 3B1w6kkn4fx9puLqmHCbFHQPp5Vq13pq -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org