$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: Od9/jq9mJQw0ax/5O9deZAHT8h3ZMnvwP57itW6JhdY= Subject key identifier: 67:8C:49:AE:D2:44:7B:94:80:47:37:CE:B9:B9:58:2A:28:FC:59:09 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 72 Signing time: Sat 23 Nov 2024 04:52:36 +0000 Manifest this update: Sat 23 Nov 2024 04:52:36 +0000 Manifest next update: Sat 30 Nov 2024 04:52:36 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: f+jOoSAHKtCdSDA89+dNzRPuEYoG+LR/OD3PYP/smqI=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 8H22KmugR0VQLPnUNTLwn0bSZG3gtKvbOm8UkicLC8M=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: KtJ0mBbtm+AZYctGJUqm7HYO0ZwhBLSUJpXizw8DzPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Nov 23 04:52:36 2024 GMT Not After : Nov 30 04:52:36 2024 GMT Subject: CN=67415f94-fac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:da:03:59:0b:a9:0c:cb:fa:41:cc:99:19:dd: 30:8b:c1:44:dc:92:98:75:78:2f:ef:9a:fd:6d:44: 91:91:97:61:ac:d9:93:cf:a5:14:20:d6:2c:36:32: 8a:db:0a:d8:48:63:0d:76:ae:15:cc:67:f4:f0:35: 83:f9:ec:e3:3a:3e:3b:36:fe:46:48:66:6e:25:45: 29:89:b1:3d:01:c4:2f:bd:12:cd:b2:ae:f7:7e:0a: 59:b7:11:24:b5:fb:39:a9:94:77:e0:fb:f6:bf:ca: f7:86:11:36:79:65:12:72:1d:f5:a6:9d:1c:69:a7: b3:26:25:6b:9e:da:5d:0f:89:05:c5:62:7e:f7:c4: 72:e5:0b:5b:ed:39:60:ce:97:29:0c:88:ea:ca:6b: 2a:32:89:71:4d:e0:1f:2b:de:3e:b0:a3:83:36:fd: b6:a6:28:d1:20:96:b3:2a:ca:3a:b5:f7:15:d7:2c: f7:c7:0e:bc:57:58:05:a9:09:3c:6b:cb:d0:73:aa: 57:85:6e:e7:97:3b:6f:10:44:91:3c:73:b1:7f:97: 56:7f:da:86:53:f3:b8:9d:9c:99:be:12:17:e8:4b: fa:34:3b:e5:88:0c:c3:e0:8a:87:da:e4:29:80:47: 24:34:7d:d5:5c:d9:39:0a:84:d5:99:ee:e1:be:63: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:49:AE:D2:44:7B:94:80:47:37:CE:B9:B9:58:2A:28:FC:59:09 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:27:64:73:35:77:79:17:69:35:fb:d5:7e:f6:49:5e:fb:24: 85:0e:16:33:5a:e3:be:10:d4:ee:14:48:1a:bd:38:2a:56:96: 59:00:63:3c:34:f0:c2:a9:6b:42:4a:70:7a:f3:0c:21:7f:e8: 3a:53:63:a9:d1:71:0c:f5:fa:66:a2:63:59:be:e8:e5:8b:3d: 82:ca:88:76:39:7c:18:ed:99:f4:b5:00:2e:6b:8e:e4:96:47: 8c:4b:e1:20:7e:ea:40:ac:1d:e9:75:c6:7a:cd:de:f7:d9:8b: 9e:3a:40:f0:32:84:13:4a:6d:60:34:f5:82:22:bc:b2:4d:d7: 06:3e:b7:a5:81:f2:0b:b4:6d:74:82:e7:eb:7f:a6:23:60:00: ab:39:cc:c1:05:e6:c4:7d:34:80:3a:e8:57:5c:98:ae:cf:48: 9b:0c:ed:03:e4:6b:23:a9:93:28:0b:00:3b:5b:86:ca:90:76: c7:68:87:bb:8b:73:d8:c9:3c:b8:6d:89:a9:8c:07:dd:ae:40: fa:f2:e0:73:2d:32:e3:94:62:ce:22:5a:e5:25:86:7d:e1:de: 6a:47:f2:f9:39:a3:59:a2:9e:99:4f:71:5a:ab:5a:34:83:77: cc:9a:65:e2:9e:ea:fc:e9:4d:53:b1:35:17:2c:8c:af:99:83: d0:91:53:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDQTExMC8GA1UEBRMoMUM3QjMwNTc2RUIxODUwOEVGMjc3OUM0RUY1QkI1NzI0 OTJERDI5OTAeFw0yNDExMjMwNDUyMzZaFw0yNDExMzAwNDUyMzZaMBgxFjAUBgNV BAMTDTY3NDE1Zjk0LWZhYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ2gNZC6kMy/pBzJkZ3TCLwUTckph1eC/vmv1tRJGRl2Gs2ZPPpRQg1iw2Morb CthIYw12rhXMZ/TwNYP57OM6Pjs2/kZIZm4lRSmJsT0BxC+9Es2yrvd+Clm3ESS1 +zmplHfg+/a/yveGETZ5ZRJyHfWmnRxpp7MmJWue2l0PiQXFYn73xHLlC1vtOWDO lykMiOrKayoyiXFN4B8r3j6wo4M2/bamKNEglrMqyjq19xXXLPfHDrxXWAWpCTxr y9BzqleFbueXO28QRJE8c7F/l1Z/2oZT87idnJm+EhfoS/o0O+WIDMPgiofa5CmA RyQ0fdVc2TkKhNWZ7uG+Y2obAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ4xJrtJE e5SARzfOublYKij8WQkwHwYDVR0jBBgwFoAUHHswV26xhQjvJ3nE71u1ckkt0pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUNBL0E2OTE1QjM0MDI0 RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSEhzd1YyNnhoUWp2SjNuRTcxdTFja2t0MHBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NUNBL0E2OTE1QjM0MDI0RjExRUZBQzY1RjU3N0M0RjlBRTAyL0hIc3dWMjZ4aFFq dkozbkU3MXUxY2trdDBway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALgnZHM1d3kXaTX71X72SV77JIUOFjNa474Q1O4USBq9OCpWllkAYzw0 8MKpa0JKcHrzDCF/6DpTY6nRcQz1+maiY1m+6OWLPYLKiHY5fBjtmfS1AC5rjuSW R4xL4SB+6kCsHel1xnrN3vfZi546QPAyhBNKbWA09YIivLJN1wY+t6WB8gu0bXSC 5+t/piNgAKs5zMEF5sR9NIA66FdcmK7PSJsM7QPkayOpkygLADtbhsqQdsdoh7uL c9jJPLhtiamMB92uQPry4HMtMuOUYs4iWuUlhn3h3mpH8vk5o1minplPcVqrWjSD d8yaZeKe6vzpTVOxNRcsjK+Zg9CRUxY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org