$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: UwHRaX9uXu5+sM4iokPjJw/Gbp/P2EcuUP7/gBrV28E= Subject key identifier: D5:E3:A2:55:59:7E:E9:EE:5E:B0:01:6D:3B:88:38:1B:F5:1E:A7:0A Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 039A Signing time: Sat 23 Nov 2024 00:19:49 +0000 Manifest this update: Sat 23 Nov 2024 00:19:48 +0000 Manifest next update: Sat 30 Nov 2024 00:19:48 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: qqawbB40vfp6P1UPxUTMiyCFGBCivn7AWhL8KLRZT8w=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Nov 23 00:19:48 2024 GMT Not After : Nov 30 00:19:48 2024 GMT Subject: CN=67411fa5-f869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:57:66:fa:8d:57:6f:21:d6:12:ed:cf:81: fb:69:cd:a2:1f:ce:a4:17:98:9b:c2:c7:b4:8c:05: a6:af:bb:86:69:f9:53:7f:71:81:ac:23:17:96:a1: d0:16:74:4a:07:8a:7e:09:35:c0:2a:e8:dc:6a:31: a3:cb:90:f0:40:11:87:9e:54:14:bb:5c:5e:08:27: fe:5a:ab:95:db:0c:2d:63:ec:f6:f4:e9:0c:ee:b4: 3b:c1:a8:73:f9:ec:2a:00:25:68:d7:dc:1d:f8:79: 10:d4:12:99:2c:6e:f4:a3:4b:b9:39:7d:b1:0f:c1: 64:22:05:ac:8f:12:70:8b:b4:6a:09:e4:03:2e:15: 67:b8:fe:99:98:cb:38:d4:3f:88:b8:4b:51:0b:45: 8f:b7:2e:a2:50:bc:1d:0e:df:48:a9:8d:75:60:3c: c0:73:4e:d9:33:68:44:80:08:6b:e3:63:61:83:fe: ab:91:0e:13:dd:fa:21:ec:69:68:76:69:cb:22:24: 63:31:f9:34:f0:51:cf:ca:c6:16:71:9e:a3:a3:fc: 04:ed:a7:12:f6:0c:6a:f1:a9:f5:86:45:61:19:51: 13:00:b2:02:01:06:15:95:0e:2e:0e:f5:65:1a:49: 3c:ac:ed:e1:7a:d8:e4:e2:58:7c:fc:0e:06:24:3e: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E3:A2:55:59:7E:E9:EE:5E:B0:01:6D:3B:88:38:1B:F5:1E:A7:0A X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d7:8e:18:41:1c:07:85:b6:2a:28:a9:f9:4d:d4:1f:41:10: 18:83:c9:e2:8d:0e:2b:e0:20:db:ea:0d:0b:5b:24:5c:09:61: f0:75:5c:40:1e:09:c1:b1:a8:e1:c7:cc:e5:fe:50:30:e8:09: 54:9d:70:ca:30:5d:70:cd:c6:31:c9:84:04:61:3f:d4:6c:16: f4:69:e8:84:0e:ae:c6:fb:ce:0b:f8:2f:4f:fd:7e:9b:6d:1e: 61:42:92:21:50:81:dd:8d:77:c0:14:ab:f5:5a:3f:20:b2:f9: 9a:0a:57:ee:22:30:62:24:3e:d8:2f:97:94:4e:02:a9:d9:e6: 2d:b3:a5:93:77:46:4d:28:d4:32:c4:68:2d:f1:42:d5:b9:1e: 2f:5c:41:2f:a1:d9:9e:e2:60:4a:1b:b6:8e:42:04:81:52:ca: 22:ce:47:34:a5:10:c4:fa:53:f9:48:95:ff:d0:ec:02:9d:f1: 2f:b7:6e:33:0a:ac:67:0f:bd:bb:9a:c1:82:75:40:9c:b8:0a: 9e:26:e3:2b:85:8a:6c:ac:d0:05:e9:79:8b:bb:41:7e:62:0e: 08:a1:f3:76:43:f0:e6:9b:a4:db:a7:78:76:99:1a:f2:cb:7f: af:7d:b2:a9:72:a7:4b:ad:d3:3f:45:32:b1:36:70:83:b4:f1: d8:19:82:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjQxMTIzMDAxOTQ4WhcNMjQxMTMwMDAxOTQ4WjAYMRYwFAYD VQQDEw02NzQxMWZhNS1mODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycNXZvqNV28h1hLtz4H7ac2iH86kF5ibwse0jAWmr7uGaflTf3GBrCMXlqHQ FnRKB4p+CTXAKujcajGjy5DwQBGHnlQUu1xeCCf+WquV2wwtY+z29OkM7rQ7wahz +ewqACVo19wd+HkQ1BKZLG70o0u5OX2xD8FkIgWsjxJwi7RqCeQDLhVnuP6ZmMs4 1D+IuEtRC0WPty6iULwdDt9IqY11YDzAc07ZM2hEgAhr42Nhg/6rkQ4T3foh7Glo dmnLIiRjMfk08FHPysYWcZ6jo/wE7acS9gxq8an1hkVhGVETALICAQYVlQ4uDvVl Gkk8rO3hetjk4lh8/A4GJD53VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXjolVZ funuXrABbTuIOBv1HqcKMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc144YQRwHhbYqKKn5TdQfQRAYg8nijQ4r4CDb6g0LWyRcCWHwdVxA HgnBsajhx8zl/lAw6AlUnXDKMF1wzcYxyYQEYT/UbBb0aeiEDq7G+84L+C9P/X6b bR5hQpIhUIHdjXfAFKv1Wj8gsvmaClfuIjBiJD7YL5eUTgKp2eYts6WTd0ZNKNQy xGgt8ULVuR4vXEEvodme4mBKG7aOQgSBUsoizkc0pRDE+lP5SJX/0OwCnfEvt24z CqxnD727msGCdUCcuAqeJuMrhYpsrNAF6XmLu0F+Yg4IofN2Q/Dmm6Tbp3h2mRry y3+vfbKpcqdLrdM/RTKxNnCDtPHYGYJz -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org