$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: y+ujYGB4nIlqYmQf/qoVw3KHgzm8AmW1M1tbiS0I9CU= Subject key identifier: 9F:8C:F6:EC:92:03:2D:91:A5:A6:05:EB:BE:65:8D:BB:5D:12:49:CF Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: BF Signing time: Sat 23 Nov 2024 03:57:59 +0000 Manifest this update: Sat 23 Nov 2024 03:57:59 +0000 Manifest next update: Sat 30 Nov 2024 03:57:59 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: ujbd4zdW7+Xs6aII4xUoU8W2ijhiezhpcHqvLBUa0r4=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: 1A/0rGLyMTQmgnyQaZkWrIknuMBOl+EJ36Nl+mEe2Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: Nov 23 03:57:59 2024 GMT Not After : Nov 30 03:57:59 2024 GMT Subject: CN=674152c7-ee58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:24:7f:af:ec:f3:cf:22:6b:5c:13:40:76: d2:7e:9e:22:2c:c5:f2:6c:55:ea:0a:22:92:55:30: fe:50:00:f6:2c:b9:34:10:2d:38:9c:a5:f9:86:8f: 5d:c4:1d:86:1a:10:7d:bc:60:7e:6e:be:2d:73:3e: 2e:b4:a5:8f:67:4c:52:0e:3f:0a:c9:2b:ff:df:6b: 7d:a6:42:e9:26:bf:b8:12:80:99:12:5f:48:cc:49: bd:96:ef:bb:af:75:a4:a3:a9:41:5a:8c:4e:a1:2d: 98:f4:f6:9c:cd:ec:2c:1a:e7:1a:1b:70:6e:b2:ab: 9a:67:54:fa:0d:30:4f:e5:b6:d9:65:75:a7:a3:03: da:db:12:2c:6a:a9:7d:9e:43:8c:5f:e5:57:85:6d: 1e:e8:80:5d:bb:d8:2c:72:5c:38:63:4b:be:22:e2: 9a:a9:37:f2:06:75:84:d3:96:bf:1e:1a:ea:05:a9: 1b:c8:f2:85:48:af:02:6b:79:f7:20:ec:89:2e:57: 90:fd:9e:df:92:5f:1b:9c:8e:f7:e4:65:b7:19:85: 76:7a:e1:ac:10:ba:c8:9a:65:91:ab:e3:00:db:98: e9:41:28:9c:26:9c:b6:37:96:c5:aa:e9:71:dd:be: ff:6c:98:a9:b0:61:f1:58:c1:b7:4d:f6:9d:92:31: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:F6:EC:92:03:2D:91:A5:A6:05:EB:BE:65:8D:BB:5D:12:49:CF X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:af:3a:12:6f:0b:31:7a:57:71:6e:92:9f:07:d6:60:c3:de: ac:67:6d:d8:73:c3:cd:e8:12:e2:e9:82:ae:96:eb:72:3a:78: a4:54:10:32:c7:55:36:7c:86:93:1c:89:ac:3d:73:dc:16:08: c8:bc:8b:a9:87:2e:d1:48:dd:ac:82:79:5d:82:ea:e0:c9:9d: 97:f8:95:cf:a2:bb:09:08:01:a7:a8:8b:c6:3d:26:19:df:01: 0a:d6:6b:54:a0:f0:80:18:1e:31:7d:71:d4:dd:da:8c:24:5f: 3e:cd:e8:0f:d0:ec:13:cd:d3:c5:11:b6:dd:89:60:89:95:44: bd:fb:b2:9f:8b:6d:0a:1b:08:39:cd:61:fd:30:7b:9a:a3:85: 0a:c5:be:7b:64:7d:92:b0:e3:61:3c:8b:05:14:64:0f:b9:c3: d9:f5:3a:66:f5:ab:50:b7:2b:59:c7:35:0c:fa:23:e9:c8:2b: 24:79:54:53:9c:23:4e:b1:2d:d6:9b:4c:cb:e0:1d:ef:bc:7a: 0b:3f:65:d0:8e:6d:27:5b:8b:d2:ec:5d:42:80:4f:90:4c:fa: 3a:98:43:b6:f2:f3:a0:be:d2:c2:20:80:de:02:28:01:85:89: 34:45:dc:f0:7e:0c:61:30:8a:d3:1c:9c:21:fb:36:4a:ca:f5: 95:80:d7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjQxMTIzMDM1NzU5WhcNMjQxMTMwMDM1NzU5WjAYMRYwFAYD VQQDEw02NzQxNTJjNy1lZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ8kf6/s888ia1wTQHbSfp4iLMXybFXqCiKSVTD+UAD2LLk0EC04nKX5ho9d xB2GGhB9vGB+br4tcz4utKWPZ0xSDj8KySv/32t9pkLpJr+4EoCZEl9IzEm9lu+7 r3Wko6lBWoxOoS2Y9PaczewsGucaG3BusquaZ1T6DTBP5bbZZXWnowPa2xIsaql9 nkOMX+VXhW0e6IBdu9gsclw4Y0u+IuKaqTfyBnWE05a/HhrqBakbyPKFSK8Ca3n3 IOyJLleQ/Z7fkl8bnI735GW3GYV2euGsELrImmWRq+MA25jpQSicJpy2N5bFqulx 3b7/bJipsGHxWMG3TfadkjECOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+M9uyS Ay2RpaYF675ljbtdEknPMB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh enctdXByT2JrQks5SWowNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASrzoSbwsxeldxbpKfB9Zgw96sZ23Yc8PN6BLi6YKulutyOnikVBAy x1U2fIaTHImsPXPcFgjIvIuphy7RSN2sgnldgurgyZ2X+JXPorsJCAGnqIvGPSYZ 3wEK1mtUoPCAGB4xfXHU3dqMJF8+zegP0OwTzdPFEbbdiWCJlUS9+7Kfi20KGwg5 zWH9MHuao4UKxb57ZH2SsONhPIsFFGQPucPZ9Tpm9atQtytZxzUM+iPpyCskeVRT nCNOsS3Wm0zL4B3vvHoLP2XQjm0nW4vS7F1CgE+QTPo6mEO28vOgvtLCIIDeAigB hYk0RdzwfgxhMIrTHJwh+zZKyvWVgNei -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org