$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: jG1ZLKPFWAi7G2EfBp21dlQlLeT/0gAomoleB4xNuvI= Subject key identifier: 64:0C:24:22:12:B8:2C:9A:1B:90:12:C8:AB:9B:53:13:D5:66:21:81 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: CE Signing time: Fri 29 Nov 2024 04:09:52 +0000 Manifest this update: Fri 29 Nov 2024 04:09:51 +0000 Manifest next update: Fri 06 Dec 2024 04:09:51 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: qFoKZW0fszO3PwKNQa0pmd+J57nV8vy2WCF4PcOIx6M=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: gKEVMeuMh2VtfCYM2y2Ep3YpcRkgZOybAUB3uXtQS50=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: G1lTUu7s0Hz0OetsmalfJRrMuspiHo7DXFGeTObrtUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Dec 2024 04:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Nov 29 04:09:51 2024 GMT Not After : Dec 6 04:09:51 2024 GMT Subject: CN=67493e90-feb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:73:6a:cf:7f:89:34:14:1d:2d:25:fb:ef: 7a:3b:02:36:13:29:c5:e0:6f:e8:82:17:aa:40:e2: ad:a8:7c:bb:9f:b8:e2:69:70:13:4a:9e:e3:29:16: d1:26:74:02:6c:26:84:34:ef:ac:ea:a6:fa:f2:c0: 50:5e:b4:d0:ed:07:12:63:bd:67:48:c7:e0:86:d0: 1a:2d:7b:06:6f:05:28:97:75:9f:35:42:03:8d:7a: 88:3a:a2:b5:16:55:9d:52:fc:68:2b:0f:84:c7:38: c9:61:3a:0e:19:d9:16:bd:ab:8a:27:c2:41:f4:cb: 54:bd:22:b3:c7:07:2a:0e:1a:a0:40:0f:61:be:c1: f5:8e:17:13:17:85:ed:7b:d7:20:80:73:3f:5e:04: a7:78:b7:f3:db:25:f8:0a:1d:18:a3:c1:27:b5:eb: 7a:eb:1d:b4:67:8f:ea:14:c9:12:10:90:5a:69:ed: a1:47:99:af:04:f3:d8:65:77:73:46:86:56:15:8f: 15:50:60:77:df:e9:02:57:fc:2d:80:7b:af:6d:ff: ae:ae:04:ff:67:9e:b8:2b:5b:a0:4c:c6:01:3c:ad: 34:c8:4c:ab:f6:7a:79:79:18:c2:74:c5:8d:e7:47: ee:03:0d:fc:af:c5:86:72:04:29:2b:c4:2e:14:bf: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:24:22:12:B8:2C:9A:1B:90:12:C8:AB:9B:53:13:D5:66:21:81 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f4:61:d5:b3:e9:2d:57:c7:4e:e6:4e:ee:4d:76:09:c9:55: 81:23:92:15:87:07:45:98:83:52:c0:cb:14:20:36:bc:2b:b6: c3:df:7b:86:4b:f1:ca:2f:52:14:0e:17:28:c5:12:4d:3d:4e: 57:12:11:ba:40:91:84:4b:84:84:e6:ef:58:6f:b4:17:0e:6b: 0f:1e:f2:dd:8b:23:3c:4d:6a:c1:70:46:a8:e2:a3:ef:bc:53: 1a:48:d5:67:bf:9c:e4:71:23:04:76:46:5b:12:bd:f2:0c:b5: 5d:45:c3:26:9c:2a:be:39:d1:55:df:49:92:9e:2e:72:ae:c7: 6c:d4:64:20:7f:a5:ba:17:10:1c:f8:cb:7d:3f:52:60:ef:4f: 3c:6b:74:83:c8:a7:62:c5:c7:32:d7:27:d6:24:a9:92:00:ee: 91:19:f0:1a:5f:7f:e4:3f:8e:f8:83:5e:b4:a1:29:23:4e:87: fa:de:ab:d6:8f:a0:da:78:f7:c2:86:97:1a:ef:c5:cf:da:62: 27:69:df:8e:36:af:50:2d:1a:ef:36:a1:13:38:76:00:db:ff: 6d:6c:6d:21:e1:02:d9:3e:06:0c:94:f5:87:54:49:1b:8d:46: d0:14:3e:cb:4c:fc:e1:ed:2a:9d:ad:f9:28:5a:3c:fb:98:3d: c8:0c:8d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjQxMTI5MDQwOTUxWhcNMjQxMjA2MDQwOTUxWjAYMRYwFAYD VQQDEw02NzQ5M2U5MC1mZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybRzas9/iTQUHS0l++96OwI2EynF4G/ogheqQOKtqHy7n7jiaXATSp7jKRbR JnQCbCaENO+s6qb68sBQXrTQ7QcSY71nSMfghtAaLXsGbwUol3WfNUIDjXqIOqK1 FlWdUvxoKw+ExzjJYToOGdkWvauKJ8JB9MtUvSKzxwcqDhqgQA9hvsH1jhcTF4Xt e9cggHM/XgSneLfz2yX4Ch0Yo8Entet66x20Z4/qFMkSEJBaae2hR5mvBPPYZXdz RoZWFY8VUGB33+kCV/wtgHuvbf+urgT/Z564K1ugTMYBPK00yEyr9np5eRjCdMWN 50fuAw38r8WGcgQpK8QuFL+dxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQMJCIS uCyaG5ASyKubUxPVZiGBMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ9GHVs+ktV8dO5k7uTXYJyVWBI5IVhwdFmINSwMsUIDa8K7bD33uG S/HKL1IUDhcoxRJNPU5XEhG6QJGES4SE5u9Yb7QXDmsPHvLdiyM8TWrBcEao4qPv vFMaSNVnv5zkcSMEdkZbEr3yDLVdRcMmnCq+OdFV30mSni5yrsds1GQgf6W6FxAc +Mt9P1Jg7088a3SDyKdixccy1yfWJKmSAO6RGfAaX3/kP474g160oSkjTof63qvW j6DaePfChpca78XP2mInad+ONq9QLRrvNqETOHYA2/9tbG0h4QLZPgYMlPWHVEkb jUbQFD7LTPzh7SqdrfkoWjz7mD3IDI0t -----END CERTIFICATE-----Generated at Fri Nov 29 05:58:34 2024 by rpki-client on console-fra.rpki-client.org