$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: t3q7p9MiipR0xDfzdHOeTj792GDY7u/frNNGAEylI5A= Subject key identifier: 2C:0C:AB:28:55:71:C5:E4:D4:44:4E:0B:F3:30:02:74:AA:53:B6:63 Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 1035 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 100F Signing time: Sun 24 Nov 2024 17:18:16 +0000 Manifest this update: Sun 24 Nov 2024 17:18:16 +0000 Manifest next update: Sun 01 Dec 2024 17:18:16 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: lnNlQcfojafMH3p5hVSseRzcWkbvxRa655jBCWz06gA=) 2: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: ZM9lhKcpu/Yw8iwrVv778rvTOTFa6v4+IUkQwi1E1MY=) 3: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: suUdH6Ugfv0O0zo3EWdu2SzDw7vZm7qfcDa3w/SPffc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4149 (0x1035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Nov 24 17:18:16 2024 GMT Not After : Dec 1 17:18:16 2024 GMT Subject: CN=67435fd8-2766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:d3:e5:b0:4d:23:8b:77:8a:23:42:77:f1: e9:7e:28:14:12:f1:cc:cd:c4:97:6a:2e:55:63:c8: ec:21:8f:6d:21:e8:16:50:ee:a2:61:3d:9b:95:ae: 95:7d:e9:71:f2:0f:ce:5e:46:30:c5:53:70:ac:60: b2:4e:04:17:05:d9:9e:93:29:a6:d5:1c:35:3c:f7: bb:ef:f3:ba:9d:d3:97:eb:90:69:3b:cd:3b:ab:49: 35:7f:43:49:99:a6:89:2e:bc:35:07:87:27:f4:69: 7b:d4:23:dc:7c:fc:df:14:f8:63:20:88:63:37:4f: 9a:80:78:70:55:4c:a9:17:b0:12:f9:20:b1:ba:fe: 93:1d:1b:bd:67:0f:49:60:43:f5:f8:a3:b4:23:6d: 7c:81:e3:b9:4f:45:9b:93:63:fc:92:f2:c6:38:d2: a6:df:fc:42:79:0f:9a:ab:be:28:b0:6d:4b:30:34: 70:67:50:0d:14:70:42:69:8e:7e:7b:5d:a0:40:c9: 38:b0:41:51:5b:d8:f4:1c:1c:5b:2b:93:b9:ff:64: 54:2d:6b:2c:c4:f0:49:4c:3c:02:15:47:60:21:56: bf:ff:ab:a9:9a:f1:8f:28:31:49:ae:3c:07:10:9e: a1:d0:72:81:14:b5:df:16:c0:0b:ec:68:43:bc:8e: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:AB:28:55:71:C5:E4:D4:44:4E:0B:F3:30:02:74:AA:53:B6:63 X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:04:23:1c:95:09:59:a6:b6:89:65:f5:b4:c1:8c:c9:6a:91: 07:44:44:c2:03:91:f2:8a:21:cf:12:97:1d:50:35:dd:e7:0c: 0e:de:34:80:65:dc:f4:8d:b3:af:c1:58:4c:db:f1:ae:e9:a5: dc:d0:48:5c:b9:97:93:73:e2:01:56:de:45:8f:b4:f8:90:1d: e6:2b:ec:29:6f:ad:40:94:57:c4:71:ef:dc:c1:30:b1:0d:91: 03:71:f6:ea:9c:7d:2d:f5:a1:9e:3c:0b:ec:34:41:3f:98:30: 13:aa:d1:41:3f:fb:0e:2e:5c:57:cb:cd:1c:64:79:15:41:98: 11:bd:a8:cf:38:71:95:c3:e2:df:72:24:13:75:fb:52:68:08: 3a:2f:ad:ca:4e:07:88:16:d3:08:f1:31:6b:7f:63:e8:bf:1c: 7a:40:8f:5f:bd:b7:15:f3:fb:5c:56:06:19:e7:78:e8:26:a3: b6:05:a2:da:b0:1d:15:a5:77:b3:21:fb:e4:ab:95:4f:3f:d6: 0b:4b:91:f0:d1:69:d8:07:2d:7d:6f:56:88:53:33:b5:95:ee: 51:17:45:98:34:46:07:57:c2:e8:2f:51:96:ad:c5:32:99:84: b1:94:af:03:78:d4:0e:6d:8b:5e:7a:50:cf:03:92:57:ba:b3: 65:1e:51:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjQxMTI0MTcxODE2WhcNMjQxMjAxMTcxODE2WjAYMRYwFAYD VQQDEw02NzQzNWZkOC0yNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLLT5bBNI4t3iiNCd/HpfigUEvHMzcSXai5VY8jsIY9tIegWUO6iYT2bla6V felx8g/OXkYwxVNwrGCyTgQXBdmekymm1Rw1PPe77/O6ndOX65BpO807q0k1f0NJ maaJLrw1B4cn9Gl71CPcfPzfFPhjIIhjN0+agHhwVUypF7AS+SCxuv6THRu9Zw9J YEP1+KO0I218geO5T0Wbk2P8kvLGONKm3/xCeQ+aq74osG1LMDRwZ1ANFHBCaY5+ e12gQMk4sEFRW9j0HBxbK5O5/2RULWssxPBJTDwCFUdgIVa//6upmvGPKDFJrjwH EJ6h0HKBFLXfFsAL7GhDvI7f4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwMqyhV ccXk1EROC/MwAnSqU7ZjMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZBCMclQlZpraJZfW0wYzJapEHRETCA5HyiiHPEpcdUDXd5wwO3jSA Zdz0jbOvwVhM2/Gu6aXc0EhcuZeTc+IBVt5Fj7T4kB3mK+wpb61AlFfEce/cwTCx DZEDcfbqnH0t9aGePAvsNEE/mDATqtFBP/sOLlxXy80cZHkVQZgRvajPOHGVw+Lf ciQTdftSaAg6L63KTgeIFtMI8TFrf2Povxx6QI9fvbcV8/tcVgYZ53joJqO2BaLa sB0VpXezIfvkq5VPP9YLS5Hw0WnYBy19b1aIUzO1le5RF0WYNEYHV8LoL1GWrcUy mYSxlK8DeNQObYteelDPA5JXurNlHlG5 -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:18 2024 by rpki-client on console-fra.rpki-client.org