$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: BvV+yZ5WPqjS2hb1TprMc1H1Ku5FyYLdjqXppNrkwoA= Subject key identifier: 8F:E5:2D:41:05:A9:1E:7A:27:C2:CB:11:66:CA:B6:7C:24:CA:BD:69 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 065C Signing time: Fri 22 Nov 2024 21:56:46 +0000 Manifest this update: Fri 22 Nov 2024 21:56:46 +0000 Manifest next update: Fri 29 Nov 2024 21:56:46 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: ei6py2t8bdnN7uuaXAL2j1JaArFRW0oA7euB0F8VixE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Nov 22 21:56:46 2024 GMT Not After : Nov 29 21:56:46 2024 GMT Subject: CN=6740fe1e-1b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:e1:27:3a:4c:7d:cb:0a:cf:02:26:ff:c5: eb:cd:17:51:c8:59:38:13:7c:b9:e7:92:8e:bd:3a: f0:6a:32:7f:d7:08:0c:3e:00:12:37:d6:01:23:db: bf:fd:de:6f:c9:d3:0c:cb:bd:57:9f:d0:18:2c:46: a2:de:57:f6:91:5a:77:18:d7:72:3b:3d:c3:64:48: 28:bc:9b:a0:6a:fe:6e:69:ce:92:12:06:d2:79:ae: 21:e5:ef:8d:bc:4c:4a:a9:ba:3c:32:44:7c:43:20: 92:d3:19:d1:ef:af:19:ab:1b:ee:d1:18:23:58:f0: d7:03:21:e4:51:89:34:f0:1c:0e:68:48:b6:df:87: 5b:de:35:92:6f:30:13:09:33:dd:a7:8e:d2:56:02: 27:b9:56:ff:77:43:61:da:28:65:87:20:98:c4:f1: f5:e5:26:cc:08:c7:4d:8a:59:b1:99:4a:ba:7c:ff: e3:da:7d:3b:9d:56:a8:13:c5:72:06:45:30:c1:14: c4:17:ce:87:c5:9a:8e:ae:c8:8f:81:69:ca:66:7d: 57:2d:72:31:79:24:5f:12:6a:9a:e2:1e:27:0a:ad: dd:67:c6:b4:20:5b:86:f3:50:e8:bc:4b:4d:83:1c: 41:f7:8d:e7:c9:b5:8b:d6:95:02:69:b4:8d:2e:b5: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E5:2D:41:05:A9:1E:7A:27:C2:CB:11:66:CA:B6:7C:24:CA:BD:69 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c0:e3:a7:8d:62:44:2e:e0:4c:b6:a1:13:3e:76:8b:a3:83: 15:ae:65:3e:84:c7:cd:6f:81:8f:77:51:fc:fa:55:e6:37:19: ba:e9:56:f2:f0:de:4e:57:e3:83:38:91:ef:22:2c:fe:84:05: 3a:de:6b:83:a3:03:e9:6e:54:8f:ed:cf:ae:9f:79:77:92:3a: ff:a3:cf:a3:53:e4:a5:31:dd:4d:96:6d:10:0f:a9:54:69:dc: 85:9b:00:24:8d:c6:0e:a2:85:1d:ad:f2:07:0f:9f:94:8a:9e: aa:79:ec:23:d9:5b:51:30:37:6d:ef:c6:5b:1e:27:02:a1:23: c9:a3:41:2a:c3:02:92:2d:25:94:3d:8f:ed:86:a1:2d:3b:2d: 1f:79:07:e6:db:b4:9a:60:29:25:a6:fa:83:c0:0c:68:cb:0e: 4d:14:19:40:b9:0a:74:e3:4b:8f:cc:02:d8:ec:b7:4c:d9:86: 1d:da:ba:c0:f0:64:f5:16:cb:6b:0c:24:30:75:28:02:5a:ad: c0:39:23:c4:61:d9:74:83:4c:08:65:d5:e6:10:94:5a:4d:0b: 81:93:3b:cf:06:99:5c:54:b2:81:fb:63:e0:d2:de:03:3d:f8: 81:96:16:72:4d:73:40:28:3b:98:d9:8f:17:83:bc:c6:76:82: 1b:c1:0e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjQxMTIyMjE1NjQ2WhcNMjQxMTI5MjE1NjQ2WjAYMRYwFAYD VQQDEw02NzQwZmUxZS0xYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uPhJzpMfcsKzwIm/8XrzRdRyFk4E3y555KOvTrwajJ/1wgMPgASN9YBI9u/ /d5vydMMy71Xn9AYLEai3lf2kVp3GNdyOz3DZEgovJugav5uac6SEgbSea4h5e+N vExKqbo8MkR8QyCS0xnR768Zqxvu0RgjWPDXAyHkUYk08BwOaEi234db3jWSbzAT CTPdp47SVgInuVb/d0Nh2ihlhyCYxPH15SbMCMdNilmxmUq6fP/j2n07nVaoE8Vy BkUwwRTEF86HxZqOrsiPgWnKZn1XLXIxeSRfEmqa4h4nCq3dZ8a0IFuG81DovEtN gxxB943nybWL1pUCabSNLrW51wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/lLUEF qR56J8LLEWbKtnwkyr1pMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8wOOnjWJELuBMtqETPnaLo4MVrmU+hMfNb4GPd1H8+lXmNxm66Vby 8N5OV+ODOJHvIiz+hAU63muDowPpblSP7c+un3l3kjr/o8+jU+SlMd1Nlm0QD6lU adyFmwAkjcYOooUdrfIHD5+Uip6qeewj2VtRMDdt78ZbHicCoSPJo0EqwwKSLSWU PY/thqEtOy0feQfm27SaYCklpvqDwAxoyw5NFBlAuQp040uPzALY7LdM2YYd2rrA 8GT1FstrDCQwdSgCWq3AOSPEYdl0g0wIZdXmEJRaTQuBkzvPBplcVLKB+2Pg0t4D PfiBlhZyTXNAKDuY2Y8Xg7zGdoIbwQ5k -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org