$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: PrWDjrh6iF5AMHlXJU/rXZKKItp7Hhmto+9J50gmATw= Subject key identifier: 56:14:0B:70:D3:93:0E:DF:8C:92:68:73:D5:46:4C:2E:F3:10:D9:97 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0AA5 Signing time: Tue 26 Nov 2024 19:17:03 +0000 Manifest this update: Tue 26 Nov 2024 19:17:01 +0000 Manifest next update: Tue 03 Dec 2024 19:17:01 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: GeclM/TucaaFluZ0XTGog7r6YBECgdRvP9gf3UqUE8k=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 19:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Nov 26 19:17:01 2024 GMT Not After : Dec 3 19:17:01 2024 GMT Subject: CN=67461eae-838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:7e:84:75:e4:4b:ab:c9:f6:6c:40:8e:59: ac:a5:1f:68:10:e7:92:bb:5f:e9:d3:df:1a:b2:64: 82:74:09:c1:5b:86:cc:2c:18:06:25:8f:5e:bd:39: e7:12:58:37:c6:4e:80:11:e4:1c:57:29:69:c8:57: 12:69:c5:6e:84:c5:fb:4d:4a:f3:f4:86:15:df:50: 5f:44:7b:8a:37:c0:c2:0a:c4:ec:7b:be:02:08:5c: 5b:04:9f:c2:f1:10:f4:d1:8c:d6:22:a4:e6:7a:6c: fc:cb:3d:1f:42:aa:b4:8c:c4:2e:ce:0f:f3:83:15: f4:a2:b0:d2:7d:1d:39:04:9c:88:9d:44:56:36:16: a5:e8:85:07:63:91:0e:87:2c:d8:f4:2b:53:37:f5: 4e:02:e3:96:89:06:4a:8f:82:de:45:2b:f3:59:6a: ee:5f:1a:4a:4a:88:90:aa:a8:54:0b:8f:42:fa:c5: a2:fe:4d:04:9a:e2:9a:df:f7:9d:3a:f5:b8:bd:ab: 7a:b7:6a:dd:db:77:5f:10:54:fd:62:05:9f:14:07: fd:8e:10:e9:29:0e:dc:a8:a3:f3:33:52:20:0d:d6: 4f:f7:5c:e2:02:4c:75:dd:b5:93:ca:6a:23:31:cf: 30:7a:b5:2a:68:c1:32:09:3e:94:28:5c:84:8b:4b: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:14:0B:70:D3:93:0E:DF:8C:92:68:73:D5:46:4C:2E:F3:10:D9:97 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:35:a3:15:e2:1b:8b:20:f5:7b:50:af:5a:a8:cd:5d:da:32: 3d:82:b9:20:68:03:9c:cf:91:cf:8f:7f:a6:f6:20:5b:55:19: 95:2e:6f:06:88:19:df:33:c4:70:59:17:21:cf:ca:bb:f1:8b: 19:88:88:13:e8:66:d9:0c:69:a6:87:b0:e0:9f:bc:b0:c8:c0: e3:ec:9d:a1:b7:d8:b1:d2:31:90:8a:cc:d7:2b:6b:68:6b:fd: bd:65:41:0b:f3:d1:ac:d8:a0:7a:bf:5e:d0:92:36:f2:0a:49: 16:9e:b0:6d:b7:39:03:d3:0c:88:87:7d:24:6b:12:67:44:24: b9:00:ca:26:31:a0:8a:b0:6c:d3:27:20:58:b0:fe:b5:11:18: 4a:18:d2:16:23:30:58:65:51:b7:96:dc:05:32:0b:6c:13:6e: e5:5a:41:ca:d8:f9:dc:43:d2:d1:94:53:0c:06:2d:46:ee:62: 96:1a:1f:14:80:f9:77:f5:1e:8a:80:58:11:7f:e0:87:9f:28: 2b:71:27:38:22:8a:e9:95:c7:bd:a1:0a:45:13:ca:24:84:67: 81:ca:84:90:ae:8f:e8:90:04:af:4a:83:2e:52:f4:6f:cd:2a: 6d:af:41:fe:9d:e0:ef:04:2f:a1:a9:5a:bd:91:f2:51:f3:f3: 3f:b2:93:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjQxMTI2MTkxNzAxWhcNMjQxMjAzMTkxNzAxWjAYMRYwFAYD VQQDEw02NzQ2MWVhZS04MzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Al+hHXkS6vJ9mxAjlmspR9oEOeSu1/p098asmSCdAnBW4bMLBgGJY9evTnn Elg3xk6AEeQcVylpyFcSacVuhMX7TUrz9IYV31BfRHuKN8DCCsTse74CCFxbBJ/C 8RD00YzWIqTmemz8yz0fQqq0jMQuzg/zgxX0orDSfR05BJyInURWNhal6IUHY5EO hyzY9CtTN/VOAuOWiQZKj4LeRSvzWWruXxpKSoiQqqhUC49C+sWi/k0EmuKa3/ed OvW4vat6t2rd23dfEFT9YgWfFAf9jhDpKQ7cqKPzM1IgDdZP91ziAkx13bWTymoj Mc8werUqaMEyCT6UKFyEi0sGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYUC3DT kw7fjJJoc9VGTC7zENmXMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyNaMV4huLIPV7UK9aqM1d2jI9grkgaAOcz5HPj3+m9iBbVRmVLm8G iBnfM8RwWRchz8q78YsZiIgT6GbZDGmmh7Dgn7ywyMDj7J2ht9ix0jGQiszXK2to a/29ZUEL89Gs2KB6v17QkjbyCkkWnrBttzkD0wyIh30kaxJnRCS5AMomMaCKsGzT JyBYsP61ERhKGNIWIzBYZVG3ltwFMgtsE27lWkHK2PncQ9LRlFMMBi1G7mKWGh8U gPl39R6KgFgRf+CHnygrcSc4Iorplce9oQpFE8okhGeByoSQro/okASvSoMuUvRv zSptr0H+neDvBC+hqVq9kfJR8/M/spNy -----END CERTIFICATE-----Generated at Tue Nov 26 20:53:07 2024 by rpki-client on console-fra.rpki-client.org