$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: VVmO0uxo069eh8QF2xAhCO184GZ65AUfkeRu2qk/DIw= Subject key identifier: 05:DD:5C:FF:C1:00:34:FA:5E:53:6B:B2:61:FE:3D:71:7C:C5:09:5A Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: 41 Signing time: Thu 21 Nov 2024 05:29:47 +0000 Manifest this update: Thu 21 Nov 2024 05:29:47 +0000 Manifest next update: Thu 28 Nov 2024 05:29:47 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: mnQ4GGWpdp3e2Eyx/D7K3CNg4MQ9m8BZe4dMKNAXVuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: Nov 21 05:29:47 2024 GMT Not After : Nov 28 05:29:47 2024 GMT Subject: CN=673ec54b-5975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:2b:74:c1:d3:48:d2:91:61:cf:1a:0d:51: f7:59:bd:f1:38:48:23:2b:a3:dc:49:5a:b9:35:9d: 63:94:36:46:3d:01:a3:67:11:9a:5d:10:f2:86:cc: 65:06:0d:ed:55:f1:54:b0:ba:73:d0:90:52:a4:d8: e7:0a:e8:aa:15:9d:c5:e7:40:9d:99:5a:08:9d:81: 65:aa:8b:f4:17:aa:99:5d:d3:e9:c6:ec:36:d5:1a: ec:fd:0a:1f:2a:e0:6d:75:9d:dc:be:d5:55:08:29: d4:9d:c9:24:53:87:b1:d6:83:13:39:70:de:b2:ea: af:c4:60:d0:3d:16:2a:00:d0:05:c2:96:ba:a6:c7: 00:3a:f2:1c:79:39:61:b4:62:47:46:9a:8b:b5:0b: 15:c2:c7:5e:bf:86:02:d0:95:94:cf:97:a3:bf:af: f1:75:a2:9a:ef:16:55:3e:65:f8:3d:80:74:ab:48: 2b:d2:b2:8f:7f:32:06:a8:f0:fc:4f:80:02:33:6e: f6:13:63:5a:78:df:91:8a:c7:10:e8:c2:22:c1:39: e5:0f:f5:82:a3:63:3f:44:28:6e:f5:7e:fd:75:c9: 4e:b1:53:e0:3a:41:fb:b9:62:fb:f4:d3:75:5b:bc: 42:a0:12:f7:63:5d:0c:94:70:12:cf:58:1e:98:bd: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:5C:FF:C1:00:34:FA:5E:53:6B:B2:61:FE:3D:71:7C:C5:09:5A X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f6:28:4e:05:e8:37:25:60:37:44:8b:24:d2:f7:82:e9:57: 8c:95:ba:10:e9:82:fd:97:20:d0:fc:7c:86:3c:54:7a:67:78: 96:13:0b:90:c0:dd:53:bc:d3:37:b3:a8:b8:56:d6:2a:a9:76: cd:a8:a8:84:b6:16:aa:ce:76:47:40:2e:59:d6:45:0f:2f:a9: af:53:5b:df:ec:3d:4f:5d:ad:51:39:07:d7:e4:04:62:a6:49: c4:1a:d0:a4:9c:4d:80:3a:24:e2:9a:df:f3:49:0c:dd:4c:59: 6b:b6:c1:0e:f2:d1:89:05:87:10:61:7e:6b:98:64:f3:91:6f: ba:47:7c:cb:2d:be:5e:bd:ad:35:0e:03:fb:a6:db:15:c5:4f: 20:76:e0:7a:1b:38:f7:ad:31:60:4b:8a:7c:c5:dc:ca:bd:69: 9d:e7:23:0b:28:15:72:30:ed:20:53:3c:3a:1a:58:f0:87:59: c3:14:03:3c:7e:29:5a:77:ca:bc:c0:ad:82:aa:a6:fe:5c:56: 25:f7:80:af:fb:1d:5e:df:5a:2b:89:8d:98:fd:ef:a0:25:c2: df:d4:e4:e2:00:e3:7c:10:31:9f:a2:08:33:c1:7d:be:c7:db: 96:2a:ba:0e:2c:eb:50:b9:1a:de:71:ab:e4:28:e3:f8:3d:c6: ca:5e:36:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUI1RTExMC8GA1UEBRMoODU4MDQ1OTUxN0ZFMUQ3N0Q0RDM4QTQyOUYxRDIxQzZD OTJERTkzNDAeFw0yNDExMjEwNTI5NDdaFw0yNDExMjgwNTI5NDdaMBgxFjAUBgNV BAMTDTY3M2VjNTRiLTU5NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Byt0wdNI0pFhzxoNUfdZvfE4SCMro9xJWrk1nWOUNkY9AaNnEZpdEPKGzGUG De1V8VSwunPQkFKk2OcK6KoVncXnQJ2ZWgidgWWqi/QXqpld0+nG7DbVGuz9Ch8q 4G11ndy+1VUIKdSdySRTh7HWgxM5cN6y6q/EYNA9FioA0AXClrqmxwA68hx5OWG0 YkdGmou1CxXCx16/hgLQlZTPl6O/r/F1oprvFlU+Zfg9gHSrSCvSso9/Mgao8PxP gAIzbvYTY1p435GKxxDowiLBOeUP9YKjYz9EKG71fv11yU6xU+A6Qfu5Yvv003Vb vEKgEvdjXQyUcBLPWB6YvYO3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBd1c/8EA NPpeU2uyYf49cXzFCVowHwYDVR0jBBgwFoAUhYBFlRf+HXfU04pCnx0hxskt6TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjVFLzg1QkNFRTRDNDVC NTExRUZCQTRBNjIxRUM0RjlBRTAyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFlCRmxSZi1IWGZVMDRwQ254MGh4c2t0NlRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjVFLzg1QkNFRTRDNDVCNTExRUZCQTRBNjIxRUM0RjlBRTAyL2hZQkZsUmYtSFhm VTA0cENueDBoeHNrdDZUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALj2KE4F6DclYDdEiyTS94LpV4yVuhDpgv2XIND8fIY8VHpneJYTC5DA 3VO80zezqLhW1iqpds2oqIS2FqrOdkdALlnWRQ8vqa9TW9/sPU9drVE5B9fkBGKm ScQa0KScTYA6JOKa3/NJDN1MWWu2wQ7y0YkFhxBhfmuYZPORb7pHfMstvl69rTUO A/um2xXFTyB24HobOPetMWBLinzF3Mq9aZ3nIwsoFXIw7SBTPDoaWPCHWcMUAzx+ KVp3yrzArYKqpv5cViX3gK/7HV7fWiuJjZj976Alwt/U5OIA43wQMZ+iCDPBfb7H 25Yqug4s61C5Gt5xq+Qo4/g9xspeNpI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org