$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: v4kPpxg+e22hkOLCKCQGS1lECYCy1rMbtsLsjZL7kaY= Subject key identifier: B9:2D:C0:8F:32:78:14:F5:BD:45:58:E3:2D:88:02:11:D6:F3:D7:7B Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0BC4 Signing time: Fri 22 Nov 2024 18:36:41 +0000 Manifest this update: Fri 22 Nov 2024 18:36:41 +0000 Manifest next update: Fri 29 Nov 2024 18:36:41 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: Spy0hK8SRmcLCDX9Rz8oDAKsu8wJ9jG8vZ150CO9rC8=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: tMpcaYfBD1iobeLdQwhWt6/SJfz2AnFABrMU1WC/vqA=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: kiKJ+nah+NBAeLG9hlQHszkTVk53ALCt/csxQaC27/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Nov 22 18:36:41 2024 GMT Not After : Nov 29 18:36:41 2024 GMT Subject: CN=6740cf39-603e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:dc:97:96:e9:ad:91:f1:b8:a2:de:3f:84: 36:52:19:9c:42:b7:d1:a8:d5:56:2c:7b:10:9c:a7: 4a:b2:1c:d7:0e:8e:ca:d0:58:fb:a4:72:f5:f2:67: 50:8c:be:12:8b:04:6a:f5:14:3f:46:44:56:4f:55: 70:29:bf:b9:7c:3d:ac:5a:8f:52:64:df:dc:26:7c: 06:5d:41:65:f3:ee:36:97:1c:a2:35:3c:10:db:84: 28:9d:d9:10:ee:aa:c1:33:9a:c4:4e:d3:5a:3e:bb: 32:a6:d9:48:7c:2c:56:0c:f4:2b:ef:bb:ce:ce:d4: 21:e9:44:2b:80:57:58:e2:b9:ec:94:c5:8a:53:1b: 63:c8:ac:ca:21:e0:d2:e0:13:70:4a:55:b8:3c:e7: 0e:ea:4a:95:75:07:70:e1:1f:c3:42:a4:d7:f7:f2: 6a:2b:4b:76:01:2d:7f:d1:b1:a1:54:98:2c:6c:6a: a7:ee:89:fd:58:80:45:d9:1b:7c:a9:d9:63:20:5b: 55:f2:79:59:3c:50:1b:19:25:5a:93:e1:a2:b0:a8: f6:a5:4d:cc:10:ad:1c:b8:16:9e:26:b8:2a:a0:37: 0b:73:33:c6:a2:07:cd:74:3f:d3:9a:43:4f:6c:f0: c1:a1:a7:24:60:10:d0:ba:dc:f6:66:26:d2:77:70: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2D:C0:8F:32:78:14:F5:BD:45:58:E3:2D:88:02:11:D6:F3:D7:7B X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3e:3c:d9:eb:72:45:e5:be:d3:50:5e:ee:c8:de:cb:0e:dc: 47:4f:31:b3:31:95:6b:5c:e1:42:53:4d:e9:9d:df:c3:da:5b: 52:e9:4b:38:ba:06:f8:8c:52:af:a8:70:ec:7f:13:1d:63:7d: 1a:62:1d:60:1c:49:4b:12:c4:ca:45:89:e8:e2:41:f1:2c:b3: 3f:56:f2:80:68:9e:f3:7b:e3:38:c4:d4:94:2b:f9:a0:49:b0: 1f:20:eb:88:9c:74:ac:e1:e7:b9:70:28:7b:c2:a5:4d:58:27: 9f:c4:2d:90:e2:df:d4:c5:f0:95:81:71:df:93:f2:42:2c:6b: a1:d9:48:8b:25:2e:de:27:bf:f5:41:22:5e:07:d5:c1:23:47: b3:56:32:88:12:37:26:e7:2f:71:7b:42:42:41:f7:87:81:b5: 2c:72:c2:fe:e5:b8:48:39:1f:5e:37:94:56:34:52:c9:84:f9: 30:cb:3c:31:0c:f6:14:f7:d0:75:84:5d:ea:ff:7e:b9:7e:22: e7:05:53:82:24:98:a1:97:21:e4:a3:20:46:89:a3:61:d4:e3: a8:76:72:1d:71:81:0f:41:76:18:cc:ec:f3:e0:1b:e3:93:95: d1:64:61:d0:9e:fa:aa:79:af:13:e1:a1:66:f1:4d:4f:b8:9d: a2:f0:7f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjQxMTIyMTgzNjQxWhcNMjQxMTI5MTgzNjQxWjAYMRYwFAYD VQQDEw02NzQwY2YzOS02MDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYzcl5bprZHxuKLeP4Q2UhmcQrfRqNVWLHsQnKdKshzXDo7K0Fj7pHL18mdQ jL4SiwRq9RQ/RkRWT1VwKb+5fD2sWo9SZN/cJnwGXUFl8+42lxyiNTwQ24QondkQ 7qrBM5rETtNaPrsyptlIfCxWDPQr77vOztQh6UQrgFdY4rnslMWKUxtjyKzKIeDS 4BNwSlW4POcO6kqVdQdw4R/DQqTX9/JqK0t2AS1/0bGhVJgsbGqn7on9WIBF2Rt8 qdljIFtV8nlZPFAbGSVak+GisKj2pU3MEK0cuBaeJrgqoDcLczPGogfNdD/TmkNP bPDBoackYBDQutz2ZibSd3CrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLktwI8y eBT1vUVY4y2IAhHW89d7MB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfPjzZ63JF5b7TUF7uyN7LDtxHTzGzMZVrXOFCU03pnd/D2ltS6Us4 ugb4jFKvqHDsfxMdY30aYh1gHElLEsTKRYno4kHxLLM/VvKAaJ7ze+M4xNSUK/mg SbAfIOuInHSs4ee5cCh7wqVNWCefxC2Q4t/UxfCVgXHfk/JCLGuh2UiLJS7eJ7/1 QSJeB9XBI0ezVjKIEjcm5y9xe0JCQfeHgbUscsL+5bhIOR9eN5RWNFLJhPkwyzwx DPYU99B1hF3q/365fiLnBVOCJJihlyHkoyBGiaNh1OOodnIdcYEPQXYYzOzz4Bvj k5XRZGHQnvqqea8T4aFm8U1PuJ2i8H/t -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org