$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json) Hash identifier: OtRige1PTYe9HpkUnfjcHrpUhJTiaauaN3BLQtiEwCA= Subject key identifier: 90:A1:4C:FF:D2:D8:D7:36:89:C9:CE:A8:B1:43:E5:E0:6E:AA:13:F2 Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft Manifest number: 0574 Signing time: Fri 22 Nov 2024 22:54:20 +0000 Manifest this update: Fri 22 Nov 2024 22:54:20 +0000 Manifest next update: Fri 29 Nov 2024 22:54:20 +0000 Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: aZjiDSUeTD3J5QfUR57ylcHvJNx8nL6VpAgpElEObTA=) 2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: fb7qHh5ZQWTTd8VnRA4KyHFCOrkRy8TphWCCGB0gByk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Validity Not Before: Nov 22 22:54:20 2024 GMT Not After : Nov 29 22:54:20 2024 GMT Subject: CN=67410b9c-d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:e2:c1:0e:1f:dc:60:ab:46:7b:47:e2:c7: fc:56:0d:a4:b9:22:7c:96:d2:e0:84:47:79:0d:a3: ff:1f:6c:f5:e8:ff:07:c5:37:37:43:4c:b8:8b:e3: a2:ad:90:fb:c9:fc:d8:f4:46:5f:cb:a6:1d:f8:c7: 59:52:df:ae:83:73:03:05:4f:4c:00:5c:4d:cd:87: 51:80:5c:48:f0:27:b0:c2:21:85:7a:aa:80:8c:3e: b2:f1:02:ac:1b:07:b0:35:94:2a:42:84:0d:97:c5: 30:18:46:94:ba:8b:15:d3:76:d8:70:4c:ec:4b:4c: b7:d5:d9:23:ca:1b:0b:b6:9d:49:48:cc:69:63:2a: ea:9a:b0:5c:10:a6:78:4c:9e:3b:dc:30:f9:d9:d9: 99:8e:ec:10:c7:3b:9c:a6:9f:93:46:cd:6f:35:9b: 4c:e4:f4:0e:6d:e7:02:2f:f7:82:d2:1c:0e:63:92: e0:65:af:01:fc:4a:24:92:86:86:54:41:d0:3c:b2: d5:5e:74:92:23:e0:c6:d6:9f:92:d0:e1:1d:9d:c1: db:bc:e5:76:db:f1:36:e9:3b:38:f2:c7:c5:21:8d: 6a:a2:df:b2:57:1a:63:4b:be:53:aa:fb:48:6d:36: 85:19:29:4a:5f:44:43:1f:15:bd:e5:b0:0c:08:56: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:4C:FF:D2:D8:D7:36:89:C9:CE:A8:B1:43:E5:E0:6E:AA:13:F2 X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:50:e5:ea:0b:a3:8f:e0:d7:86:30:04:22:a7:f6:da:9c: 22:78:39:39:5d:ac:79:3c:6b:ac:1d:ce:8f:60:65:4e:f2:07: 60:0c:12:0b:01:a8:be:1c:b3:ec:6e:6c:29:a8:28:99:fe:92: 1b:19:48:98:9b:7a:03:39:7c:22:ff:bb:b4:9a:1e:61:a5:6c: c5:3a:9f:23:a2:58:bc:76:99:7d:d1:13:d3:da:09:d3:72:53: cc:67:c1:b2:a3:10:00:08:a7:b6:74:e3:df:82:57:e9:06:22: e7:81:30:7a:1b:9d:01:c6:af:bd:62:d8:5b:c0:64:82:ed:e3: 77:ad:1d:4f:b1:af:7b:6e:58:93:15:f2:0a:da:46:e7:cc:2f: 30:f3:8f:f8:7d:d4:e6:c1:a0:bd:60:39:61:35:74:38:c4:31: 90:a9:9b:6f:cc:67:95:27:35:0d:52:14:d9:ca:eb:7f:5c:1f: 60:96:8a:47:5d:96:12:72:de:12:05:ab:a7:3e:8f:63:fe:d3: 8d:f8:98:54:03:e5:f6:a4:e5:2d:87:85:1e:ed:05:df:4a:85: 8b:59:3c:d6:f8:15:81:f4:92:dc:9b:36:20:12:33:42:0d:4d: 99:ae:c8:fa:6e:a7:75:f9:57:05:50:20:fb:9d:8d:6e:b8:b0: ea:81:92:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjQxMTIyMjI1NDIwWhcNMjQxMTI5MjI1NDIwWjAYMRYwFAYD VQQDEw02NzQxMGI5Yy1kN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4DiwQ4f3GCrRntH4sf8Vg2kuSJ8ltLghEd5DaP/H2z16P8HxTc3Q0y4i+Oi rZD7yfzY9EZfy6Yd+MdZUt+ug3MDBU9MAFxNzYdRgFxI8CewwiGFeqqAjD6y8QKs GwewNZQqQoQNl8UwGEaUuosV03bYcEzsS0y31dkjyhsLtp1JSMxpYyrqmrBcEKZ4 TJ473DD52dmZjuwQxzucpp+TRs1vNZtM5PQObecCL/eC0hwOY5LgZa8B/EokkoaG VEHQPLLVXnSSI+DG1p+S0OEdncHbvOV22/E26Ts48sfFIY1qot+yVxpjS75TqvtI bTaFGSlKX0RDHxW95bAMCFa9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJChTP/S 2Nc2icnOqLFD5eBuqhPyMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3 RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlWFDl6gujj+DXhjAEIqf22pwieDk5Xax5PGusHc6PYGVO8gdgDBIL Aai+HLPsbmwpqCiZ/pIbGUiYm3oDOXwi/7u0mh5hpWzFOp8joli8dpl90RPT2gnT clPMZ8GyoxAACKe2dOPfglfpBiLngTB6G50Bxq+9YthbwGSC7eN3rR1Psa97bliT FfIK2kbnzC8w84/4fdTmwaC9YDlhNXQ4xDGQqZtvzGeVJzUNUhTZyut/XB9glopH XZYSct4SBaunPo9j/tON+JhUA+X2pOUth4Ue7QXfSoWLWTzW+BWB9JLcmzYgEjNC DU2Zrsj6bqd1+VcFUCD7nY1uuLDqgZIP -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org