$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: RwsN+hhRSy09oPG7tiwzqkNMnouuHh8lTOFHO2/SZfs= Subject key identifier: 87:16:20:D2:98:00:58:BD:54:40:0A:79:6C:81:D4:BE:D1:2D:FF:14 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0137 Signing time: Sat 23 Nov 2024 02:49:23 +0000 Manifest this update: Sat 23 Nov 2024 02:49:22 +0000 Manifest next update: Sat 30 Nov 2024 02:49:22 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: Z4SUDgciohOQpn0Y2N6cChkfLdF5xXFOLZw9PjhrIJw=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: k8fn8kaAVqX+FyPeWprQ1+C6X5Mp6iWOh3NubB8x45A=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: 63Cg8UWmGVPjQtQwAhVDY7/yUPc1L0LYA1nO69mjsoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Nov 23 02:49:22 2024 GMT Not After : Nov 30 02:49:22 2024 GMT Subject: CN=674142b2-6841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:29:9f:a1:64:ff:33:ea:c2:cc:f7:c0:41: c9:c7:8f:1f:50:eb:e0:f3:88:02:ec:6e:a4:ef:e9: dd:f8:40:a2:a2:30:bf:27:85:c1:6d:62:7c:42:9d: d8:8e:1d:0e:65:4c:bf:88:4d:7f:a5:6d:c7:a4:8f: 80:c3:51:b3:5d:8a:09:5f:cd:bd:1b:2b:f8:b3:06: fd:4c:fd:67:5b:04:6d:36:b0:d0:67:c0:85:83:4d: 45:57:e3:70:24:b1:32:1d:68:3a:f6:57:de:b4:c1: 56:aa:01:48:ab:b3:2a:80:44:be:98:74:0e:51:0c: 70:5a:21:0f:28:f5:cf:37:f8:d3:a6:fc:d3:ec:70: b7:ad:80:b2:ed:23:7c:35:e3:30:d1:fd:b6:c5:34: 32:db:47:13:b9:64:50:3b:c8:94:4f:49:3e:ec:fd: 61:bb:f7:8a:64:ec:b4:86:72:79:1e:26:8e:e6:14: ee:b7:df:d1:93:fa:40:f5:49:22:00:98:73:12:59: 66:4f:30:9c:be:7a:8a:02:d2:ad:2f:9e:07:8a:2f: 5d:74:3e:c0:a0:85:e3:ce:33:6f:1b:d1:c9:ed:04: a5:ec:86:c6:56:46:7d:61:6e:a5:7a:19:3a:f8:0b: 2f:df:a8:af:e6:1c:02:a2:71:80:c2:b8:51:fe:9f: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:20:D2:98:00:58:BD:54:40:0A:79:6C:81:D4:BE:D1:2D:FF:14 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:26:07:aa:34:35:c9:0b:39:9e:44:75:f3:e9:e5:27:eb:f3: 01:68:0c:52:74:bf:71:03:5b:c3:da:85:3f:bb:57:03:f8:a7: dc:71:d1:23:f5:06:0a:96:49:f8:df:8c:8d:ba:98:dc:8a:34: f4:0b:ca:bd:c9:e5:1a:35:d4:4d:d0:0d:da:7a:e6:fb:61:39: e6:ce:64:26:86:47:93:db:9d:12:21:a6:f9:d2:b6:cb:37:dc: 52:33:cf:03:60:ed:93:67:a0:a3:50:c1:38:5d:12:e4:db:7a: e5:79:95:38:7b:65:d2:d7:af:da:dd:b9:5a:36:ac:04:63:9e: e6:08:3c:c4:08:e1:97:10:3d:cd:9f:6a:e8:a2:b1:3b:58:f2: 81:1f:f2:f6:dc:94:ee:66:57:58:33:7e:87:fc:19:b0:3f:42: a9:32:50:16:0f:9b:5e:fa:d0:54:13:20:00:f3:d8:fc:c2:ac: ee:ea:2e:b1:00:28:b7:e9:0a:86:a9:34:b7:41:1f:70:09:7f: eb:75:ea:6e:af:e8:d9:84:cc:1e:fd:d9:f1:78:22:f1:f2:49: 0a:cb:e9:05:fe:78:88:7e:ec:1a:32:10:7a:0a:10:a2:97:3a: b6:af:61:0c:ae:5b:ff:c4:dc:a5:39:96:14:72:7a:a8:37:50: f1:15:a1:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjQxMTIzMDI0OTIyWhcNMjQxMTMwMDI0OTIyWjAYMRYwFAYD VQQDEw02NzQxNDJiMi02ODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT4pn6Fk/zPqwsz3wEHJx48fUOvg84gC7G6k7+nd+ECiojC/J4XBbWJ8Qp3Y jh0OZUy/iE1/pW3HpI+Aw1GzXYoJX829Gyv4swb9TP1nWwRtNrDQZ8CFg01FV+Nw JLEyHWg69lfetMFWqgFIq7MqgES+mHQOUQxwWiEPKPXPN/jTpvzT7HC3rYCy7SN8 NeMw0f22xTQy20cTuWRQO8iUT0k+7P1hu/eKZOy0hnJ5HiaO5hTut9/Rk/pA9Uki AJhzEllmTzCcvnqKAtKtL54Hii9ddD7AoIXjzjNvG9HJ7QSl7IbGVkZ9YW6lehk6 +Asv36iv5hwConGAwrhR/p91HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcWINKY AFi9VEAKeWyB1L7RLf8UMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJgeqNDXJCzmeRHXz6eUn6/MBaAxSdL9xA1vD2oU/u1cD+KfccdEj 9QYKlkn434yNupjcijT0C8q9yeUaNdRN0A3aeub7YTnmzmQmhkeT250SIab50rbL N9xSM88DYO2TZ6CjUME4XRLk23rleZU4e2XS16/a3blaNqwEY57mCDzECOGXED3N n2roorE7WPKBH/L23JTuZldYM36H/BmwP0KpMlAWD5te+tBUEyAA89j8wqzu6i6x ACi36QqGqTS3QR9wCX/rdepur+jZhMwe/dnxeCLx8kkKy+kF/niIfuwaMhB6ChCi lzq2r2EMrlv/xNylOZYUcnqoN1DxFaHT -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org