$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json) Hash identifier: dX7tnDE64IbuHKCwgUFp8l/5Bg6eyiJlGAEfVU/+hOs= Subject key identifier: 2F:8C:87:4D:60:FC:92:23:82:12:91:27:79:44:A4:6B:C9:3F:3D:C1 Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft Manifest number: C7 Signing time: Thu 21 Nov 2024 04:19:10 +0000 Manifest this update: Thu 21 Nov 2024 04:19:10 +0000 Manifest next update: Thu 28 Nov 2024 04:19:10 +0000 Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: c3zyXnB3I4aVPbQrePw9rM8MfFc/O+XuclkJLBtao4A=) 2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: +DFbuZzGxszdyJtAe1BcKeDGzlcNhntBmdYrhogMeeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: Nov 21 04:19:10 2024 GMT Not After : Nov 28 04:19:10 2024 GMT Subject: CN=673eb4be-bb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:c1:66:95:b9:f3:fc:bd:d8:37:48:10:f7: bd:de:37:9b:87:51:64:4d:33:a6:f6:ec:4c:51:b7: 0f:dd:c4:aa:91:54:a8:cc:30:fb:bb:80:96:30:5d: 0e:10:ec:df:a2:c1:db:85:da:76:a1:67:38:12:49: e5:01:38:dd:7e:52:c8:4d:49:6e:c4:85:e8:4f:07: 25:40:3c:a7:03:40:5c:cd:d4:04:f8:f8:2b:21:6b: f4:ca:9a:c0:f7:8f:41:18:d4:0f:42:57:eb:24:2c: 3a:07:18:fa:d9:58:d5:d3:8b:66:38:4f:ae:65:a0: b2:4c:98:b9:60:ac:66:9c:1f:ab:ec:36:ac:be:80: 00:4c:90:1a:0f:27:70:ab:f9:93:3c:9e:3a:04:63: 18:d3:4f:80:c9:9c:07:42:cf:b8:23:7e:cb:48:4d: e0:ba:b0:83:ac:3a:b2:ba:7f:d0:d6:fb:4f:b8:ff: 52:0c:27:97:f3:b1:b0:43:1c:58:f2:31:73:86:94: d5:96:98:82:69:58:04:34:dd:8e:dd:39:ca:54:a9: 4b:c5:7e:40:e2:a3:0d:73:fc:90:fd:e6:46:c6:91: dc:85:07:1f:0f:bb:4d:be:99:ab:ed:af:4b:99:b2: d9:cd:11:c7:5e:0b:d2:80:93:86:3b:e0:a4:eb:01: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8C:87:4D:60:FC:92:23:82:12:91:27:79:44:A4:6B:C9:3F:3D:C1 X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:70:f4:82:57:66:11:c1:77:66:3e:25:7a:1d:7a:ad:c8: 2b:a8:14:9b:cd:84:d2:1f:8b:65:eb:e1:75:99:3b:5c:3f:f6: 84:54:e5:21:1d:76:f7:79:5a:d6:62:0b:a5:2b:d4:87:61:54: 5c:cb:db:c6:02:8c:89:cd:ce:02:22:7b:40:6d:fd:98:0a:de: e6:65:c0:d6:89:80:1e:05:a9:48:fd:c7:58:fc:da:de:ae:8e: 0b:ef:ac:52:da:9a:ca:cc:cc:60:a3:d6:b6:d6:b2:31:aa:b4: 24:48:d2:63:39:76:10:bb:9f:8a:fc:65:f6:05:d9:55:ec:80: 7b:b5:99:c3:43:38:5a:14:cd:b4:57:be:7e:cf:67:60:ac:31: 65:97:2e:1b:66:92:5a:6c:72:46:ec:29:c6:30:a7:f9:76:84: 8f:d8:17:66:3f:61:79:38:5f:ba:af:4e:b6:aa:20:5d:c7:3c: 37:96:71:0c:ad:94:d5:4d:95:da:07:1c:00:ab:db:be:1b:95: ab:90:ab:da:1c:26:d3:fa:31:37:4c:25:29:67:2d:68:30:26: 18:fd:7a:79:1a:b0:ae:3b:6f:99:06:13:7c:5c:88:ac:a8:bb: 68:fb:75:81:1c:2c:0b:b1:a8:bf:2f:b1:75:87:c6:59:69:bf: 73:db:fb:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjQxMTIxMDQxOTEwWhcNMjQxMTI4MDQxOTEwWjAYMRYwFAYD VQQDEw02NzNlYjRiZS1iYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBLBZpW58/y92DdIEPe93jebh1FkTTOm9uxMUbcP3cSqkVSozDD7u4CWMF0O EOzfosHbhdp2oWc4EknlATjdflLITUluxIXoTwclQDynA0BczdQE+PgrIWv0yprA 949BGNQPQlfrJCw6Bxj62VjV04tmOE+uZaCyTJi5YKxmnB+r7DasvoAATJAaDydw q/mTPJ46BGMY00+AyZwHQs+4I37LSE3gurCDrDqyun/Q1vtPuP9SDCeX87GwQxxY 8jFzhpTVlpiCaVgENN2O3TnKVKlLxX5A4qMNc/yQ/eZGxpHchQcfD7tNvpmr7a9L mbLZzRHHXgvSgJOGO+Ck6wEofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+Mh01g /JIjghKRJ3lEpGvJPz3BMB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyo3D0gldmEcF3Zj4leh16rcgrqBSbzYTSH4tl6+F1mTtcP/aEVOUh HXb3eVrWYgulK9SHYVRcy9vGAoyJzc4CIntAbf2YCt7mZcDWiYAeBalI/cdY/Nre ro4L76xS2prKzMxgo9a21rIxqrQkSNJjOXYQu5+K/GX2BdlV7IB7tZnDQzhaFM20 V75+z2dgrDFlly4bZpJabHJG7CnGMKf5doSP2BdmP2F5OF+6r062qiBdxzw3lnEM rZTVTZXaBxwAq9u+G5WrkKvaHCbT+jE3TCUpZy1oMCYY/Xp5GrCuO2+ZBhN8XIis qLto+3WBHCwLsai/L7F1h8ZZab9z2/sa -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org