$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: ASrfjjFNKM8dPGHwGJ03DZ+C56/FBB/q2DgnBpFgaZg= Subject key identifier: D2:0E:B2:C5:C1:CC:24:8A:44:C3:98:72:14:5D:C9:89:A2:CF:B1:90 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1D64 Signing time: Fri 22 Nov 2024 16:08:23 +0000 Manifest this update: Fri 22 Nov 2024 16:08:23 +0000 Manifest next update: Fri 29 Nov 2024 16:08:23 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: SxiYNaLhlO1qxRxX9mtuWPKoZjhHkkDpe5Vj7mxgkuo=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: 2edhdcxDL3hq/Y/5irWUYjIM2MnhCjcG113R+cVIiMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7538 (0x1d72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Nov 22 16:08:23 2024 GMT Not After : Nov 29 16:08:23 2024 GMT Subject: CN=6740ac77-f3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:7a:9a:68:95:d8:dd:46:81:55:e0:9f:64: 49:c2:3c:08:44:aa:63:d1:00:68:2e:cf:ea:9a:aa: 12:b9:94:bc:90:be:7c:15:6c:9d:63:5c:fb:14:d4: bd:c7:d5:6c:90:27:3c:2f:26:1f:a8:07:0f:94:c6: 8a:c6:63:d7:c8:92:c0:9d:7a:bf:58:f0:43:b2:34: c0:ff:12:bc:a3:96:b2:6f:27:14:b7:19:9e:16:3e: a7:89:17:d3:5c:80:d6:e9:82:4e:2a:84:e7:dc:71: d8:5e:60:e1:14:dd:df:cd:21:e6:60:1c:ba:19:ad: 33:e0:f0:fe:0b:bc:2c:79:51:16:a8:66:39:72:2c: 62:76:41:ec:ed:ce:7b:67:dd:cd:a5:6d:7f:62:cc: 66:bc:d3:3f:2e:87:ee:e2:dc:44:f0:39:8c:d0:b0: eb:6e:a1:5e:6c:e3:25:f1:2f:fe:5b:7e:c8:6a:b8: 02:ec:66:cc:2e:12:e2:68:0f:b0:c2:5b:6d:08:da: e8:07:a4:93:44:cd:c0:a3:27:24:a1:88:8a:8f:ad: 9e:01:7e:04:11:29:40:2c:14:fc:2d:be:2a:0a:78: 8d:1b:21:37:21:9a:92:3f:eb:99:29:85:3a:70:9f: 15:21:ca:04:88:86:12:de:22:e5:c6:a6:45:d1:ef: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0E:B2:C5:C1:CC:24:8A:44:C3:98:72:14:5D:C9:89:A2:CF:B1:90 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9e:31:d7:e9:28:cf:f6:29:37:41:bd:a6:67:fd:dc:0a:4e: ad:c9:14:b8:47:53:de:db:ab:80:c6:00:c3:08:27:57:33:0c: f2:6e:d7:3d:ba:39:ee:d9:94:ec:e0:e5:19:4e:46:4f:a2:d4: bb:83:64:4c:fe:82:cc:95:80:b5:9b:92:f7:bd:5f:55:d7:6a: 6e:b0:e9:4c:e5:28:0b:2c:11:04:61:30:02:74:33:c6:f7:df: e8:8a:35:7b:eb:27:11:d1:a1:01:45:ff:8b:1a:1b:2f:c5:27: 49:98:01:75:2d:15:68:44:d1:00:a8:ea:22:52:e6:ff:9b:1f: d7:07:00:f1:83:bd:f3:16:40:f5:8d:7c:30:23:53:71:28:a6: 3a:d8:2c:ab:e1:60:f6:0e:df:4e:36:25:e4:0b:77:e7:f6:1e: 10:25:13:77:1d:f5:1b:09:bd:77:2a:4f:15:68:9b:89:d7:6f: 8c:2d:55:a9:80:c3:03:cc:4c:45:b7:05:67:0a:20:5e:24:db: 27:11:cb:71:01:c7:09:db:06:d3:82:39:8f:7a:ce:10:b4:b5: 8c:01:66:41:b8:a0:dc:e1:80:e5:05:30:b4:59:94:57:39:bd: 2f:f3:3b:67:98:27:c3:a4:5d:6f:b4:7a:21:93:eb:40:41:8d: 0d:b4:b6:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjQxMTIyMTYwODIzWhcNMjQxMTI5MTYwODIzWjAYMRYwFAYD VQQDEw02NzQwYWM3Ny1mM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TR6mmiV2N1GgVXgn2RJwjwIRKpj0QBoLs/qmqoSuZS8kL58FWydY1z7FNS9 x9VskCc8LyYfqAcPlMaKxmPXyJLAnXq/WPBDsjTA/xK8o5aybycUtxmeFj6niRfT XIDW6YJOKoTn3HHYXmDhFN3fzSHmYBy6Ga0z4PD+C7wseVEWqGY5cixidkHs7c57 Z93NpW1/YsxmvNM/Lofu4txE8DmM0LDrbqFebOMl8S/+W37IargC7GbMLhLiaA+w wlttCNroB6STRM3AoyckoYiKj62eAX4EESlALBT8Lb4qCniNGyE3IZqSP+uZKYU6 cJ8VIcoEiIYS3iLlxqZF0e/gZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIOssXB zCSKRMOYchRdyYmiz7GQMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAanjHX6SjP9ik3Qb2mZ/3cCk6tyRS4R1Pe26uAxgDDCCdXMwzybtc9 ujnu2ZTs4OUZTkZPotS7g2RM/oLMlYC1m5L3vV9V12pusOlM5SgLLBEEYTACdDPG 99/oijV76ycR0aEBRf+LGhsvxSdJmAF1LRVoRNEAqOoiUub/mx/XBwDxg73zFkD1 jXwwI1NxKKY62Cyr4WD2Dt9ONiXkC3fn9h4QJRN3HfUbCb13Kk8VaJuJ12+MLVWp gMMDzExFtwVnCiBeJNsnEctxAccJ2wbTgjmPes4QtLWMAWZBuKDc4YDlBTC0WZRX Ob0v8ztnmCfDpF1vtHohk+tAQY0NtLbE -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org