$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: QoiQx/sTCVZRCTRagQ93wJNXpYXp9PayfQKCnpwCgUg= Subject key identifier: 8E:85:22:27:45:DD:9A:7C:80:AE:A3:50:9E:81:97:41:ED:49:A7:A9 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 36 Signing time: Thu 21 Nov 2024 05:36:19 +0000 Manifest this update: Thu 21 Nov 2024 05:36:18 +0000 Manifest next update: Thu 28 Nov 2024 05:36:18 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: sMJQUv00gIcNn0DPCm8UeI54r7OzZNZ5IHA52AD0fH0=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Nov 21 05:36:18 2024 GMT Not After : Nov 28 05:36:18 2024 GMT Subject: CN=673ec6d2-9c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:c7:a5:cd:5a:0f:bf:00:1c:78:49:e1:9f: f1:59:10:17:dd:c9:cd:5d:4c:77:d9:aa:7c:1f:bc: 64:e5:31:ef:5b:ba:8b:aa:16:98:0b:30:e6:05:e1: 11:ec:f6:d8:3d:89:b6:b6:bf:f5:42:74:f3:87:18: d9:cb:56:08:47:67:95:56:0d:fd:9d:b6:5b:a9:c0: b3:b6:db:0d:88:b5:93:95:d3:08:f0:18:ac:68:f1: 27:96:8a:30:95:c3:1a:0e:92:7b:f1:69:b5:0d:97: 8e:2d:34:0f:46:26:10:2c:e8:17:03:3b:35:76:65: 28:1a:82:85:17:46:3d:7e:ff:c2:a9:bd:75:77:7e: f4:a7:fb:8b:a0:0e:c1:9e:50:40:69:9c:d6:7c:3f: ef:8f:86:69:7b:c5:16:fb:ff:1c:cd:dc:40:c7:4d: 16:04:6e:9f:bd:e1:8e:0b:80:7c:02:a1:89:3e:74: f8:9f:79:24:87:a2:6c:21:e0:2e:35:0f:50:33:b8: 67:b8:8f:19:bc:14:ab:00:43:b8:c2:e9:b9:07:4c: 79:23:ab:90:e1:e6:5e:2b:69:55:f1:2c:7d:36:b8: c3:ec:8f:67:c6:ac:26:65:77:db:41:c1:b7:6d:d1: db:18:50:6f:60:01:40:e2:66:e9:70:02:b5:9f:9f: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:85:22:27:45:DD:9A:7C:80:AE:A3:50:9E:81:97:41:ED:49:A7:A9 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:e9:16:b4:35:5e:18:dd:32:55:ae:c3:44:5f:4a:af:3f: 3a:d0:3b:59:c1:63:bc:77:33:40:b5:bf:f8:bf:e3:87:31:1f: da:92:e4:68:79:3f:d5:ee:ea:44:7c:61:66:d0:13:2a:ff:89: 46:af:b0:08:13:d8:2b:1a:ad:bb:a3:6a:2e:0c:dc:0c:ad:36: 91:02:30:fb:5f:26:a8:1e:e5:dd:69:ac:86:21:55:87:41:c9: 3c:b9:a9:a1:51:70:9c:9a:ab:70:0d:38:12:b2:c9:34:1a:76: 2e:ab:5b:2e:69:0f:c8:17:6e:ca:a9:a2:6b:1b:73:0b:60:02: 23:0d:a3:88:5a:71:50:42:f2:1e:58:08:3b:88:1a:52:34:8b: 75:eb:54:96:0b:10:ce:2d:c9:b9:b9:83:db:ee:7d:de:67:a1: 4c:47:9e:dd:b8:cf:f0:10:66:31:e6:70:d8:0f:de:cb:fa:c6: 3c:f3:17:ac:ef:27:01:1f:c8:f8:0f:23:c8:33:93:d5:e8:8f: 56:e8:71:06:5d:12:ea:39:88:36:f3:3a:27:51:7b:bd:55:0e: 43:8d:86:71:35:dc:b4:7d:fd:7d:37:3c:cf:bb:a7:7d:86:4b: 7b:18:77:fb:f5:55:c2:00:cb:3a:28:5b:c8:77:70:00:c3:0d: 1d:11:f4:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDRBODExMC8GA1UEBRMoODZFMjM0RTJFMUUyM0E0OTcxNDU4RDJBNzI2MTRERjEz ODk1RTI5QTAeFw0yNDExMjEwNTM2MThaFw0yNDExMjgwNTM2MThaMBgxFjAUBgNV BAMTDTY3M2VjNmQyLTljMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2dMelzVoPvwAceEnhn/FZEBfdyc1dTHfZqnwfvGTlMe9buouqFpgLMOYF4RHs 9tg9iba2v/VCdPOHGNnLVghHZ5VWDf2dtlupwLO22w2ItZOV0wjwGKxo8SeWijCV wxoOknvxabUNl44tNA9GJhAs6BcDOzV2ZSgagoUXRj1+/8KpvXV3fvSn+4ugDsGe UEBpnNZ8P++Phml7xRb7/xzN3EDHTRYEbp+94Y4LgHwCoYk+dPifeSSHomwh4C41 D1AzuGe4jxm8FKsAQ7jC6bkHTHkjq5Dh5l4raVXxLH02uMPsj2fGrCZld9tBwbdt 0dsYUG9gAUDiZulwArWfn67NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjoUiJ0Xd mnyArqNQnoGXQe1Jp6kwHwYDVR0jBBgwFoAUhuI04uHiOklxRY0qcmFN8TiV4pow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNEE4L0E1RjhFODc4NUFE QzExRUY4RjRDOTM3N0M0RjlBRTAyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHVJMDR1SGlPa2x4UlkwcWNtRk44VGlWNHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NEE4L0E1RjhFODc4NUFEQzExRUY4RjRDOTM3N0M0RjlBRTAyL2h1STA0dUhpT2ts eFJZMHFjbUZOOFRpVjRwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvO6Ra0NV4Y3TJVrsNEX0qvPzrQO1nBY7x3M0C1v/i/44cxH9qS5Gh5 P9Xu6kR8YWbQEyr/iUavsAgT2Csarbujai4M3AytNpECMPtfJqge5d1prIYhVYdB yTy5qaFRcJyaq3ANOBKyyTQadi6rWy5pD8gXbsqpomsbcwtgAiMNo4hacVBC8h5Y CDuIGlI0i3XrVJYLEM4tybm5g9vufd5noUxHnt24z/AQZjHmcNgP3sv6xjzzF6zv JwEfyPgPI8gzk9Xoj1bocQZdEuo5iDbzOidRe71VDkONhnE13LR9/X03PM+7p32G S3sYd/v1VcIAyzooW8h3cADDDR0R9O4= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org