$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: Vjfz04vI1Gjm+XvhxPabt1z8sIvt8xlRE/APwYOkpwY= Subject key identifier: 3C:02:75:5B:1F:F1:4F:CF:2D:14:5F:3F:25:E3:98:0A:BF:AB:1C:50 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 0214 Signing time: Sat 23 Nov 2024 01:31:51 +0000 Manifest this update: Sat 23 Nov 2024 01:31:50 +0000 Manifest next update: Sat 30 Nov 2024 01:31:50 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: VJL8xGdK5jPysjdVRACGhB354Dmyom/Wo26ciof0YqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Nov 23 01:31:50 2024 GMT Not After : Nov 30 01:31:50 2024 GMT Subject: CN=67413087-bb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:32:68:96:73:f0:27:a4:c1:24:41:a6:08: 7b:f6:82:bf:84:f5:ca:14:f7:95:98:ea:8c:07:87: 55:79:14:e5:b9:86:ef:70:1b:54:25:8b:1a:75:e8: c8:b6:2c:da:49:f2:1e:29:cb:22:94:68:c5:51:c0: 9a:a1:b9:f1:13:3f:b5:38:ae:93:34:fb:d9:0c:fb: e3:ca:d2:bc:13:35:c7:69:5f:8e:65:49:a5:5a:2d: e2:37:d9:cd:15:e5:8a:48:1c:7c:90:33:4c:b8:da: f7:78:d9:4a:ea:a0:b5:f9:bb:19:98:e8:18:23:7a: af:6d:ed:7c:d7:80:f1:4f:38:7a:e8:15:6b:06:f5: 1d:ce:94:27:9c:7b:8c:71:83:9d:27:08:d3:47:31: e8:16:ae:60:1c:12:4a:02:0b:9c:7a:84:7e:0c:bd: 46:91:d1:1f:2b:1f:19:44:ee:35:f2:aa:51:2b:93: 22:21:a1:94:31:26:d6:30:29:1c:04:d9:ea:ad:f3: 45:8e:3e:78:f1:e7:e5:7f:da:ef:49:93:e4:e3:3f: cf:62:95:06:29:3d:34:66:78:2f:0b:a3:84:76:a9: 84:e4:0a:0a:d3:9e:97:84:73:1a:88:8e:51:00:01: a2:09:02:d7:83:6e:75:59:65:90:f7:ed:f5:46:e7: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:75:5B:1F:F1:4F:CF:2D:14:5F:3F:25:E3:98:0A:BF:AB:1C:50 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:eb:4a:a9:d1:d1:3f:01:73:76:65:c4:69:9c:7f:18:e2:8d: a1:c4:17:b0:ac:74:19:b7:08:78:fa:85:be:a9:1d:2e:d4:5d: c1:66:be:dc:2e:13:14:94:67:1d:84:7c:75:ea:b8:02:9e:d3: b3:fa:c6:0b:41:cd:22:54:42:41:41:52:4c:39:f5:52:cb:3f: 34:54:89:d4:08:91:e9:a2:8d:1e:2f:84:04:39:2a:3c:e2:86: 49:ad:e2:82:65:e3:33:4e:a2:76:d1:7f:3a:b7:94:23:9b:94: ff:29:55:94:96:e1:0a:f6:9c:82:8f:2d:60:64:8a:4a:58:c3: a0:ff:61:05:13:58:b1:56:2b:ea:b1:19:cb:4b:01:d0:af:7f: 3b:9c:84:e9:ed:05:65:08:38:9b:ea:b9:60:b0:dd:2b:38:73: 83:67:27:81:81:18:11:86:9e:29:ae:a1:59:c8:72:e3:0f:51: 55:d5:cd:18:7a:95:ae:da:55:4d:9d:37:96:c4:46:77:39:81: 23:e6:01:99:b2:9d:8d:df:e9:6d:5f:a1:08:f4:63:2b:8b:84: c2:1e:0f:42:82:07:8b:39:0e:3c:6c:c2:74:27:bc:0e:1f:4c: 25:9d:d7:b5:b1:4c:9b:65:f6:43:9e:ca:80:6b:c4:e0:06:db: b2:9e:c9:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjQxMTIzMDEzMTUwWhcNMjQxMTMwMDEzMTUwWjAYMRYwFAYD VQQDEw02NzQxMzA4Ny1iYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6gyaJZz8CekwSRBpgh79oK/hPXKFPeVmOqMB4dVeRTluYbvcBtUJYsadejI tizaSfIeKcsilGjFUcCaobnxEz+1OK6TNPvZDPvjytK8EzXHaV+OZUmlWi3iN9nN FeWKSBx8kDNMuNr3eNlK6qC1+bsZmOgYI3qvbe1814DxTzh66BVrBvUdzpQnnHuM cYOdJwjTRzHoFq5gHBJKAguceoR+DL1GkdEfKx8ZRO418qpRK5MiIaGUMSbWMCkc BNnqrfNFjj548eflf9rvSZPk4z/PYpUGKT00ZngvC6OEdqmE5AoK056XhHMaiI5R AAGiCQLXg251WWWQ9+31Ruet4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwCdVsf 8U/PLRRfPyXjmAq/qxxQMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC260qp0dE/AXN2ZcRpnH8Y4o2hxBewrHQZtwh4+oW+qR0u1F3BZr7c LhMUlGcdhHx16rgCntOz+sYLQc0iVEJBQVJMOfVSyz80VInUCJHpoo0eL4QEOSo8 4oZJreKCZeMzTqJ20X86t5Qjm5T/KVWUluEK9pyCjy1gZIpKWMOg/2EFE1ixVivq sRnLSwHQr387nITp7QVlCDib6rlgsN0rOHODZyeBgRgRhp4prqFZyHLjD1FV1c0Y epWu2lVNnTeWxEZ3OYEj5gGZsp2N3+ltX6EI9GMri4TCHg9CggeLOQ48bMJ0J7wO H0wlnde1sUybZfZDnsqAa8TgBtuynsns -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org