$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: O2UN7pSLrsSBv++kzVM55A1bvsg8/rIwnZFge9kAUH4= Subject key identifier: 8C:91:D0:63:DD:B0:3F:9C:8A:6A:A2:99:DF:30:F7:1C:00:D2:05:40 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 0309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 02FC Signing time: Sat 23 Nov 2024 00:50:29 +0000 Manifest this update: Sat 23 Nov 2024 00:50:29 +0000 Manifest next update: Sat 30 Nov 2024 00:50:29 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: CpKn5neimtAnNmQZPJvT/XklVNOJUmwugRp8LR9K5+U=) 2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: zs8pktOPHfnvWWzwinv/ESKJvGvVgZacv2SjT79jDzY=) 3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: Qkfcmv4EU2MLLZ10mmkNAoxwMk8NbbQ+23qgsWTS+60=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: NaRD0KK1jvEXy4kbPXxWydeJpUs02KFzpXWmIcbr+ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Nov 23 00:50:29 2024 GMT Not After : Nov 30 00:50:29 2024 GMT Subject: CN=674126d5-29d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:a7:b7:1d:ec:13:59:3b:53:d1:fd:ae:10: e9:97:e2:fe:81:fb:7f:4a:52:4f:d3:35:c7:75:8b: ca:9f:48:45:a2:15:a9:f3:46:1c:a4:40:b9:2b:de: eb:e4:51:00:69:b2:32:e2:7a:d9:db:07:04:18:1e: ac:21:02:ad:08:3a:d5:fc:e3:45:40:2a:dc:57:24: 72:b1:a3:5b:6c:10:bb:ef:e0:ab:31:4d:71:4e:81: b5:f5:ce:19:43:f1:dd:48:7e:66:18:61:39:04:c7: 6a:f3:c9:ad:2b:b8:27:12:8b:04:63:8f:6c:ad:ef: 44:dd:27:88:5d:b0:8f:15:fc:91:4d:2f:d2:81:f9: 63:e7:b0:8b:17:f5:80:27:23:c1:cf:42:ec:e6:90: 4c:7f:7d:b9:5b:a8:bb:2d:09:ce:3d:b7:b2:7d:25: eb:7c:02:72:2b:66:9a:03:0f:05:21:32:4f:93:f1: 37:df:37:df:45:61:18:c0:fc:8f:9d:21:9d:a4:fc: 13:6f:7c:dd:fb:fa:25:5f:75:7a:57:bb:ab:db:c6: 46:63:ba:40:0e:2a:ff:7c:50:31:ca:22:08:2d:5c: cd:b7:b9:ae:43:4b:f9:5c:4d:5f:72:bb:4c:2b:64: f8:58:c4:a6:c9:e6:75:b0:27:07:0f:99:4e:45:47: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:D0:63:DD:B0:3F:9C:8A:6A:A2:99:DF:30:F7:1C:00:D2:05:40 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:96:2c:7d:8c:6e:72:06:7e:9b:a3:87:85:48:bc:9b:6a:eb: 6e:23:dd:90:d4:1b:93:63:58:f8:12:ac:e7:f4:9a:5a:87:6c: 2c:3b:ae:1b:06:00:2a:e6:63:89:d3:29:95:ce:f8:6b:5b:12: bf:61:4d:1f:e4:6f:8c:cb:3b:5b:00:1c:28:a7:5a:19:b6:41: f6:a4:42:38:9d:2b:a9:b9:1b:db:f9:24:64:16:f6:73:c9:e2: 78:06:8c:ba:bf:53:c2:45:65:d1:6b:90:57:e4:0b:79:b1:a0: ef:62:72:14:20:99:a8:f4:04:e5:69:a6:9c:d8:b5:2e:e3:0d: 7e:ad:f3:56:d9:a5:f0:b9:5d:79:22:c7:60:7d:50:98:82:d5: dd:a2:fc:16:f3:fc:22:c5:2e:de:89:65:97:8e:73:c2:0c:49: 19:b3:72:38:8e:d4:d0:39:fc:e2:83:da:da:45:be:5e:c6:cd: 4d:73:48:6f:43:83:ec:37:43:e7:c4:11:2b:29:f2:56:0a:e5: 5d:7d:d4:5c:12:dc:8b:f1:ee:b7:d1:81:74:87:d9:aa:63:20: 0a:45:bf:83:a6:df:b7:d8:66:db:8d:91:66:af:a6:2b:a6:b3: eb:50:a4:df:4e:d2:91:ba:a2:13:0b:33:de:b0:22:5f:16:5c: c5:9e:a2:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjQxMTIzMDA1MDI5WhcNMjQxMTMwMDA1MDI5WjAYMRYwFAYD VQQDEw02NzQxMjZkNS0yOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1quntx3sE1k7U9H9rhDpl+L+gft/SlJP0zXHdYvKn0hFohWp80YcpEC5K97r 5FEAabIy4nrZ2wcEGB6sIQKtCDrV/ONFQCrcVyRysaNbbBC77+CrMU1xToG19c4Z Q/HdSH5mGGE5BMdq88mtK7gnEosEY49sre9E3SeIXbCPFfyRTS/Sgflj57CLF/WA JyPBz0Ls5pBMf325W6i7LQnOPbeyfSXrfAJyK2aaAw8FITJPk/E33zffRWEYwPyP nSGdpPwTb3zd+/olX3V6V7ur28ZGY7pADir/fFAxyiIILVzNt7muQ0v5XE1fcrtM K2T4WMSmyeZ1sCcHD5lORUf3PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyR0GPd sD+cimqimd8w9xwA0gVAMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8lix9jG5yBn6bo4eFSLybautuI92Q1BuTY1j4Eqzn9Jpah2wsO64b BgAq5mOJ0ymVzvhrWxK/YU0f5G+MyztbABwop1oZtkH2pEI4nSupuRvb+SRkFvZz yeJ4Boy6v1PCRWXRa5BX5At5saDvYnIUIJmo9ATlaaac2LUu4w1+rfNW2aXwuV15 IsdgfVCYgtXdovwW8/wixS7eiWWXjnPCDEkZs3I4jtTQOfzig9raRb5exs1Nc0hv Q4PsN0PnxBErKfJWCuVdfdRcEtyL8e630YF0h9mqYyAKRb+Dpt+32GbbjZFmr6Yr prPrUKTfTtKRuqITCzPesCJfFlzFnqKg -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org