$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: BYnmyoScAFTBqFYXOnSGQ5BXkC9mX3WTTi0uDLe8AHs= Subject key identifier: FD:3F:03:6D:AB:3F:23:58:37:62:09:0F:95:03:02:F6:CB:64:F3:5C Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 2828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 27CD Signing time: Fri 22 Nov 2024 15:38:36 +0000 Manifest this update: Fri 22 Nov 2024 15:38:36 +0000 Manifest next update: Fri 29 Nov 2024 15:38:36 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: 914w0yYXNTCeUUUd+W2mpjzBouWe09MpllI3HFIK47Q=) 2: E80155244EFD11EF99FE4856C4F9AE02.roa (hash: quRJ9MTCKJH85xA4y8aQPUWLsD7y23VXy1qFflnTOUE=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: 2hcpqbSOO71GKCF97O1xMngLy9TNlcdtInTMrm5iIZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10280 (0x2828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Nov 22 15:38:36 2024 GMT Not After : Nov 29 15:38:36 2024 GMT Subject: CN=6740a57c-5711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:e9:fb:60:81:d4:6b:7f:27:a0:e4:5f:63: b8:e5:fe:cc:a5:ff:09:34:2c:c4:1d:5e:ac:43:17: ca:a9:c9:b3:f7:ff:94:2d:ae:7e:e9:e0:e2:d1:63: 69:50:65:df:a1:42:b8:75:15:aa:99:39:4a:64:7d: 28:2a:4e:3c:56:fa:a1:e2:9c:78:e6:d6:63:c6:d5: 32:5a:9f:9b:6a:bb:cb:a1:4c:6e:61:c5:9d:de:16: 90:d1:17:45:5c:04:c7:84:0f:54:41:94:8d:7f:06: 02:8c:3b:b6:b9:3a:f3:56:32:a2:72:2e:2f:48:67: 06:1c:6f:32:ad:6e:de:21:9d:0d:81:7c:4d:a6:1e: 67:6c:e0:ba:cc:4b:5a:d9:4d:9c:b3:07:b2:0a:f8: d6:47:25:b4:ea:b5:3c:90:34:94:e4:5f:4f:76:88: 3e:f7:fa:1f:93:e5:17:5b:7e:54:3e:5a:14:f7:c7: 5a:85:0c:53:97:79:26:f5:7d:6a:76:8f:da:06:47: 48:43:c9:59:e1:8f:e6:78:db:25:54:d3:10:aa:ad: 77:8d:5b:13:dc:33:06:d9:53:61:b4:a8:bf:35:55: 09:09:4f:db:2a:5d:86:99:f1:10:18:cf:f8:5e:57: bf:c0:2f:9b:51:0c:57:8c:e4:bf:80:15:67:c9:db: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:03:6D:AB:3F:23:58:37:62:09:0F:95:03:02:F6:CB:64:F3:5C X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:e9:b9:92:5c:10:45:73:5b:c9:10:56:75:dd:54:1c:23: 55:ff:7a:4d:dc:05:b7:cc:df:54:df:de:93:d2:21:2b:e0:36: e2:a0:33:65:3a:33:7d:6e:05:f5:06:56:5a:72:34:45:37:c9: c0:aa:9d:cf:99:21:d0:5c:e1:5c:a5:2d:a6:53:5b:41:f6:8b: 92:53:e2:6b:8d:24:d9:b8:ea:58:5e:5b:39:f1:98:89:84:fe: fa:f1:b1:75:cd:ae:cf:d6:ee:2c:5e:83:3d:ac:0e:c2:43:02: bd:f1:2a:da:5b:07:b5:5a:56:11:f3:dc:3c:51:91:b5:3e:92: d6:fe:66:de:f1:52:ba:5b:94:33:87:c1:3c:dd:fa:62:be:87: 80:6c:99:7b:bb:57:1c:da:b9:ff:d9:55:5f:82:dd:71:0b:98: 87:ab:8d:03:52:4b:a1:ba:23:1f:75:24:cd:50:f7:c7:4d:e4: 88:12:0d:98:1f:b1:c7:a5:c9:b1:ab:3e:9b:c7:d0:d1:cf:80: de:83:d4:bf:f6:86:1e:f5:bb:8a:97:19:c2:93:8d:75:6c:99: cf:85:74:75:61:84:74:91:f0:89:6e:8b:c3:cc:54:1f:c0:b5: 9d:a8:cb:df:a3:3c:5a:c7:30:9d:24:3d:7d:91:97:fa:df:55: 98:e6:d3:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjQxMTIyMTUzODM2WhcNMjQxMTI5MTUzODM2WjAYMRYwFAYD VQQDEw02NzQwYTU3Yy01NzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYPp+2CB1Gt/J6DkX2O45f7Mpf8JNCzEHV6sQxfKqcmz9/+ULa5+6eDi0WNp UGXfoUK4dRWqmTlKZH0oKk48Vvqh4px45tZjxtUyWp+barvLoUxuYcWd3haQ0RdF XATHhA9UQZSNfwYCjDu2uTrzVjKici4vSGcGHG8yrW7eIZ0NgXxNph5nbOC6zEta 2U2csweyCvjWRyW06rU8kDSU5F9Pdog+9/ofk+UXW35UPloU98dahQxTl3km9X1q do/aBkdIQ8lZ4Y/meNslVNMQqq13jVsT3DMG2VNhtKi/NVUJCU/bKl2GmfEQGM/4 Xle/wC+bUQxXjOS/gBVnyds0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0/A22r PyNYN2IJD5UDAvbLZPNcMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOoum5klwQRXNbyRBWdd1UHCNV/3pN3AW3zN9U396T0iEr4DbioDNl OjN9bgX1BlZacjRFN8nAqp3PmSHQXOFcpS2mU1tB9ouSU+JrjSTZuOpYXls58ZiJ hP768bF1za7P1u4sXoM9rA7CQwK98SraWwe1WlYR89w8UZG1PpLW/mbe8VK6W5Qz h8E83fpivoeAbJl7u1cc2rn/2VVfgt1xC5iHq40DUkuhuiMfdSTNUPfHTeSIEg2Y H7HHpcmxqz6bx9DRz4Deg9S/9oYe9buKlxnCk411bJnPhXR1YYR0kfCJbovDzFQf wLWdqMvfozxaxzCdJD19kZf631WY5tMF -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org