$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: NyT/iz9xniZIfA2n4EaGp+JAQUwqRNU/r0xpzFbYchw= Subject key identifier: DD:A9:80:92:80:E5:42:A5:17:3B:B5:10:DD:4D:89:09:E7:B0:02:2E Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 16F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 16F6 Signing time: Fri 22 Nov 2024 16:38:23 +0000 Manifest this update: Fri 22 Nov 2024 16:38:23 +0000 Manifest next update: Fri 29 Nov 2024 16:38:23 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: HkUBfRt3UdgIrzBritsC8mIa5eGA3V+mo48gyMNS/mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5878 (0x16f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Nov 22 16:38:23 2024 GMT Not After : Nov 29 16:38:23 2024 GMT Subject: CN=6740b37f-f7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:a1:50:16:0d:1e:14:e8:a8:08:db:aa:cb: 5a:24:42:97:25:ed:63:95:cb:9e:f2:86:f9:27:90: a5:09:5e:3e:11:50:97:77:03:9c:45:9a:a1:80:f3: fd:b8:8c:d8:02:cb:7f:8a:8a:d2:8d:0c:96:55:ce: e5:0f:35:b5:1f:28:1b:0f:93:86:a7:88:07:cf:77: 68:03:3d:9a:19:f9:4a:24:55:61:f7:da:4f:35:50: 67:22:fb:04:6a:5e:61:bb:56:c7:c8:8e:41:bd:b2: ee:06:bf:c7:2a:9d:48:11:09:16:61:8f:14:1f:35: 08:ea:37:03:ff:58:da:72:a6:9a:78:f9:5b:04:ae: 4b:bd:a2:a6:89:28:63:3b:88:a2:9b:87:54:dc:b9: 3c:a9:87:22:cb:be:f1:a7:5d:87:09:87:80:c5:fa: 47:37:65:b9:a9:06:6c:63:9c:15:6c:50:98:bc:96: 25:5e:52:fd:47:68:ee:2d:66:70:91:95:b9:c0:ea: de:95:ac:c5:70:47:2b:06:7d:64:86:36:74:44:c3: ea:af:51:be:be:42:d0:42:9f:32:c0:f5:f5:84:4a: 40:41:46:c6:a7:67:0a:4c:4e:ee:3f:9c:26:e5:89: d2:b1:de:e5:ad:e2:35:05:5a:42:0c:62:80:b5:0b: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A9:80:92:80:E5:42:A5:17:3B:B5:10:DD:4D:89:09:E7:B0:02:2E X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1f:ca:13:38:13:da:d3:b6:4c:d2:63:20:18:21:19:b1:95: d7:33:c6:d3:27:2a:6f:87:5f:f1:4d:f7:e4:e2:a7:f6:f6:93: 0d:12:2b:de:30:36:82:fa:4a:35:f7:ea:69:de:de:df:36:64: e2:25:f9:24:c9:62:cf:6c:29:97:65:4c:54:cb:78:19:0e:5c: b2:b2:05:57:71:7a:b4:7d:07:fe:6a:19:f6:47:28:0a:64:81: 65:cd:bf:bd:fe:b6:66:31:80:f2:fa:d4:cd:e6:c8:3d:df:3f: 6d:37:95:94:5c:36:31:5a:28:74:38:9f:e3:51:83:22:7c:d2: 39:e4:14:b9:29:0f:ba:a7:75:8e:de:a4:c6:7d:b2:a0:4d:06: 9f:2b:3d:3c:28:07:49:ec:0b:80:7d:c8:a0:1f:1a:d6:1e:e2: 90:12:38:29:f3:42:38:94:6b:fc:6e:09:36:f8:c5:7a:3d:0a: ce:a6:28:81:a1:e5:b0:51:46:98:b4:35:10:1e:6c:f5:6b:84: 1d:53:57:96:9a:6c:3d:61:fa:37:d7:d3:dc:e9:12:34:2e:73: c4:f2:32:53:be:1c:7f:a9:70:9e:52:bd:82:c4:ce:43:32:6f: d4:63:88:f1:27:7f:6e:03:81:07:1f:6d:23:db:cd:9f:5a:69: 56:1d:ec:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjQxMTIyMTYzODIzWhcNMjQxMTI5MTYzODIzWjAYMRYwFAYD VQQDEw02NzQwYjM3Zi1mN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCyhUBYNHhToqAjbqstaJEKXJe1jlcue8ob5J5ClCV4+EVCXdwOcRZqhgPP9 uIzYAst/iorSjQyWVc7lDzW1HygbD5OGp4gHz3doAz2aGflKJFVh99pPNVBnIvsE al5hu1bHyI5BvbLuBr/HKp1IEQkWYY8UHzUI6jcD/1jacqaaePlbBK5LvaKmiShj O4iim4dU3Lk8qYciy77xp12HCYeAxfpHN2W5qQZsY5wVbFCYvJYlXlL9R2juLWZw kZW5wOrelazFcEcrBn1khjZ0RMPqr1G+vkLQQp8ywPX1hEpAQUbGp2cKTE7uP5wm 5YnSsd7lreI1BVpCDGKAtQudoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2pgJKA 5UKlFzu1EN1NiQnnsAIuMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9H8oTOBPa07ZM0mMgGCEZsZXXM8bTJypvh1/xTffk4qf29pMNEive MDaC+ko19+pp3t7fNmTiJfkkyWLPbCmXZUxUy3gZDlyysgVXcXq0fQf+ahn2RygK ZIFlzb+9/rZmMYDy+tTN5sg93z9tN5WUXDYxWih0OJ/jUYMifNI55BS5KQ+6p3WO 3qTGfbKgTQafKz08KAdJ7AuAfcigHxrWHuKQEjgp80I4lGv8bgk2+MV6PQrOpiiB oeWwUUaYtDUQHmz1a4QdU1eWmmw9Yfo319Pc6RI0LnPE8jJTvhx/qXCeUr2CxM5D Mm/UY4jxJ39uA4EHH20j282fWmlWHex0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org