$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: HbNf2ECKddEsaEzT0e1tFqUokkreZf+xU0UrJ6rGVA4= Subject key identifier: 06:88:97:1F:26:E3:17:66:9C:BE:17:57:CF:4F:C2:2B:0C:D2:D1:B3 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1AB6 Signing time: Fri 22 Nov 2024 16:19:42 +0000 Manifest this update: Fri 22 Nov 2024 16:19:41 +0000 Manifest next update: Fri 29 Nov 2024 16:19:41 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: 1E1FlqQTnRjEngYr+UOoHNc+JE4bHrbJ/mDjFBJuctk=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: pX3hZB2u0H4CAS9sABzKZdEPpUmZBg1+59WzYQkXs6s=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: XhTsav0xpJjWdlplehBc3Nc1KWkAolJry5gRZodOyhc=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: WQw5P844ke2McgHsphlVTOCFSi5xiNEtibfYLinSXwQ=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 7ewrZNOz6VL8Fm9zIDpvbHy1sVwX8YMvmb18EChSv50=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: I0EDghQGwSBHllmUxahQGtYN3eNUu0DeWPn3Gpo3r7Y=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: vBN8V5Bwq0M/bzvGvLx2+C7e6WLDDWqvE5nUmzulSrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6898 (0x1af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Nov 22 16:19:41 2024 GMT Not After : Nov 29 16:19:41 2024 GMT Subject: CN=6740af1d-7d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:54:ee:5a:91:ab:93:ab:61:a8:f6:26:cf: 07:11:c6:25:fb:a3:3f:d2:28:04:5a:fa:4e:71:91: 33:6b:e0:22:70:e8:8d:64:ed:73:92:50:d3:43:07: b8:04:ad:81:91:cc:03:ce:b1:1d:54:9c:65:6d:2a: df:c4:8e:65:ff:ff:78:0d:4f:fb:d7:cd:a5:d4:f7: dd:7e:1e:a5:2f:d8:6b:5f:d6:2b:9d:f8:6d:86:c0: c0:43:77:20:3c:29:77:b5:43:c9:d7:a1:ef:c6:06: 8b:37:be:8a:9d:45:cb:f9:b7:dd:40:b3:c3:a4:f1: 36:af:c8:47:61:9b:f9:db:63:ab:00:e4:14:b6:85: c9:5e:de:9a:0c:31:7e:dd:50:f8:1b:34:f6:64:bd: 35:05:e3:32:b4:24:41:71:8d:1c:a5:eb:6e:6d:8c: a4:f2:1d:7c:6d:11:66:9b:ee:cf:af:05:bb:2a:50: 3b:eb:da:f8:76:be:44:a7:6c:c0:aa:b7:f8:cd:d6: df:30:88:9d:e7:72:02:55:55:bd:6e:9b:cd:91:fd: 63:0c:fd:b1:ff:f4:be:1c:7e:cf:c6:73:4f:ba:56: be:ca:95:f2:91:b3:99:17:40:b5:d2:b6:28:b5:0c: e1:19:31:d1:ba:35:8e:36:64:86:ec:58:45:27:ee: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:88:97:1F:26:E3:17:66:9C:BE:17:57:CF:4F:C2:2B:0C:D2:D1:B3 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:b1:3c:95:bd:8e:46:ec:e2:f6:d2:1e:fc:7b:1d:e6:9e:57: 15:58:9a:a6:41:03:f4:a4:21:27:1b:2b:9d:54:34:ff:53:51: 7d:c2:c3:a2:2b:93:0b:00:cf:b1:6a:d1:14:80:e4:71:74:3e: 68:8e:1f:73:f3:96:ee:9f:ae:37:d8:f1:92:b1:2d:2f:e7:3f: 53:81:68:3c:dd:c0:f4:6f:ba:9b:0b:34:42:78:a7:62:19:61: 05:aa:c5:e1:29:4f:b2:34:30:f8:27:ce:e5:77:3c:75:2e:3f: ca:01:52:1a:49:b3:3c:b8:1c:7c:78:cc:1a:11:81:c5:ac:0d: 09:76:58:85:4f:a1:79:6b:2d:23:36:e0:46:0f:63:4c:33:ea: 5a:7c:4d:fb:b3:ba:a1:70:c1:74:34:51:f7:b4:b2:c9:24:8a: 73:4d:39:e9:54:9e:6e:9c:17:5a:86:12:cc:ca:12:2a:bd:1e: 31:85:3b:7c:dc:1c:f5:82:f8:fc:a7:ca:66:e3:ea:05:0f:a4: 89:e3:82:62:5a:90:18:82:db:b7:80:f0:a6:27:14:3e:e7:1e: c1:f0:25:e2:ba:14:b2:42:7e:e3:15:94:45:8d:1b:76:06:ed: ea:0a:7d:b9:c8:bb:b6:8e:f1:17:05:dd:84:ef:bb:bd:9b:3a: f3:fa:59:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjQxMTIyMTYxOTQxWhcNMjQxMTI5MTYxOTQxWjAYMRYwFAYD VQQDEw02NzQwYWYxZC03ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS9U7lqRq5OrYaj2Js8HEcYl+6M/0igEWvpOcZEza+AicOiNZO1zklDTQwe4 BK2BkcwDzrEdVJxlbSrfxI5l//94DU/7182l1Pfdfh6lL9hrX9YrnfhthsDAQ3cg PCl3tUPJ16HvxgaLN76KnUXL+bfdQLPDpPE2r8hHYZv522OrAOQUtoXJXt6aDDF+ 3VD4GzT2ZL01BeMytCRBcY0cpetubYyk8h18bRFmm+7PrwW7KlA769r4dr5Ep2zA qrf4zdbfMIid53ICVVW9bpvNkf1jDP2x//S+HH7PxnNPula+ypXykbOZF0C10rYo tQzhGTHRujWONmSG7FhFJ+708QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaIlx8m 4xdmnL4XV89PwisM0tGzMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWsTyVvY5G7OL20h78ex3mnlcVWJqmQQP0pCEnGyudVDT/U1F9wsOi K5MLAM+xatEUgORxdD5ojh9z85bun6432PGSsS0v5z9TgWg83cD0b7qbCzRCeKdi GWEFqsXhKU+yNDD4J87ldzx1Lj/KAVIaSbM8uBx8eMwaEYHFrA0JdliFT6F5ay0j NuBGD2NMM+pafE37s7qhcMF0NFH3tLLJJIpzTTnpVJ5unBdahhLMyhIqvR4xhTt8 3Bz1gvj8p8pm4+oFD6SJ44JiWpAYgtu3gPCmJxQ+5x7B8CXiuhSyQn7jFZRFjRt2 Bu3qCn25yLu2jvEXBd2E77u9mzrz+llU -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:13 2024 by rpki-client on console-ams.rpki-client.org