$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft File: Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json) Hash identifier: IgMVnb2FHyiTKoqJfAsSwYOGIFfc7C7ki0p4oXfwBsc= Subject key identifier: 29:A5:B0:38:52:CC:1B:41:3F:74:18:2C:DF:D8:B6:B7:CB:E3:AB:BF Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft Manifest number: 025E Signing time: Thu 21 Nov 2024 01:17:36 +0000 Manifest this update: Thu 21 Nov 2024 01:17:35 +0000 Manifest next update: Thu 28 Nov 2024 01:17:35 +0000 Files and hashes: 1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: 9WLkpcvEjX5WohTG0px25f/f6pFPgx+3huKIs1appIE=) 2: 4E599D46D08C11EDA9AD6A83C4F9AE02.roa (hash: cCLgwqH5Yirqdg5bQDrZWiZuGNbfPk46QOGAasVqJM0=) 3: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=) 4: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Validity Not Before: Nov 21 01:17:35 2024 GMT Not After : Nov 28 01:17:35 2024 GMT Subject: CN=673e8a2f-d625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:0d:e5:12:a5:04:3e:ae:3e:39:81:d6:30: 49:41:6f:b3:d9:2e:e0:5d:91:99:03:0d:a6:f8:bb: a7:8f:f3:7c:7f:16:a8:ae:e0:ad:18:10:76:3a:63: c1:a1:cd:36:2e:eb:ab:8a:8b:c9:2e:2c:f3:6b:6e: 41:eb:c7:26:c9:47:25:8e:08:c6:21:ec:1d:9c:41: 28:7c:05:4b:46:7c:6e:d2:73:bb:22:d2:28:61:3f: 6d:cd:2f:b8:d8:2f:7a:0e:8b:5b:7b:9a:29:96:36: f5:21:cf:21:81:88:ba:63:ff:06:dc:bf:a1:9c:2e: fc:26:ac:43:95:d0:ee:e9:61:83:5b:8c:12:f2:74: 9c:2a:50:5f:d0:f9:4b:e8:93:d1:9c:3f:54:fe:8e: 32:0b:fd:c3:af:98:41:d3:86:f1:41:12:f2:88:4d: 9d:55:bb:4f:72:73:b6:46:3f:ff:1d:42:a6:ff:11: 3a:af:07:61:48:bf:29:32:e6:5e:12:1f:8e:4f:cb: 9a:14:cc:cb:00:82:9a:6c:ef:9f:75:cb:7e:da:46: 2c:40:2e:d6:3c:75:e2:10:71:f9:07:a3:51:27:a4: 56:91:b0:ac:31:47:73:b9:46:57:31:b9:58:8a:fc: 22:e5:30:f8:bd:80:39:20:0a:c9:d5:64:db:8f:70: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:B0:38:52:CC:1B:41:3F:74:18:2C:DF:D8:B6:B7:CB:E3:AB:BF X509v3 Authority Key Identifier: keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d2:f6:42:b1:38:3d:05:dc:9f:e0:23:b8:74:eb:44:4c:8d: 6c:d3:cb:2e:f5:65:b3:7c:52:9a:d2:ce:bb:20:d6:25:9d:a4: 98:6d:40:69:4a:a1:ce:3c:b1:ea:d7:b6:12:bb:0f:f0:3a:25: df:11:a3:c9:0c:99:fd:3d:06:45:86:19:c0:ce:cf:d9:73:b9: c7:a6:f7:42:38:25:f7:8f:5b:a3:14:ab:cd:87:6c:80:47:df: d6:cc:e1:ec:52:e4:54:c4:f5:b5:b2:56:7a:b3:a6:d3:e9:8c: 60:96:fc:10:f4:4b:47:2a:95:98:a7:39:5d:eb:36:53:83:da: fe:ec:bc:5a:f5:c5:e5:c3:c1:22:70:23:eb:79:4c:5c:bc:b3: a7:59:fd:db:f8:df:ed:67:6a:76:b5:7b:ec:3d:bc:fd:05:27: 81:54:b9:8e:77:ce:fb:9d:c7:2b:e8:0f:83:d7:7a:11:45:ec: 4d:ac:5c:17:84:c7:98:59:dc:fe:98:2c:b3:28:a8:d3:ea:70: cb:d9:ad:f9:97:c0:df:a8:a6:c4:80:35:2d:c4:6c:98:09:b3: 7c:5c:d2:31:50:f9:42:96:dc:6f:e0:67:b4:58:7d:70:b3:4c: a3:b9:9b:b0:d7:6b:9b:fd:66:f4:97:fb:3e:68:d0:d5:72:c9: 45:b7:45:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF QzhGQjgyQjUwHhcNMjQxMTIxMDExNzM1WhcNMjQxMTI4MDExNzM1WjAYMRYwFAYD VQQDEw02NzNlOGEyZi1kNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5MN5RKlBD6uPjmB1jBJQW+z2S7gXZGZAw2m+Lunj/N8fxaoruCtGBB2OmPB oc02LuuriovJLizza25B68cmyUcljgjGIewdnEEofAVLRnxu0nO7ItIoYT9tzS+4 2C96Dotbe5opljb1Ic8hgYi6Y/8G3L+hnC78JqxDldDu6WGDW4wS8nScKlBf0PlL 6JPRnD9U/o4yC/3Dr5hB04bxQRLyiE2dVbtPcnO2Rj//HUKm/xE6rwdhSL8pMuZe Eh+OT8uaFMzLAIKabO+fdct+2kYsQC7WPHXiEHH5B6NRJ6RWkbCsMUdzuUZXMblY ivwi5TD4vYA5IArJ1WTbj3COswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmlsDhS zBtBP3QYLN/YtrfL46u/MB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2 QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFDNC8xQ0I1M0YzMEY2QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9h VVViU2g5Z1FLeWJzajdnclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO0vZCsTg9Bdyf4CO4dOtETI1s08su9WWzfFKa0s67INYlnaSYbUBp SqHOPLHq17YSuw/wOiXfEaPJDJn9PQZFhhnAzs/Zc7nHpvdCOCX3j1ujFKvNh2yA R9/WzOHsUuRUxPW1slZ6s6bT6YxglvwQ9EtHKpWYpzld6zZTg9r+7Lxa9cXlw8Ei cCPreUxcvLOnWf3b+N/tZ2p2tXvsPbz9BSeBVLmOd877nccr6A+D13oRRexNrFwX hMeYWdz+mCyzKKjT6nDL2a35l8DfqKbEgDUtxGyYCbN8XNIxUPlCltxv4Ge0WH1w s0yjuZuw12ub/Wb0l/s+aNDVcslFt0Xp -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org