$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: +3MsxFbMuTOzkOwBBF5QHzpaE7KLLXyxDahs3PiFMSc= Subject key identifier: B8:8D:EE:A4:A0:DD:03:EE:4E:B6:D2:18:23:5E:AE:75:5F:86:F8:85 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 344B Signing time: Fri 22 Nov 2024 14:34:35 +0000 Manifest this update: Fri 22 Nov 2024 14:34:34 +0000 Manifest next update: Fri 29 Nov 2024 14:34:34 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: RYCL6TYnboHQZ9y9uTvqjNJG84h2bJhMkxcDkPahkIw=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: d0P/BKes6SbSKV4r9lK1XjzU3f1Gv4sq1ihkJ2akzQw=) 3: 42F41E56B0D011E5A58E097CC4F9AE02.roa (hash: +zLz9F1a9aSQzTKp4936Bb16x1cm8uy1LOruq1QDW6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Nov 22 14:34:34 2024 GMT Not After : Nov 29 14:34:34 2024 GMT Subject: CN=6740967a-cedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:b8:dd:32:c9:7a:ad:b0:a8:15:80:20:98: a5:af:9d:22:c9:e3:23:4d:74:11:99:c9:9d:ef:fc: 46:29:d5:ab:c9:62:67:44:06:f9:57:86:d9:8b:22: f3:1f:c5:58:cb:2a:ef:43:12:b6:74:02:90:53:7d: 82:08:7f:ef:0a:1e:cc:ef:fb:90:1f:89:bd:c6:20: db:75:3d:5d:37:3e:ad:75:c0:00:be:5d:c4:11:87: 16:e5:55:3f:bf:3f:d4:86:f8:70:24:ee:7e:6c:e1: 01:ef:25:11:9c:ff:34:05:bc:0b:18:d6:9e:11:35: 3e:a2:69:6d:44:0f:f5:94:21:cc:72:3f:b2:6a:02: a7:fc:32:ae:73:b5:8b:42:5f:19:eb:e3:98:98:c8: a1:ab:9b:28:df:f8:ae:39:a9:18:0d:42:bb:d2:c5: 46:7d:40:69:75:a5:0e:f6:09:f9:f8:07:9c:41:5b: 3a:d0:9f:54:95:98:32:b8:d1:14:c6:de:aa:7a:04: 64:c5:ee:c8:45:e3:5f:7e:ad:04:9d:10:3b:c1:de: 30:33:ab:f2:90:34:45:33:f7:9e:d9:b5:76:5c:bf: 98:23:3d:23:6d:a5:f9:19:2d:ad:5e:88:79:81:0a: d4:80:76:9a:00:3e:cb:30:88:99:32:94:fe:88:40: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8D:EE:A4:A0:DD:03:EE:4E:B6:D2:18:23:5E:AE:75:5F:86:F8:85 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:91:2a:86:8f:bd:37:ef:a4:8c:a0:46:cd:28:53:a0:1a: aa:b3:84:57:af:75:a0:6e:cf:ba:2b:40:1b:da:e8:67:ea:3d: a1:ba:ca:17:9f:eb:22:be:35:9f:99:b4:50:87:8b:b1:cf:59: ff:e2:23:d4:36:61:f4:21:bf:41:c0:43:f4:c1:e8:98:72:b6: f0:ac:40:4a:34:77:dd:42:08:9a:8a:fc:66:d3:77:2b:71:b9: bb:26:04:90:2f:55:4b:0e:db:43:dd:9d:9d:68:0c:94:d9:f4: 4f:88:02:04:61:ae:d0:79:f7:6d:3d:33:7d:19:96:fe:58:7d: 90:90:3c:47:5c:3f:ad:1e:a8:48:1a:3c:89:30:39:44:91:8a: 1f:4e:e7:42:16:a6:4d:3d:d1:0a:b8:84:99:72:e7:85:ac:5e: f1:12:6f:46:5b:ea:a7:65:d9:9f:cb:5d:8e:fc:e9:60:4e:02: 88:30:e7:44:b3:6e:7d:1d:5f:bb:d7:16:bf:eb:a4:a7:a4:9b: 48:55:b1:ea:8e:b3:d3:71:ae:e8:88:b3:f0:ff:04:c4:7b:96: 59:2d:47:11:58:40:08:68:3d:ce:35:2e:ae:2f:3c:f2:59:49: 10:16:8d:24:ea:ff:51:84:27:12:3f:8c:3a:1a:09:38:5d:d5: 1d:af:ad:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjQxMTIyMTQzNDM0WhcNMjQxMTI5MTQzNDM0WjAYMRYwFAYD VQQDEw02NzQwOTY3YS1jZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8+43TLJeq2wqBWAIJilr50iyeMjTXQRmcmd7/xGKdWryWJnRAb5V4bZiyLz H8VYyyrvQxK2dAKQU32CCH/vCh7M7/uQH4m9xiDbdT1dNz6tdcAAvl3EEYcW5VU/ vz/UhvhwJO5+bOEB7yURnP80BbwLGNaeETU+omltRA/1lCHMcj+yagKn/DKuc7WL Ql8Z6+OYmMihq5so3/iuOakYDUK70sVGfUBpdaUO9gn5+AecQVs60J9UlZgyuNEU xt6qegRkxe7IReNffq0EnRA7wd4wM6vykDRFM/ee2bV2XL+YIz0jbaX5GS2tXoh5 gQrUgHaaAD7LMIiZMpT+iECUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiN7qSg 3QPuTrbSGCNernVfhviFMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBli5Eqho+9N++kjKBGzShToBqqs4RXr3Wgbs+6K0Ab2uhn6j2husoX n+sivjWfmbRQh4uxz1n/4iPUNmH0Ib9BwEP0weiYcrbwrEBKNHfdQgiaivxm03cr cbm7JgSQL1VLDttD3Z2daAyU2fRPiAIEYa7QefdtPTN9GZb+WH2QkDxHXD+tHqhI GjyJMDlEkYofTudCFqZNPdEKuISZcueFrF7xEm9GW+qnZdmfy12O/OlgTgKIMOdE s259HV+71xa/66SnpJtIVbHqjrPTca7oiLPw/wTEe5ZZLUcRWEAIaD3ONS6uLzzy WUkQFo0k6v9RhCcSP4w6Ggk4XdUdr60u -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:39 2024 by rpki-client on console-fra.rpki-client.org