$ rpki-client -vvf rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft File: Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft (raw, json) Hash identifier: zKqqAAZJSL3rQq6K0CDLLcjhs37PiUlOkImjwpAwHoc= Subject key identifier: 33:60:20:8C:A2:32:6F:A4:68:FE:03:5F:11:3B:55:62:06:85:60:E9 Authority key identifier: 1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4 Certificate issuer: /CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4 Certificate serial: 0EE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft Manifest number: 0ED9 Signing time: Fri 22 Nov 2024 17:38:06 +0000 Manifest this update: Fri 22 Nov 2024 17:38:06 +0000 Manifest next update: Fri 29 Nov 2024 17:38:06 +0000 Files and hashes: 1: Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl (hash: GCaJ4BzyBEOma2Hu6m1igPc8AVlT9ERjpyTFzRB/YL4=) 2: AD8C3CF46FC111E9B6D55F15C4F9AE02.roa (hash: eK3TIXZU++KT77U0gOV6eFDrKQRn1O/nNJMoTFYBGpc=) 3: AECBAA0A6FC111E9B6D55F15C4F9AE02.roa (hash: gOGeTyq0y8qliMLsYXjJfoXemDXj/2xSpizuevOuzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3813 (0xee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4 Validity Not Before: Nov 22 17:38:06 2024 GMT Not After : Nov 29 17:38:06 2024 GMT Subject: CN=6740c17e-3dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:ab:f9:9f:c0:9d:cc:dd:41:67:5f:84:27: 10:0d:3a:c6:1f:bd:69:8a:3d:2b:cc:20:79:06:ed: ce:58:f0:bf:d9:cd:b5:6b:37:d2:e3:ae:d5:41:84: ce:1a:5b:63:1a:2a:b3:f2:34:d2:79:39:d9:59:34: ad:74:6c:f3:80:f3:8c:74:a0:9a:a7:e4:61:93:19: 9b:28:00:6c:49:f5:31:82:5f:a7:4c:85:03:be:b0: 4f:01:8a:2a:af:3a:db:b7:73:8c:9d:91:0d:1e:93: a4:18:e4:9b:af:f9:c0:ca:da:48:87:d6:74:24:ec: ab:17:e4:9b:ff:73:96:e4:bf:96:0c:db:45:ca:63: 1b:8e:80:77:16:15:68:f0:c9:94:21:b2:d7:fd:77: 6c:74:b7:2b:9b:41:eb:f5:f0:f7:01:f9:09:f4:06: cb:7e:f3:08:41:41:2a:01:d9:eb:75:db:b9:ab:2b: 94:59:15:31:92:ec:5d:d7:72:21:7c:13:a7:c2:ca: 4d:d0:64:2b:0c:11:0f:6e:87:b3:aa:3d:25:90:d7: e0:b4:c6:90:2e:20:2d:73:a5:ed:b2:0e:32:dc:f3: e0:f8:8a:92:e7:81:45:96:da:cd:36:16:2b:85:82: 8a:38:a3:f9:44:5a:c9:ee:9b:10:13:7d:17:0b:51: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:60:20:8C:A2:32:6F:A4:68:FE:03:5F:11:3B:55:62:06:85:60:E9 X509v3 Authority Key Identifier: keyid:1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c4:b7:66:3a:d3:18:66:be:dd:0b:b8:a4:43:d5:5c:95:f4: 95:d5:13:4e:eb:8b:41:63:19:05:96:79:ec:70:d7:00:13:0d: 31:1d:10:ef:4a:62:76:a0:b6:bd:20:68:06:26:37:e3:f6:cb: ce:6e:c9:56:6c:e5:2a:7b:41:ad:89:ab:47:4a:fa:20:2b:07: c2:34:13:cf:17:69:39:c1:34:9f:e5:f5:8c:29:6e:91:e3:1e: 16:d9:9f:38:76:37:9c:ca:53:80:d2:52:9a:7d:a5:cd:04:da: 61:53:5c:be:a0:86:62:26:81:31:65:2b:9b:de:c0:cd:d0:fa: e7:0f:94:80:fc:b6:bb:f6:83:45:ca:5b:6b:f8:91:be:62:62: 00:e1:b4:5d:97:72:02:40:f5:31:f9:f1:bb:07:54:1c:f2:88: 3b:02:f2:77:6e:78:f9:17:7e:84:78:02:02:5a:19:07:fa:4a: 9a:2b:b1:90:53:18:f6:45:87:a1:e0:db:55:15:a4:b2:75:5c: ff:36:ec:b3:5b:c0:47:54:05:5b:ba:f9:e3:51:d4:b8:0b:5f: 3b:2c:45:98:2a:62:d8:ed:e8:10:aa:5d:a1:9c:d4:bd:43:12: da:78:21:08:1d:f4:54:a3:88:3f:a2:1e:bf:42:c3:55:30:5e: 6f:9b:af:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4OUQxMTAvBgNVBAUTKDFGMjgxRUZBNDA1QzhCQkIzRDlERjhENTgxRDhDNTgz MUFBMTlBRTQwHhcNMjQxMTIyMTczODA2WhcNMjQxMTI5MTczODA2WjAYMRYwFAYD VQQDEw02NzQwYzE3ZS0zZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo+r+Z/AnczdQWdfhCcQDTrGH71pij0rzCB5Bu3OWPC/2c21azfS467VQYTO GltjGiqz8jTSeTnZWTStdGzzgPOMdKCap+RhkxmbKABsSfUxgl+nTIUDvrBPAYoq rzrbt3OMnZENHpOkGOSbr/nAytpIh9Z0JOyrF+Sb/3OW5L+WDNtFymMbjoB3FhVo 8MmUIbLX/XdsdLcrm0Hr9fD3AfkJ9AbLfvMIQUEqAdnrddu5qyuUWRUxkuxd13Ih fBOnwspN0GQrDBEPboezqj0lkNfgtMaQLiAtc6Xtsg4y3PPg+IqS54FFltrNNhYr hYKKOKP5RFrJ7psQE30XC1FfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNgIIyi Mm+kaP4DXxE7VWIGhWDpMB8GA1UdIwQYMBaAFB8oHvpAXIu7PZ341YHYxYMaoZrk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg5RC8yMDBEM0U2QTZG QzAxMUU5QTA3RDFCMTJDNEY5QUUwMi9IeWdlLWtCY2k3czluZmpWZ2RqRmd4cWht dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5Z2Uta0JjaTdzOW5malZnZGpGZ3hxaG11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg5RC8yMDBEM0U2QTZGQzAxMUU5QTA3RDFCMTJDNEY5QUUwMi9IeWdlLWtCY2k3 czluZmpWZ2RqRmd4cWhtdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJxLdmOtMYZr7dC7ikQ9VclfSV1RNO64tBYxkFlnnscNcAEw0xHRDv SmJ2oLa9IGgGJjfj9svObslWbOUqe0GtiatHSvogKwfCNBPPF2k5wTSf5fWMKW6R 4x4W2Z84djecylOA0lKafaXNBNphU1y+oIZiJoExZSub3sDN0PrnD5SA/La79oNF yltr+JG+YmIA4bRdl3ICQPUx+fG7B1Qc8og7AvJ3bnj5F36EeAICWhkH+kqaK7GQ Uxj2RYeh4NtVFaSydVz/NuyzW8BHVAVbuvnjUdS4C187LEWYKmLY7egQql2hnNS9 QxLaeCEIHfRUo4g/oh6/QsNVMF5vm68y -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org