$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: igS9mK3J8TZ+jhOq7puIVTlaNa+xIf6sx5AKWVo4S30= Subject key identifier: 1B:7E:1E:8F:0F:38:FA:F7:FF:39:3D:2F:22:9D:61:10:4B:B1:5C:0D Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 3468 Signing time: Fri 22 Nov 2024 14:39:51 +0000 Manifest this update: Fri 22 Nov 2024 14:39:51 +0000 Manifest next update: Fri 29 Nov 2024 14:39:51 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: ExE2zPQ9SeTppLHpXwCy87VG03NjpsIhVgO5CXFd50M=) 2: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: qZAVkSzcZQmgtOiJLSZ9m4PSMAWinI3/7bD0ytrkeyA=) 3: ED4D396C9DC711EFBE0D254CC4F9AE02.roa (hash: yUa4B2pBNnIm9dAhXQslyqF5BHgKeMJh+D3Bup8OKRs=) 4: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: um5n8atyzeoR8iKANdYR7vhmWocpmppM47bkyObk5w4=) 5: 767438B6A18911EF8B1A1A24C4F9AE02.roa (hash: 6ljZhAmca6eYlGVVDeXkQkKMg1g/auOmvNyuvBxOQN0=) 6: DC4CF7C4BECE11EA9F27811CC4F9AE02.roa (hash: EOIU3SGjaG3yoWQkMK90rrbkd5uHcov0oh9wII9VG+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Nov 22 14:39:51 2024 GMT Not After : Nov 29 14:39:51 2024 GMT Subject: CN=674097b7-c30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:bf:41:76:3d:1b:02:72:5d:56:7b:47:d5: 34:25:f0:f5:d0:33:e3:33:c8:22:e1:48:9b:ab:0b: 0f:a7:89:2e:9b:1f:6d:93:4e:12:16:5b:aa:ad:98: 4a:cd:ce:9c:e7:b5:64:de:e1:aa:0f:46:93:1f:26: 93:9d:16:1c:f4:de:f0:af:d8:ac:22:ee:92:13:9a: 79:ec:a9:62:87:e0:72:92:f7:3c:b4:00:9e:ac:1f: 42:1a:27:e3:63:d5:28:03:f9:b0:11:18:e0:ae:d8: 34:74:08:f6:ce:ec:ca:c8:a1:34:71:3d:b7:15:45: 8c:30:ec:63:91:28:84:52:2c:df:1a:c9:8c:d3:f1: 2d:60:ef:8b:6b:af:a7:a7:a6:fd:c2:77:1a:a3:00: b2:ac:38:57:e3:db:8b:e4:c1:05:42:0f:b7:2e:4a: c2:9e:41:12:56:5a:11:03:f7:d1:d9:23:6e:56:22: cf:2c:92:e9:59:90:ab:6c:d5:32:bc:11:0c:37:a8: d0:c0:e7:16:cb:3e:f2:e6:80:e0:34:2e:cc:ff:a9: 03:c7:e8:48:08:00:ac:b2:e3:a2:42:0f:c9:7c:d4: 3c:a7:d8:3f:27:04:01:d8:78:51:1c:83:22:4f:c9: 9e:92:24:0c:d7:b9:c1:dc:54:0b:f2:81:a8:64:c3: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:1E:8F:0F:38:FA:F7:FF:39:3D:2F:22:9D:61:10:4B:B1:5C:0D X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e8:85:ea:dc:9d:ce:7d:ac:43:f9:3b:e9:62:4c:24:e9:06: 4c:4e:fc:68:45:2a:19:1f:96:35:1f:16:71:ff:0e:34:76:d9: c0:73:31:5d:52:ba:93:bd:3f:f3:a7:b7:bb:cb:1c:87:5e:0b: 4a:08:8d:18:ef:d6:98:8d:e9:d2:38:4e:f4:28:e5:6e:2a:96: a7:86:41:a8:fc:15:57:3f:cf:91:fc:2a:74:57:fe:63:23:f8: 29:25:2c:ca:61:a2:27:f5:06:87:2d:e1:bc:83:19:8d:9a:e2: 2a:d9:0e:af:fc:29:2a:36:1e:e3:d2:d1:9a:6e:d6:7e:f1:6b: ab:4c:29:0f:98:a4:42:ab:0d:23:8e:e5:3d:2b:f0:98:7f:14: f4:5c:14:b7:5f:71:9f:90:eb:36:ec:2f:4f:78:59:4f:13:7c: 35:a4:33:eb:07:06:c8:fa:03:38:7d:cf:31:db:cb:7a:5f:d5: 86:52:c2:60:a0:a9:98:a0:78:09:64:fc:f9:54:8b:c0:b4:d0: a0:31:78:f1:77:26:9a:16:cb:e9:77:e8:51:3d:32:93:ef:38: 1a:dc:82:5f:d6:c4:51:ea:dd:3f:81:2e:2a:5d:b6:91:a0:6e: ca:15:84:ae:f7:c6:7a:5e:86:7f:18:8c:f6:e5:5c:bb:0c:6e: 8b:8a:d5:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQxMTIyMTQzOTUxWhcNMjQxMTI5MTQzOTUxWjAYMRYwFAYD VQQDEw02NzQwOTdiNy1jMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVe/QXY9GwJyXVZ7R9U0JfD10DPjM8gi4UibqwsPp4kumx9tk04SFluqrZhK zc6c57Vk3uGqD0aTHyaTnRYc9N7wr9isIu6SE5p57Klih+Bykvc8tACerB9CGifj Y9UoA/mwERjgrtg0dAj2zuzKyKE0cT23FUWMMOxjkSiEUizfGsmM0/EtYO+La6+n p6b9wncaowCyrDhX49uL5MEFQg+3LkrCnkESVloRA/fR2SNuViLPLJLpWZCrbNUy vBEMN6jQwOcWyz7y5oDgNC7M/6kDx+hICACssuOiQg/JfNQ8p9g/JwQB2HhRHIMi T8mekiQM17nB3FQL8oGoZMPlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt+Ho8P OPr3/zk9LyKdYRBLsVwNMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE6IXq3J3OfaxD+TvpYkwk6QZMTvxoRSoZH5Y1HxZx/w40dtnAczFd UrqTvT/zp7e7yxyHXgtKCI0Y79aYjenSOE70KOVuKpanhkGo/BVXP8+R/Cp0V/5j I/gpJSzKYaIn9QaHLeG8gxmNmuIq2Q6v/CkqNh7j0tGabtZ+8WurTCkPmKRCqw0j juU9K/CYfxT0XBS3X3GfkOs27C9PeFlPE3w1pDPrBwbI+gM4fc8x28t6X9WGUsJg oKmYoHgJZPz5VIvAtNCgMXjxdyaaFsvpd+hRPTKT7zga3IJf1sRR6t0/gS4qXbaR oG7KFYSu98Z6XoZ/GIz25Vy7DG6LitXt -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org