$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: ZXGv/A07zkaHLp6Xn/ggmOOsP4a2mNCeDv9yBTVhYGY= Subject key identifier: 8A:1A:F1:3E:20:EE:82:D0:B3:97:7D:79:8D:BE:27:B8:7E:0B:B5:A2 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0BE2 Signing time: Fri 22 Nov 2024 18:28:51 +0000 Manifest this update: Fri 22 Nov 2024 18:28:51 +0000 Manifest next update: Fri 29 Nov 2024 18:28:51 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: vVIX053zDqmir1OY9sirC71a6SYCfXNJNL03eGVRFzs=) 2: 418D45209C8211EC86AE3D68C4F9AE02.roa (hash: 80+4dsWRof5L+puEO/VeUwF0dp0Li3VXu/HCPqHeOCg=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: lyUehFh7P1Nj8wAaGxO9Xwa9iQVVvDVqALRfc9EBW8o=) 4: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Nov 22 18:28:51 2024 GMT Not After : Nov 29 18:28:51 2024 GMT Subject: CN=6740cd63-ff21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:d0:2e:08:e5:6f:c1:53:9c:80:ab:98:10: 57:4a:a6:a3:9c:de:96:25:42:d2:ae:40:1a:2e:d6: f9:0c:11:34:27:e6:26:38:29:5c:c7:39:cb:e8:c3: 10:8a:36:f1:f2:c0:d2:55:cb:5d:c1:b1:bd:d1:a0: 6e:1b:2e:a0:e0:4f:00:4d:6d:91:b5:1f:76:c7:a2: ea:f7:6d:ef:35:5b:98:f9:a8:86:3d:f6:8a:01:2a: 68:a7:88:5f:d6:ea:5b:38:1b:3d:d8:7c:6a:20:c3: f6:2b:1f:78:a0:27:11:64:cb:dd:19:3d:bf:5f:cb: be:c0:7f:61:a9:9d:fc:d9:49:07:15:86:b0:2b:c8: aa:74:b7:ce:e2:d4:79:0e:af:07:ec:0d:d7:36:9b: dd:2c:32:79:2d:80:88:66:1b:d0:72:cd:f4:a3:9f: 5e:31:61:d4:3e:7b:bf:62:7c:94:fb:0c:ba:fb:96: 88:b5:e3:d5:34:cf:ab:e4:77:37:2d:9a:bb:c1:0c: b8:e7:e9:2c:17:01:8a:0a:ed:32:4d:a0:38:9a:ca: dd:e9:75:3b:1c:fd:f6:58:90:56:bc:58:48:45:8e: ff:de:db:c8:2b:b8:23:71:9a:26:54:cb:2f:60:c3: 63:4d:ed:e8:34:c1:1b:35:30:a7:6b:a5:ea:ab:b5: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1A:F1:3E:20:EE:82:D0:B3:97:7D:79:8D:BE:27:B8:7E:0B:B5:A2 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:11:e8:56:a1:85:55:56:64:55:41:f4:88:49:fb:c9:46:de: 31:52:2e:8c:f3:f2:19:29:82:21:fe:14:4e:df:d8:1b:d0:3f: 87:1f:26:62:dd:e3:f4:d3:f5:95:fa:1d:35:dd:08:d6:42:80: 65:13:58:93:c1:f4:25:35:31:96:43:bf:7f:c8:ab:e0:ab:c4: 9e:25:eb:37:1a:da:28:62:00:bb:be:c9:db:70:4d:ae:48:d9: 87:27:4e:a3:c2:04:85:20:f3:e8:fa:73:4a:81:f0:b9:7a:44: 14:d7:fe:bb:80:12:d4:ba:aa:81:64:34:a5:8c:ff:90:5d:9e: 4f:8c:21:50:b2:b5:3c:55:7e:4e:1d:a7:09:85:0b:50:f0:c7: fa:ef:a6:da:e2:b7:70:b7:96:3e:88:66:d4:64:2b:10:ba:5b: 14:8f:c5:4d:c9:b7:50:e7:c5:59:58:83:12:a5:cd:ab:57:5c: 5b:97:51:21:59:19:65:ea:60:da:72:15:6a:76:89:0a:a4:94: a1:54:24:61:49:fc:81:c5:eb:ed:e3:1f:1d:81:98:55:be:3a: ee:e4:62:ae:4a:04:6c:33:a5:78:00:57:3e:14:4d:56:e4:38: c4:3e:af:5c:fb:4c:2f:90:f8:87:72:97:02:6b:30:fe:dc:b8: 1d:da:59:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjQxMTIyMTgyODUxWhcNMjQxMTI5MTgyODUxWjAYMRYwFAYD VQQDEw02NzQwY2Q2My1mZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+rQLgjlb8FTnICrmBBXSqajnN6WJULSrkAaLtb5DBE0J+YmOClcxznL6MMQ ijbx8sDSVctdwbG90aBuGy6g4E8ATW2RtR92x6Lq923vNVuY+aiGPfaKASpop4hf 1upbOBs92HxqIMP2Kx94oCcRZMvdGT2/X8u+wH9hqZ382UkHFYawK8iqdLfO4tR5 Dq8H7A3XNpvdLDJ5LYCIZhvQcs30o59eMWHUPnu/YnyU+wy6+5aItePVNM+r5Hc3 LZq7wQy45+ksFwGKCu0yTaA4msrd6XU7HP32WJBWvFhIRY7/3tvIK7gjcZomVMsv YMNjTe3oNMEbNTCna6Xqq7WdcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoa8T4g 7oLQs5d9eY2+J7h+C7WiMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFEehWoYVVVmRVQfSISfvJRt4xUi6M8/IZKYIh/hRO39gb0D+HHyZi 3eP00/WV+h013QjWQoBlE1iTwfQlNTGWQ79/yKvgq8SeJes3GtooYgC7vsnbcE2u SNmHJ06jwgSFIPPo+nNKgfC5ekQU1/67gBLUuqqBZDSljP+QXZ5PjCFQsrU8VX5O HacJhQtQ8Mf676ba4rdwt5Y+iGbUZCsQulsUj8VNybdQ58VZWIMSpc2rV1xbl1Eh WRll6mDachVqdokKpJShVCRhSfyBxevt4x8dgZhVvjru5GKuSgRsM6V4AFc+FE1W 5DjEPq9c+0wvkPiHcpcCazD+3Lgd2llW -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org