$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: QV1uvK21WHQTXPnAKgBKJJap2/ZJlVdK2LVD046/wK8= Subject key identifier: AB:41:67:4A:43:78:D7:24:0A:1C:3D:2B:9A:1E:C0:3D:67:AC:B5:53 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 112C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1118 Signing time: Fri 22 Nov 2024 17:17:13 +0000 Manifest this update: Fri 22 Nov 2024 17:17:12 +0000 Manifest next update: Fri 29 Nov 2024 17:17:12 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: E9yWldBwRDY0eHTMRTJDgcDrTWNgHLmKiReMrNm6lAI=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: C4mKsLu4av6lDwi9z2POYETSEDAk50weN2HJGZRxJyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4396 (0x112c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Nov 22 17:17:12 2024 GMT Not After : Nov 29 17:17:12 2024 GMT Subject: CN=6740bc99-45c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:8a:df:e3:0e:07:af:fa:6c:da:14:e2:e7: 24:f0:7a:03:d1:7f:d1:2f:b8:9d:76:8a:49:f6:d3: 22:6c:87:ab:22:be:4e:1c:cf:43:8e:d1:16:2e:9a: dd:4f:c9:94:c0:89:e4:21:87:09:76:c7:a2:e8:70: 02:32:2d:8a:3b:d9:a5:f0:48:67:27:46:1d:55:86: eb:48:46:29:62:23:12:14:ce:b0:73:0b:70:1c:6b: 72:fd:67:e5:db:ac:95:af:dd:f5:8c:c1:dc:dd:cc: 4c:91:59:83:a4:92:06:87:4f:44:7c:0f:e6:04:f8: 33:4b:a6:b8:3c:3e:5a:e4:62:52:46:b0:28:65:65: b3:60:34:30:34:41:e6:f8:5e:af:e4:1b:2b:71:d1: bd:3b:6d:e8:e4:4a:1f:ea:d5:53:67:4b:1c:24:f4: 76:45:15:20:ba:a7:d6:c1:5e:90:1d:a4:71:8b:89: a3:19:fe:69:cf:62:4a:90:bc:2d:0e:06:24:51:55: ef:f2:92:1b:3a:fb:b6:b8:7c:52:82:91:e7:90:d3: a4:17:36:49:0e:3e:22:05:3d:f1:91:c8:b3:4e:c7: 0b:81:d7:5a:1c:8e:c2:85:f4:29:c7:fc:9b:79:10: 23:6c:92:91:3a:0f:cc:41:aa:40:75:e8:a1:a0:ca: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:67:4A:43:78:D7:24:0A:1C:3D:2B:9A:1E:C0:3D:67:AC:B5:53 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:13:20:f9:16:2e:da:64:b4:f4:e2:00:9b:97:87:19:a7:e6: ce:98:97:e7:25:d8:d3:6a:a7:32:57:af:f6:81:a5:94:eb:70: 69:04:37:5c:08:98:fe:9d:c0:1b:e8:33:d4:7f:f7:32:00:f4: 3c:59:e7:40:89:73:66:81:ef:47:ad:ff:ae:eb:ac:a8:fa:4d: a8:bc:2a:ab:a2:58:e4:c7:ae:dc:b9:90:67:2c:5d:5d:9c:fd: 8c:55:57:12:f1:57:d8:98:ff:ed:ca:b1:ff:ab:27:e8:6c:01: 43:a1:61:5c:5e:70:a8:98:33:af:fd:0b:55:d0:69:56:6e:83: cf:d5:c0:77:b3:df:fb:d4:da:20:c9:f1:6a:e1:ea:7a:da:c8: 3c:6b:e5:88:a3:72:c5:01:95:66:c3:00:b7:d4:0b:02:35:36: 88:8b:1f:f3:68:1e:3f:37:06:b8:8a:c9:19:26:2b:9a:ff:ac: f1:6b:d1:fb:2a:6a:36:4e:71:73:21:6f:67:97:8d:6e:99:35: 8e:b3:82:fa:9a:b4:f5:33:e9:dd:a4:86:f9:cd:e7:00:79:5c: 38:c2:01:f4:a6:80:ab:a2:e9:a4:68:7b:ba:be:0b:47:f1:bc: 1c:0a:6b:5f:3b:d7:5b:ac:74:72:de:eb:85:01:65:77:d4:be: 79:e1:21:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjQxMTIyMTcxNzEyWhcNMjQxMTI5MTcxNzEyWjAYMRYwFAYD VQQDEw02NzQwYmM5OS00NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36OK3+MOB6/6bNoU4uck8HoD0X/RL7iddopJ9tMibIerIr5OHM9DjtEWLprd T8mUwInkIYcJdsei6HACMi2KO9ml8EhnJ0YdVYbrSEYpYiMSFM6wcwtwHGty/Wfl 26yVr931jMHc3cxMkVmDpJIGh09EfA/mBPgzS6a4PD5a5GJSRrAoZWWzYDQwNEHm +F6v5BsrcdG9O23o5Eof6tVTZ0scJPR2RRUguqfWwV6QHaRxi4mjGf5pz2JKkLwt DgYkUVXv8pIbOvu2uHxSgpHnkNOkFzZJDj4iBT3xkcizTscLgddaHI7ChfQpx/yb eRAjbJKROg/MQapAdeihoMpdAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtBZ0pD eNckChw9K5oewD1nrLVTMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0EyD5Fi7aZLT04gCbl4cZp+bOmJfnJdjTaqcyV6/2gaWU63BpBDdc CJj+ncAb6DPUf/cyAPQ8WedAiXNmge9Hrf+u66yo+k2ovCqroljkx67cuZBnLF1d nP2MVVcS8VfYmP/tyrH/qyfobAFDoWFcXnComDOv/QtV0GlWboPP1cB3s9/71Nog yfFq4ep62sg8a+WIo3LFAZVmwwC31AsCNTaIix/zaB4/Nwa4iskZJiua/6zxa9H7 Kmo2TnFzIW9nl41umTWOs4L6mrT1M+ndpIb5zecAeVw4wgH0poCroumkaHu6vgtH 8bwcCmtfO9dbrHRy3uuFAWV31L554SF/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org