$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: kTw//EleBpN+ICDQMFik5lRs607tmPuHyEK1pdJ2bEg= Subject key identifier: FF:7E:68:F7:B8:E2:A3:03:AC:0E:A4:41:6F:89:F2:5D:3F:95:DE:78 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 03CB Signing time: Sat 23 Nov 2024 00:13:38 +0000 Manifest this update: Sat 23 Nov 2024 00:13:37 +0000 Manifest next update: Sat 30 Nov 2024 00:13:37 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: 3IvEpz2kzK8Ge4LntadTcyZC41ax00s2M5+Y4MvBMZc=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Nov 23 00:13:37 2024 GMT Not After : Nov 30 00:13:37 2024 GMT Subject: CN=67411e31-67e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:c2:69:da:0c:9a:e8:79:c9:16:57:d0:b5: b5:7e:ab:51:eb:fe:c5:d8:2b:73:cf:97:f6:c0:ca: f2:dc:de:5b:34:ba:89:9f:b0:13:1e:a9:0d:cb:61: 08:f4:88:a1:d2:80:7b:af:13:b6:70:af:30:1c:b8: d6:e5:25:aa:9a:14:0f:2b:89:12:de:f3:63:a2:86: e1:3d:01:58:87:d6:89:cf:77:f6:fc:75:e4:d9:52: b3:77:87:fc:7f:40:8c:87:ac:4f:9c:b0:56:db:90: 25:4b:44:21:96:b7:53:f2:4b:47:92:da:bb:87:83: 68:56:e9:5d:53:a4:8c:d7:84:b6:0d:55:8a:07:85: 17:d6:33:ac:a7:2e:66:c0:45:da:cd:6a:91:0e:7e: 96:3a:54:1f:95:71:0b:21:23:96:41:4c:00:63:bf: b3:da:52:0a:24:b5:5c:1c:68:5e:b2:03:6b:8d:81: 28:9e:5c:0d:f8:ab:c4:4c:03:e2:05:3e:29:49:fb: e8:d4:25:ef:2b:4c:19:3f:0f:ec:77:64:5c:ce:e7: 8c:55:c7:3c:8d:27:9e:83:3d:e6:b7:b5:fc:70:e1: ce:ef:4b:16:b1:eb:20:1f:c3:2c:46:47:0a:5e:98: 51:9d:9b:be:ce:92:b3:d0:ea:0a:bd:2c:75:aa:64: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:68:F7:B8:E2:A3:03:AC:0E:A4:41:6F:89:F2:5D:3F:95:DE:78 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:80:98:44:e2:4d:7d:0a:39:2a:35:ca:7e:ba:62:61:58: dd:05:20:07:9f:03:dc:36:b1:cf:44:fd:ea:ee:bf:c2:25:16: af:e8:26:ca:9b:a5:1b:4a:48:64:4e:47:4d:5b:4c:17:56:e4: 3d:8b:62:83:6a:2a:48:20:49:64:3e:b8:05:73:c0:02:3d:ea: d7:4b:cc:86:1a:99:c1:c9:75:27:1c:63:2e:87:77:ff:9a:6c: 31:48:26:dd:0b:1a:dd:d3:98:6f:ed:b6:4d:70:ba:81:c1:39: dc:bb:1b:06:94:c4:37:d9:4f:67:6b:5d:4a:c0:f6:2c:1f:1a: 68:32:26:b6:04:95:a1:86:16:90:e0:a6:55:ee:bb:e1:88:7a: 87:dd:6d:4d:03:5c:8f:4a:0f:97:b1:be:d4:d5:62:cd:77:b6: b1:94:f5:56:7b:86:d6:af:a6:9f:33:a0:ae:0d:0c:13:e3:63: 1d:46:6e:7e:2d:3b:20:80:6d:88:b4:51:97:ea:d0:03:06:49: 4a:9d:ba:ed:9f:fc:33:5f:77:43:b1:0a:16:20:b5:94:22:74: c5:85:be:57:07:f3:8d:58:c8:71:5f:15:55:a0:88:9d:4e:14: 65:6f:15:89:97:1c:04:38:d9:53:4c:f2:fa:c5:35:b1:98:89: 20:cc:3d:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjQxMTIzMDAxMzM3WhcNMjQxMTMwMDAxMzM3WjAYMRYwFAYD VQQDEw02NzQxMWUzMS02N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjzCadoMmuh5yRZX0LW1fqtR6/7F2Ctzz5f2wMry3N5bNLqJn7ATHqkNy2EI 9Iih0oB7rxO2cK8wHLjW5SWqmhQPK4kS3vNjoobhPQFYh9aJz3f2/HXk2VKzd4f8 f0CMh6xPnLBW25AlS0QhlrdT8ktHktq7h4NoVuldU6SM14S2DVWKB4UX1jOspy5m wEXazWqRDn6WOlQflXELISOWQUwAY7+z2lIKJLVcHGhesgNrjYEonlwN+KvETAPi BT4pSfvo1CXvK0wZPw/sd2RczueMVcc8jSeegz3mt7X8cOHO70sWsesgH8MsRkcK XphRnZu+zpKz0OoKvSx1qmTNgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9+aPe4 4qMDrA6kQW+J8l0/ld54MB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGrICYROJNfQo5KjXKfrpiYVjdBSAHnwPcNrHPRP3q7r/CJRav6CbK m6UbSkhkTkdNW0wXVuQ9i2KDaipIIElkPrgFc8ACPerXS8yGGpnByXUnHGMuh3f/ mmwxSCbdCxrd05hv7bZNcLqBwTncuxsGlMQ32U9na11KwPYsHxpoMia2BJWhhhaQ 4KZV7rvhiHqH3W1NA1yPSg+Xsb7U1WLNd7axlPVWe4bWr6afM6CuDQwT42MdRm5+ LTsggG2ItFGX6tADBklKnbrtn/wzX3dDsQoWILWUInTFhb5XB/ONWMhxXxVVoIid ThRlbxWJlxwEONlTTPL6xTWxmIkgzD1Y -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org