$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: RJUKqLOzeWN923rAhuLJ9BA8HO/S//vtgnofrJrffbk= Subject key identifier: D5:6C:FD:D3:60:26:DC:7B:25:AE:33:FC:15:E8:10:61:E3:C2:92:A8 Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 0172 Signing time: Sat 23 Nov 2024 02:11:55 +0000 Manifest this update: Sat 23 Nov 2024 02:11:55 +0000 Manifest next update: Sat 30 Nov 2024 02:11:55 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: HNP9kYdv2V6SjW97592Pyr4ye5Qc8arg1Lx13cYwncw=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: rrPEmKXiVA4a8WLwDvdoL75de2L3H/mip5CkrpQQib0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Nov 23 02:11:55 2024 GMT Not After : Nov 30 02:11:55 2024 GMT Subject: CN=674139eb-6f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:60:b6:0d:a2:3e:bc:6b:c0:84:af:59:c3: 79:97:6a:1b:50:69:80:52:08:55:1c:7f:a0:e8:d5: 57:30:bc:69:f0:1f:eb:15:7c:47:0b:8e:3a:04:81: e3:ef:93:32:a2:13:c4:64:ee:33:53:49:d4:9a:03: ab:33:f5:ef:e1:a7:af:86:98:d9:01:20:34:05:7f: 2a:1c:be:a2:6d:54:29:99:91:c6:ee:e8:38:13:54: 3a:cc:90:f8:d8:31:9a:9a:b3:50:81:ff:21:4f:fa: ed:0a:6f:20:cc:5f:0e:df:84:ea:14:d4:86:f6:7a: 37:60:75:30:d6:6a:38:13:ff:e5:4c:25:23:1f:65: 89:59:ba:5d:c1:80:15:07:10:43:9f:c1:d0:12:4f: 22:9c:88:5d:13:57:9b:2b:59:32:11:46:9e:50:05: 95:70:99:33:98:b3:4b:5b:fa:d5:12:4b:91:02:a8: 73:97:c5:0c:11:0c:53:ca:97:7f:23:da:b5:d1:65: 39:1b:1b:50:97:78:cf:31:85:40:fe:f1:ef:76:12: 91:36:25:a3:84:72:ad:06:be:a6:42:ec:16:7b:48: 04:b2:4b:eb:b7:55:c6:4d:41:ad:7e:91:e1:4e:f6: 23:40:3b:de:cc:7d:d2:27:c3:00:0f:35:55:34:9d: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:FD:D3:60:26:DC:7B:25:AE:33:FC:15:E8:10:61:E3:C2:92:A8 X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:59:0b:56:5c:51:ea:0e:a6:ec:c0:e2:f8:a6:5a:21:79:1c: aa:6e:a7:dd:da:90:24:67:b2:e0:99:eb:c7:89:52:49:cf:8b: 78:7c:5d:4d:31:db:12:3f:dc:db:8c:ee:15:6d:3f:b4:d2:82: f1:59:54:ba:db:f6:50:60:1f:62:5d:09:6b:c6:d9:f2:79:57: e4:ba:4f:14:4d:7d:cc:88:5f:a7:8b:d5:11:85:5c:3f:c3:7f: b7:95:30:3d:a6:aa:5d:7a:22:e0:55:61:ab:0a:0e:c3:09:3c: ef:13:41:a5:c1:ba:13:4f:34:37:5f:c2:ca:2d:95:fa:4f:0a: 68:42:2d:06:01:95:61:53:7c:bb:b4:83:81:43:a8:83:7a:67: 76:dd:b5:ed:f8:a8:f0:97:f1:e5:d9:85:04:46:10:8a:14:a5: a6:d1:ae:52:a6:13:94:84:6c:07:98:f2:66:ce:5d:0b:2e:96: 83:ba:1d:59:dd:31:67:eb:61:04:68:c2:86:f9:fd:ba:6b:3a: 1a:c7:db:fa:8b:9a:01:a1:df:d1:e4:ad:b3:1a:99:41:9d:fc: 1a:21:c6:21:0a:58:a0:cb:12:0e:4e:27:12:f4:66:95:b7:87: 08:b4:6f:8a:b2:a1:b2:b6:22:30:8b:bc:c2:d4:31:ad:53:0a: 12:2b:55:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjQxMTIzMDIxMTU1WhcNMjQxMTMwMDIxMTU1WjAYMRYwFAYD VQQDEw02NzQxMzllYi02ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Bgtg2iPrxrwISvWcN5l2obUGmAUghVHH+g6NVXMLxp8B/rFXxHC446BIHj 75MyohPEZO4zU0nUmgOrM/Xv4aevhpjZASA0BX8qHL6ibVQpmZHG7ug4E1Q6zJD4 2DGamrNQgf8hT/rtCm8gzF8O34TqFNSG9no3YHUw1mo4E//lTCUjH2WJWbpdwYAV BxBDn8HQEk8inIhdE1ebK1kyEUaeUAWVcJkzmLNLW/rVEkuRAqhzl8UMEQxTypd/ I9q10WU5GxtQl3jPMYVA/vHvdhKRNiWjhHKtBr6mQuwWe0gEskvrt1XGTUGtfpHh TvYjQDvezH3SJ8MADzVVNJ1bSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVs/dNg Jtx7Ja4z/BXoEGHjwpKoMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWQtWXFHqDqbswOL4ploheRyqbqfd2pAkZ7LgmevHiVJJz4t4fF1N MdsSP9zbjO4VbT+00oLxWVS62/ZQYB9iXQlrxtnyeVfkuk8UTX3MiF+ni9URhVw/ w3+3lTA9pqpdeiLgVWGrCg7DCTzvE0GlwboTTzQ3X8LKLZX6TwpoQi0GAZVhU3y7 tIOBQ6iDemd23bXt+Kjwl/Hl2YUERhCKFKWm0a5SphOUhGwHmPJmzl0LLpaDuh1Z 3TFn62EEaMKG+f26azoax9v6i5oBod/R5K2zGplBnfwaIcYhCligyxIOTicS9GaV t4cItG+KsqGytiIwi7zC1DGtUwoSK1Up -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org