$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: Ygoz+2SwLdPzHqVTQSbx3kIMLSI8YgaBdCJ3ndir1Mo= Subject key identifier: A4:3C:AC:A2:C1:6B:07:5B:2F:37:E5:A2:57:73:F4:14:DC:54:49:80 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 05E3 Signing time: Fri 22 Nov 2024 22:28:05 +0000 Manifest this update: Fri 22 Nov 2024 22:28:05 +0000 Manifest next update: Fri 29 Nov 2024 22:28:05 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: PaNPfKDPVdU36rigozC6G3VmmAVWCpl/XD0QbxMx0os=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: KhL2UpD4+JEk2XkKaHze+InIObaOwuuu6V/1R5qYpXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Nov 22 22:28:05 2024 GMT Not After : Nov 29 22:28:05 2024 GMT Subject: CN=67410575-b1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:e2:5d:09:ab:15:19:6a:54:4f:09:2d:e4: 1e:65:5e:71:87:88:d3:db:a2:f2:ea:60:90:86:9d: 35:5e:0b:e4:20:1f:f2:70:24:e4:72:ba:4a:0a:b8: fb:47:ad:49:a1:5a:ba:66:49:79:f1:49:0a:26:35: ee:96:f3:ee:99:7f:ab:e0:4d:c8:57:88:e3:1b:9f: 08:5d:23:a2:90:ca:b5:c3:a3:6c:8a:73:61:ff:d4: 67:06:d7:f5:fe:e9:e5:47:1b:31:87:06:f4:ea:06: 3e:6f:ad:14:e7:27:08:57:15:41:f3:77:98:1e:79: 44:4e:d7:c8:e4:fa:17:78:73:00:7b:49:b4:1b:14: 42:98:89:4f:b9:52:37:7a:0b:5f:75:29:b8:83:af: 25:5a:63:45:14:70:8c:53:33:27:3b:91:b5:d2:68: fe:83:aa:16:0c:17:90:76:ee:fe:8e:7c:7d:a7:d6: 82:7c:b6:10:56:c9:64:02:b4:3e:83:d2:06:c6:ec: e6:6b:38:c5:bd:67:78:e6:4a:38:60:13:54:42:2d: 81:46:9a:6a:e5:08:42:cf:ca:90:51:62:2e:f8:15: 4f:d5:8b:92:29:b8:56:35:e7:07:cc:9e:da:2f:cb: 7f:73:2f:00:0a:d7:b2:2b:7c:32:11:78:a4:f8:85: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3C:AC:A2:C1:6B:07:5B:2F:37:E5:A2:57:73:F4:14:DC:54:49:80 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:93:da:49:39:d3:b1:ef:be:ee:1a:3a:82:ef:22:1b:cc: f8:85:b9:49:f5:99:f8:00:07:7a:70:76:fb:46:38:a4:c6:e6: 45:51:61:dc:c1:5e:c4:68:18:2a:77:38:14:e9:9c:c7:34:b5: d8:5d:af:e7:88:3c:a4:3b:01:b2:d6:43:33:56:ad:60:41:80: 39:84:d6:b1:29:33:9e:43:81:39:cc:40:91:27:b8:0e:98:bf: 26:50:49:17:62:10:06:0e:5e:18:0c:78:cf:42:3a:1c:83:62: ac:22:b8:a0:14:44:e9:b3:13:e8:5b:81:de:51:47:d0:52:64: d2:cd:6e:75:df:13:23:5e:e8:22:fd:42:2b:cb:fe:53:ed:f1: 88:43:b5:4c:b7:19:8d:e1:48:f3:df:33:75:9e:c1:cf:6d:25: 02:57:68:e6:2a:cd:e7:01:b0:bf:b6:31:f7:c7:7a:ee:9c:77: 57:64:45:3c:ed:88:0c:72:92:f4:f6:b4:3e:d4:64:a3:e9:13: df:6d:18:86:f7:a2:45:55:2c:c8:92:82:a8:96:0a:e5:44:50: 52:21:75:f0:15:11:14:56:8e:1b:cb:78:f9:90:dc:ff:32:db: 9c:cc:6e:58:a3:5f:9e:0b:42:33:a6:d1:a8:3d:05:85:ad:8c: 0c:56:e9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjQxMTIyMjIyODA1WhcNMjQxMTI5MjIyODA1WjAYMRYwFAYD VQQDEw02NzQxMDU3NS1iMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGHiXQmrFRlqVE8JLeQeZV5xh4jT26Ly6mCQhp01XgvkIB/ycCTkcrpKCrj7 R61JoVq6Zkl58UkKJjXulvPumX+r4E3IV4jjG58IXSOikMq1w6NsinNh/9RnBtf1 /unlRxsxhwb06gY+b60U5ycIVxVB83eYHnlETtfI5PoXeHMAe0m0GxRCmIlPuVI3 egtfdSm4g68lWmNFFHCMUzMnO5G10mj+g6oWDBeQdu7+jnx9p9aCfLYQVslkArQ+ g9IGxuzmazjFvWd45ko4YBNUQi2BRppq5QhCz8qQUWIu+BVP1YuSKbhWNecHzJ7a L8t/cy8ACteyK3wyEXik+IWt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ8rKLB awdbLzfloldz9BTcVEmAMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcvJPaSTnTse++7ho6gu8iG8z4hblJ9Zn4AAd6cHb7RjikxuZFUWHc wV7EaBgqdzgU6ZzHNLXYXa/niDykOwGy1kMzVq1gQYA5hNaxKTOeQ4E5zECRJ7gO mL8mUEkXYhAGDl4YDHjPQjocg2KsIrigFETpsxPoW4HeUUfQUmTSzW513xMjXugi /UIry/5T7fGIQ7VMtxmN4Ujz3zN1nsHPbSUCV2jmKs3nAbC/tjH3x3runHdXZEU8 7YgMcpL09rQ+1GSj6RPfbRiG96JFVSzIkoKolgrlRFBSIXXwFREUVo4by3j5kNz/ MtuczG5Yo1+eC0IzptGoPQWFrYwMVulM -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org