$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: Kr7PNINdI6hToRDR20T/gXifDOfufQ8td9vZn9g0n90= Subject key identifier: E0:79:F1:0F:EC:05:06:00:BE:7C:A9:8F:90:2D:62:86:FA:E0:79:67 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 011B Signing time: Thu 21 Nov 2024 03:02:15 +0000 Manifest this update: Thu 21 Nov 2024 03:02:14 +0000 Manifest next update: Thu 28 Nov 2024 03:02:14 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: X/NIMRANnsFmVuUkLPrkJo9ogzEIF5Nn/TnIkSWWRug=) 2: 1FE69168F9CB11EDAF704E7FC4F9AE02.roa (hash: ecoU/18dnE70yGBufRntMgWEavYiNwHveeZ+SS7xzWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Nov 21 03:02:14 2024 GMT Not After : Nov 28 03:02:14 2024 GMT Subject: CN=673ea2b7-39cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:e4:0c:28:f6:12:fb:5a:5f:ce:f6:38:18: f1:9e:de:84:68:2b:4c:ad:21:60:d4:88:46:48:3d: 80:36:b9:e5:c0:8e:26:69:69:87:b5:2f:f3:e0:12: 0e:ea:e4:75:b3:16:93:f2:c6:85:50:bd:f0:1b:d5: 3d:87:a3:8f:78:b1:ac:58:4a:99:f9:55:5f:a2:04: 05:a3:fc:43:ed:51:60:ba:e7:7b:1a:66:0e:a5:ce: 89:f4:70:18:01:d2:f5:2d:31:e1:df:37:c7:6a:7b: 71:17:65:2d:a8:e0:2f:0c:d6:b5:41:49:4d:5a:f7: 15:b3:65:37:81:bf:92:90:cf:63:49:7d:3f:4e:d5: 2e:88:8c:e8:47:82:1b:85:cb:ca:8d:2d:df:be:3b: a9:71:e5:ca:d5:d1:87:3c:58:fe:db:c4:a9:6f:d5: e8:e9:89:ba:a3:b2:a3:36:e1:d6:3c:71:3e:07:c3: a7:4f:0b:ab:74:de:4d:88:5f:71:a1:9b:3e:aa:96: ca:70:31:f7:ee:4c:d4:5a:ec:bc:86:92:cd:d4:37: 60:c0:f3:5b:34:aa:a3:32:6d:16:01:33:26:24:71: 24:f3:b4:7e:1a:d7:25:60:0b:3e:12:81:b8:f1:a4: e6:46:28:b2:69:70:f1:61:85:ea:68:ab:5a:6d:3a: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:F1:0F:EC:05:06:00:BE:7C:A9:8F:90:2D:62:86:FA:E0:79:67 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:46:84:c1:b9:f6:35:17:b8:e7:29:62:c5:7e:f8:57:dc:88: 13:f9:9e:4c:da:fd:fc:05:af:75:a0:74:c8:a5:8e:e0:36:1f: 06:27:a5:b4:ae:3c:49:81:c2:4b:c8:89:25:fd:cd:3a:f6:06: 97:1e:9d:4f:5b:7d:68:43:e3:74:34:a8:52:67:48:47:37:4d: 2a:b7:29:13:17:6f:29:8a:e3:75:7f:26:a1:a2:85:22:51:24: b4:0a:9d:13:66:35:b2:91:ab:69:a4:83:8b:9d:d0:9f:76:6b: 5d:e7:e4:4f:a3:e4:96:56:89:de:ba:f0:60:f8:78:db:a0:2c: 91:18:34:1b:ad:35:2b:84:2e:9f:80:7f:8f:4f:1f:f6:5c:af: c1:d6:a7:f9:4d:12:48:ef:53:09:86:34:97:46:15:bb:6c:10: de:a1:49:47:7e:30:a8:04:5c:80:56:e0:30:15:56:27:22:46: ba:e4:9a:9a:75:17:74:36:8b:e1:21:b2:3f:25:33:02:61:65: a4:6e:66:69:c9:38:00:34:7d:c1:be:d7:fe:27:f6:88:7e:a4: 08:19:c7:61:84:8b:ac:a1:67:c2:ea:66:a9:ab:af:e8:0a:f2: 77:68:57:cf:a1:83:75:16:97:08:4c:45:f8:b5:64:6a:0a:7f: b0:ea:7e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjQxMTIxMDMwMjE0WhcNMjQxMTI4MDMwMjE0WjAYMRYwFAYD VQQDEw02NzNlYTJiNy0zOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrfkDCj2EvtaX872OBjxnt6EaCtMrSFg1IhGSD2ANrnlwI4maWmHtS/z4BIO 6uR1sxaT8saFUL3wG9U9h6OPeLGsWEqZ+VVfogQFo/xD7VFguud7GmYOpc6J9HAY AdL1LTHh3zfHantxF2UtqOAvDNa1QUlNWvcVs2U3gb+SkM9jSX0/TtUuiIzoR4Ib hcvKjS3fvjupceXK1dGHPFj+28Spb9Xo6Ym6o7KjNuHWPHE+B8OnTwurdN5NiF9x oZs+qpbKcDH37kzUWuy8hpLN1DdgwPNbNKqjMm0WATMmJHEk87R+GtclYAs+EoG4 8aTmRiiyaXDxYYXqaKtabTrvhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB58Q/s BQYAvnypj5AtYob64HlnMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwRoTBufY1F7jnKWLFfvhX3IgT+Z5M2v38Ba91oHTIpY7gNh8GJ6W0 rjxJgcJLyIkl/c069gaXHp1PW31oQ+N0NKhSZ0hHN00qtykTF28piuN1fyahooUi USS0Cp0TZjWykatppIOLndCfdmtd5+RPo+SWVoneuvBg+HjboCyRGDQbrTUrhC6f gH+PTx/2XK/B1qf5TRJI71MJhjSXRhW7bBDeoUlHfjCoBFyAVuAwFVYnIka65Jqa dRd0NovhIbI/JTMCYWWkbmZpyTgANH3Bvtf+J/aIfqQIGcdhhIusoWfC6mapq6/o CvJ3aFfPoYN1FpcITEX4tWRqCn+w6n6O -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org