$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: MyAg9sPwawaVJvpPYdy3A5dsnqQh46d0xbHSVAoADLE= Subject key identifier: 9C:FD:E2:4A:AF:9B:73:73:34:2C:8B:22:53:89:68:E0:04:11:AD:FF Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 02B8 Signing time: Sat 23 Nov 2024 01:02:52 +0000 Manifest this update: Sat 23 Nov 2024 01:02:52 +0000 Manifest next update: Sat 30 Nov 2024 01:02:52 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: c//ur1oUTR3lNY4M8luE5kguJH0uCaUDi3BrL7Xsk/o=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 3vg65+dFIA+BeOKO6jxWCKMxKp60+BuPw8DF4AA/5hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Nov 23 01:02:52 2024 GMT Not After : Nov 30 01:02:52 2024 GMT Subject: CN=674129bc-2f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:21:5c:a5:72:fb:5e:3d:63:b8:7c:68:dc: 45:d0:e1:4f:95:69:01:2e:d3:1e:13:0c:85:a9:bd: f6:ec:87:fe:bb:8c:ac:ca:ce:0c:3b:38:48:89:b0: 1f:bc:f9:5a:a9:bd:de:42:2d:25:79:04:6b:03:46: ac:c8:f3:82:89:e5:c7:6e:0e:65:e0:22:4f:86:49: 71:da:b9:0c:fd:43:9e:71:9a:f1:ec:fb:e8:0a:61: 52:f4:b7:0a:11:9e:73:9c:d1:15:79:94:76:94:a4: dd:f9:4e:86:7a:bb:a9:4a:d1:90:03:32:01:98:1c: 97:e8:70:af:ff:cd:8d:03:72:cf:77:1a:2b:d1:b2: a2:3e:63:6f:43:7d:03:49:1a:24:ce:a7:04:f4:9f: 5e:7f:d2:cb:01:72:3a:62:3d:24:58:aa:ba:34:9c: a9:d2:c9:d1:58:dc:6b:6b:29:3c:8c:9e:91:9f:6e: 26:2c:0e:66:0a:01:f1:00:00:27:a6:93:39:0d:2a: 79:0d:03:03:59:e1:bc:68:75:1d:1b:9c:0b:c1:c1: a6:4a:2c:27:5b:76:6c:22:ca:8b:19:73:69:23:ac: e4:c0:2c:f1:7f:ba:45:b3:8a:ea:be:10:63:72:7a: f0:2d:09:1d:5b:f8:b2:ee:2a:49:5f:20:e1:44:8a: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:E2:4A:AF:9B:73:73:34:2C:8B:22:53:89:68:E0:04:11:AD:FF X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d9:75:7e:71:ba:ff:2f:fe:95:f3:ce:a9:e9:25:fb:b6:11: ca:7c:fe:2b:12:ef:da:d8:70:ac:10:6b:ec:38:01:7b:7a:79: 35:6a:b3:25:b3:92:4d:ed:cc:e9:be:db:b7:a1:80:97:61:a4: fc:4f:a7:ae:eb:d7:27:3d:7b:2b:cd:58:76:32:d9:c7:74:50: e0:5f:31:05:05:04:78:b1:52:b6:98:e1:ad:af:49:59:e9:98: 63:d4:c1:d6:62:de:a1:92:50:94:24:a8:de:d3:e8:67:d0:5d: 6f:f2:ae:93:97:44:80:3c:a3:b8:02:32:0a:8e:2e:ae:8e:84: e7:f2:fd:7e:5d:44:9c:90:58:f7:6f:0e:a2:c2:31:83:d7:34: 64:d7:dd:94:19:8a:ed:61:01:e1:c3:c6:5d:85:f8:2f:85:48: 1d:58:6d:67:c2:a8:6a:bd:5f:17:e9:f6:12:7c:d7:40:0f:1f: 51:cb:de:d6:e2:d8:28:fa:e7:28:22:7b:78:41:cd:2a:e4:e0: 9b:5f:42:1f:af:7e:fe:c1:52:38:98:83:90:f9:09:fa:e6:8a: b4:3c:ac:5f:4a:23:25:88:0a:dc:e6:e0:10:0b:95:fd:7d:72: 1a:fe:1c:c7:3e:bb:f8:6a:c6:7d:cf:70:5d:e1:d7:6c:65:a7: 28:c3:ad:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjQxMTIzMDEwMjUyWhcNMjQxMTMwMDEwMjUyWjAYMRYwFAYD VQQDEw02NzQxMjliYy0yZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I4hXKVy+149Y7h8aNxF0OFPlWkBLtMeEwyFqb327If+u4ysys4MOzhIibAf vPlaqb3eQi0leQRrA0asyPOCieXHbg5l4CJPhklx2rkM/UOecZrx7PvoCmFS9LcK EZ5znNEVeZR2lKTd+U6GerupStGQAzIBmByX6HCv/82NA3LPdxor0bKiPmNvQ30D SRokzqcE9J9ef9LLAXI6Yj0kWKq6NJyp0snRWNxrayk8jJ6Rn24mLA5mCgHxAAAn ppM5DSp5DQMDWeG8aHUdG5wLwcGmSiwnW3ZsIsqLGXNpI6zkwCzxf7pFs4rqvhBj cnrwLQkdW/iy7ipJXyDhRIr6lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz94kqv m3NzNCyLIlOJaOAEEa3/MB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE2XV+cbr/L/6V886p6SX7thHKfP4rEu/a2HCsEGvsOAF7enk1arMl s5JN7czpvtu3oYCXYaT8T6eu69cnPXsrzVh2MtnHdFDgXzEFBQR4sVK2mOGtr0lZ 6Zhj1MHWYt6hklCUJKje0+hn0F1v8q6Tl0SAPKO4AjIKji6ujoTn8v1+XUSckFj3 bw6iwjGD1zRk192UGYrtYQHhw8ZdhfgvhUgdWG1nwqhqvV8X6fYSfNdADx9Ry97W 4tgo+ucoInt4Qc0q5OCbX0Ifr37+wVI4mIOQ+Qn65oq0PKxfSiMliArc5uAQC5X9 fXIa/hzHPrv4asZ9z3Bd4ddsZacow60E -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org