$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: Oc/eQo7jlHLZ6sAAYPt4vDRS8OOc7xbLr/CEvpzMOoU= Subject key identifier: 23:D1:63:C8:98:DC:05:D1:42:0C:3F:16:7E:CA:A5:96:8A:66:A4:E7 Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: 64 Signing time: Thu 21 Nov 2024 05:07:42 +0000 Manifest this update: Thu 21 Nov 2024 05:07:41 +0000 Manifest next update: Thu 28 Nov 2024 05:07:41 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: b4mjDsI3ISBcy8h3j1bHHj3RR+VUC2ScGXQoOjflY9M=) 2: 5500DE161CB711EF865A8A66C4F9AE02.roa (hash: bE9TZ3KFMkEX5C4mzL3f6K6AeBT6EY6Mdwh7TN4CO1U=) 3: 09B1648A287E11EFB064C714C4F9AE02.roa (hash: 8w9EStyxgd2lG6ezvMAPGGREPx/EAFVYZTJA5MrmYxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: Nov 21 05:07:41 2024 GMT Not After : Nov 28 05:07:41 2024 GMT Subject: CN=673ec01d-dd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:be:21:6a:ca:b1:46:60:77:b0:07:d0:32: 50:27:ed:5f:67:9f:8b:03:a5:46:16:f2:93:e0:e2: 24:e2:53:ee:1a:45:fa:76:12:49:0b:8f:04:49:d9: 99:7c:57:c4:c7:de:f2:9f:f4:7b:2c:a6:dc:77:69: 4d:1e:ac:8f:01:56:d7:a7:fe:3a:4e:a0:b9:56:55: 80:b0:e4:50:24:89:fe:9a:2c:94:f0:13:95:25:d3: 26:97:7f:ac:de:a8:d8:6e:57:4d:43:fe:2b:54:d6: 7d:59:0d:e8:11:a4:82:94:f3:e0:1c:a3:93:25:22: c5:1f:bf:ef:80:d5:33:09:f5:53:8f:32:06:05:74: 39:fe:64:0e:a3:e2:2e:10:28:33:a8:65:03:bf:bc: 28:de:a8:07:72:4a:41:70:5d:b1:8d:ac:57:64:0b: b7:cd:e1:0c:22:82:d6:ed:64:5a:65:16:e7:c9:62: d5:ac:bd:68:2e:8b:9b:47:09:64:b5:84:29:15:0b: 48:6e:59:09:0a:bc:58:bf:a0:5c:6f:f2:57:bf:67: 1c:6e:6f:0a:13:72:b0:91:24:ea:f8:c8:d0:f5:9e: 07:12:c4:c7:a8:0d:06:3f:f6:56:78:75:fc:a1:d8: 3b:c6:12:77:9f:30:79:11:29:3b:38:ed:27:51:a1: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:63:C8:98:DC:05:D1:42:0C:3F:16:7E:CA:A5:96:8A:66:A4:E7 X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:d0:af:25:04:2f:65:ee:03:8d:d7:5f:fc:c7:3a:77:90: 63:4f:66:85:75:c7:2b:c0:e4:fe:0b:d4:69:50:54:6a:8c:c0: 77:2b:76:d7:2f:27:92:bc:1a:25:d3:cf:d3:f2:83:e6:25:7d: d3:9a:8f:2a:6d:06:b7:03:60:28:7a:46:de:1f:1e:40:a1:7f: 1e:14:ad:c8:7f:cb:d6:ef:3f:ca:e4:27:aa:99:40:76:ac:ce: df:bf:ec:9a:2a:b6:52:17:bb:f5:32:2b:a7:de:6b:1b:92:65: 91:cd:3a:a6:f8:ca:3d:e2:f5:91:df:3e:79:c7:ea:f7:b5:f3: 45:19:ae:81:52:c3:73:27:34:20:9d:4a:df:ed:6c:13:ef:d1: 3d:17:6b:50:12:45:59:00:a1:3a:57:b9:e9:0a:36:5b:e0:7a: 18:48:80:c7:e9:01:3f:7e:13:d9:75:b2:ad:f9:1f:95:44:ca: c1:76:98:cc:49:50:8f:a3:37:2f:c9:9e:5f:65:bb:c2:69:8d: 42:92:6f:4d:24:77:d6:d1:a7:cc:55:52:cc:4e:fb:9f:b5:87: af:56:84:ca:c3:67:48:f6:5b:ed:a4:af:07:1e:d6:7e:05:f6: 87:d6:76:8b:fb:d6:de:40:48:0b:2a:2e:46:b6:86:b9:7f:d9: 30:09:ee:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUFFMDExMC8GA1UEBRMoODQzMjQ3QzBBQzE4MUZDMzY2NjZBNDQzNzIxQUYyMUQ5 REE2NTBEQTAeFw0yNDExMjEwNTA3NDFaFw0yNDExMjgwNTA3NDFaMBgxFjAUBgNV BAMTDTY3M2VjMDFkLWRkM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2A74hasqxRmB3sAfQMlAn7V9nn4sDpUYW8pPg4iTiU+4aRfp2EkkLjwRJ2Zl8 V8TH3vKf9Hssptx3aU0erI8BVten/jpOoLlWVYCw5FAkif6aLJTwE5Ul0yaXf6ze qNhuV01D/itU1n1ZDegRpIKU8+Aco5MlIsUfv++A1TMJ9VOPMgYFdDn+ZA6j4i4Q KDOoZQO/vCjeqAdySkFwXbGNrFdkC7fN4QwigtbtZFplFufJYtWsvWgui5tHCWS1 hCkVC0huWQkKvFi/oFxv8le/ZxxubwoTcrCRJOr4yND1ngcSxMeoDQY/9lZ4dfyh 2DvGEnefMHkRKTs47SdRoUf1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI9FjyJjc BdFCDD8WfsqllopmpOcwHwYDVR0jBBgwFoAUhDJHwKwYH8NmZqRDchryHZ2mUNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQUUwL0JDNTIxQTU0MTkw QTExRUZBOTBFQzkyOUM0RjlBRTAyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaERKSHdLd1lIOE5tWnFSRGNocnlIWjJtVU5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QUUwL0JDNTIxQTU0MTkwQTExRUZBOTBFQzkyOUM0RjlBRTAyL2hESkh3S3dZSDhO bVpxUkRjaHJ5SFoybVVOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEka0K8lBC9l7gON11/8xzp3kGNPZoV1xyvA5P4L1GlQVGqMwHcrdtcv J5K8GiXTz9Pyg+YlfdOajyptBrcDYCh6Rt4fHkChfx4Urch/y9bvP8rkJ6qZQHas zt+/7JoqtlIXu/UyK6feaxuSZZHNOqb4yj3i9ZHfPnnH6ve180UZroFSw3MnNCCd St/tbBPv0T0Xa1ASRVkAoTpXuekKNlvgehhIgMfpAT9+E9l1sq35H5VEysF2mMxJ UI+jNy/Jnl9lu8JpjUKSb00kd9bRp8xVUsxO+5+1h69WhMrDZ0j2W+2krwce1n4F 9ofWdov71t5ASAsqLka2hrl/2TAJ7gI= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org