$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: H4+m8qTZQEzRQMy62zn8jqt8KUtXXW2khB3rqIpJqvY= Subject key identifier: E5:DD:41:FD:19:0D:19:2F:3F:BD:61:30:84:80:8C:07:CC:C2:B9:3E Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 09F1 Signing time: Fri 22 Nov 2024 19:39:00 +0000 Manifest this update: Fri 22 Nov 2024 19:38:59 +0000 Manifest next update: Fri 29 Nov 2024 19:38:59 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: kbB5pHal07cq1I59s7aZBQ00DcxmtKcr2weq/3i9BMw=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: iUA/ZdTXCvsQrhEvaWnotgmVkLDZ38sifwKb0kQ4+mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Nov 22 19:38:59 2024 GMT Not After : Nov 29 19:38:59 2024 GMT Subject: CN=6740ddd3-f70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:68:19:3e:05:e7:9d:79:56:e2:87:dd:6c: 8e:d0:52:c8:f0:45:0a:54:6d:9a:65:50:19:b0:95: 85:0c:50:f3:ff:97:81:c4:7e:48:3b:ca:9b:41:e8: e0:70:27:38:e9:e4:31:b5:d3:b6:7a:08:69:eb:8c: b3:4a:a7:17:0c:76:6a:66:49:fa:a8:8e:50:5e:fb: cc:29:e7:50:f2:b4:b2:d3:4f:6d:16:39:19:86:36: c8:c2:e3:62:7d:12:cf:fd:74:1d:32:71:23:17:11: 65:38:d7:3d:27:23:65:85:2c:7a:a6:ad:20:ea:8f: d1:b9:b5:39:37:e5:2c:56:d1:3f:b4:44:3a:66:91: 4b:43:88:3d:54:14:24:ec:2f:34:29:68:e2:4f:f2: 64:14:9d:99:27:69:b2:44:17:2b:95:30:e1:a2:84: ed:03:83:51:90:c3:c6:65:ac:10:ca:58:82:6d:dd: 8b:f2:bb:37:7b:5f:e1:09:5a:5d:e4:ff:05:a3:56: 90:3b:2f:02:65:ad:c9:83:af:be:cf:cd:61:9d:b3: ee:5d:ae:13:f1:c2:39:2e:a8:bd:ca:2a:fb:28:0c: 30:cd:5d:be:16:c1:34:a5:39:ff:3a:dd:8b:81:81: 45:1e:4f:5c:5c:f0:e6:d3:83:56:95:fa:27:56:0a: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DD:41:FD:19:0D:19:2F:3F:BD:61:30:84:80:8C:07:CC:C2:B9:3E X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:56:8f:f0:eb:4f:80:d1:e9:82:6f:9b:96:93:da:1e:1a: df:c9:5c:d4:fc:b7:52:a1:7c:95:f2:0e:59:69:2f:b4:5c:46: d5:38:4d:f7:fe:b4:74:e9:89:ff:9d:78:59:52:01:cb:0e:e2: 40:3b:ce:5e:3e:46:f3:fb:6a:0a:f4:f5:d8:c8:d5:1b:62:bb: eb:d2:32:db:1f:ab:2c:08:3f:fc:bf:f8:24:9f:18:54:e3:f9: de:0f:5a:3c:e4:e6:04:35:89:18:cf:da:ee:a5:fc:c4:a1:2a: af:0f:5e:b6:57:c6:8d:e2:a0:92:7f:85:4b:1d:a1:19:f1:58: 73:f3:ac:2a:c4:b7:aa:78:ca:5c:9f:42:1c:99:32:4c:31:a9: 3b:e4:d9:f3:56:6d:3e:73:05:18:a1:8d:88:02:fe:a4:64:31: 4f:dd:53:95:72:11:d1:17:91:09:84:21:00:c7:00:6e:41:3b: 14:9a:f0:3a:45:1b:a3:85:99:dc:de:f7:52:af:6b:cc:7d:64: 7f:a3:aa:f9:23:e9:10:a3:94:8c:a1:83:9e:14:be:e0:b9:f8: 76:a1:07:3d:f1:49:54:85:2f:1b:22:33:c9:c0:8b:80:c1:29: ec:0b:74:3e:fa:5a:ee:fc:ac:0c:d3:2e:21:00:15:e4:36:1a: f1:26:02:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjQxMTIyMTkzODU5WhcNMjQxMTI5MTkzODU5WjAYMRYwFAYD VQQDEw02NzQwZGRkMy1mNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaloGT4F5515VuKH3WyO0FLI8EUKVG2aZVAZsJWFDFDz/5eBxH5IO8qbQejg cCc46eQxtdO2eghp64yzSqcXDHZqZkn6qI5QXvvMKedQ8rSy009tFjkZhjbIwuNi fRLP/XQdMnEjFxFlONc9JyNlhSx6pq0g6o/RubU5N+UsVtE/tEQ6ZpFLQ4g9VBQk 7C80KWjiT/JkFJ2ZJ2myRBcrlTDhooTtA4NRkMPGZawQyliCbd2L8rs3e1/hCVpd 5P8Fo1aQOy8CZa3Jg6++z81hnbPuXa4T8cI5Lqi9yir7KAwwzV2+FsE0pTn/Ot2L gYFFHk9cXPDm04NWlfonVgoXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXdQf0Z DRkvP71hMISAjAfMwrk+MB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz/1aP8OtPgNHpgm+blpPaHhrfyVzU/LdSoXyV8g5ZaS+0XEbVOE33 /rR06Yn/nXhZUgHLDuJAO85ePkbz+2oK9PXYyNUbYrvr0jLbH6ssCD/8v/gknxhU 4/neD1o85OYENYkYz9rupfzEoSqvD162V8aN4qCSf4VLHaEZ8Vhz86wqxLeqeMpc n0IcmTJMMak75NnzVm0+cwUYoY2IAv6kZDFP3VOVchHRF5EJhCEAxwBuQTsUmvA6 RRujhZnc3vdSr2vMfWR/o6r5I+kQo5SMoYOeFL7gufh2oQc98UlUhS8bIjPJwIuA wSnsC3Q++lru/KwM0y4hABXkNhrxJgKI -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org