$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: SqwfLA5yVAgoxXIFbXiMCo+dgyUKpbcEPaC4ouB/+v8= Subject key identifier: 0F:65:86:3A:91:4E:5F:93:39:01:82:EC:63:DE:FB:24:6A:74:34:33 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 71 Signing time: Sat 23 Nov 2024 04:51:49 +0000 Manifest this update: Sat 23 Nov 2024 04:51:49 +0000 Manifest next update: Sat 30 Nov 2024 04:51:49 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: 5pDzNP+Iy3/FhhFy5fGVL5q8z6daHzROgsd6PCcnuEI=) 2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: GzRO+E0+GJMiiWcX4BrxzFBGrkot7SxAYETbRbNAYaw=) 3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: sRBYkh+KNmPBKadIVSqR9N6xv1Wcld9AuPTlooAnu58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Nov 23 04:51:49 2024 GMT Not After : Nov 30 04:51:49 2024 GMT Subject: CN=67415f65-dd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ad:eb:b5:27:9a:7a:ea:b1:99:8a:1e:88:c6: 26:65:e1:a5:4d:8f:26:01:bb:de:0c:37:c9:5b:35: e3:4e:79:ce:dc:5c:d6:9f:5c:28:6d:18:97:05:84: dd:50:ae:ae:ca:07:e5:85:3c:2c:36:0c:c2:2f:eb: 69:08:4c:50:cc:72:77:df:0d:5d:c7:dc:15:b4:b8: c1:c4:68:e7:87:8b:4b:41:f0:3d:b1:ee:de:97:81: 4c:27:9c:35:75:2d:75:ab:94:f8:bc:17:6f:57:68: 10:58:fd:46:f2:00:d7:3a:b5:55:89:66:e9:dd:ea: 1f:36:48:c5:39:81:11:ed:28:e5:74:a8:23:1f:92: c5:52:6a:4b:76:ec:77:03:9a:46:84:be:f5:5d:3f: 1f:9a:02:62:c9:1f:82:25:f2:46:47:8b:2c:b0:9c: ea:12:82:7e:aa:3e:4d:b2:0c:90:f5:47:1b:a1:2d: 99:a3:06:52:9c:c9:85:a4:cf:62:88:94:7c:db:28: f4:7a:9e:eb:21:c3:af:41:8c:8f:49:b1:2c:48:80: 49:0a:0d:29:4b:25:4f:06:36:d4:a5:0a:8c:58:3e: 34:04:1a:54:fe:71:63:a3:94:ed:83:1b:5d:ba:fb: 36:a3:cf:30:8d:68:89:26:aa:f4:48:6f:22:d1:3a: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:86:3A:91:4E:5F:93:39:01:82:EC:63:DE:FB:24:6A:74:34:33 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2f:96:17:37:fa:4d:94:cd:a0:de:d1:de:b1:1e:63:ea:6d: cf:40:70:98:0e:05:0a:0b:51:05:26:db:6b:5b:e5:1c:d2:ac: 17:9c:05:55:73:1e:64:1f:a1:a9:00:4f:13:c4:36:fa:d9:46: dc:e8:f1:2a:5b:db:a3:1d:45:f7:0d:c1:94:f2:4a:4a:ac:d1: c2:79:cc:42:ae:e8:dd:9b:4a:d7:16:1b:61:fd:c4:1e:72:c6: 48:03:f6:5f:01:40:41:3f:0d:2a:1c:7b:fa:84:ed:2d:55:5f: 3d:70:22:59:c7:7d:88:ce:22:72:71:c1:e2:c1:b7:26:01:40: b6:2c:b2:4d:22:2f:36:8b:40:0d:aa:00:ad:e6:21:90:14:6a: 82:20:5a:6b:63:c5:36:41:7b:9d:6c:ef:3c:80:16:91:24:5a: a6:61:5d:1b:29:b3:7c:08:42:e5:ea:8d:b3:45:2b:ce:a8:da: 88:b2:67:de:c0:9d:f1:bb:3d:dc:ad:0c:01:dc:32:6c:74:22: 8f:21:2b:8d:ec:cf:61:8e:41:63:59:c7:04:a4:aa:be:20:56: 68:12:56:12:39:e3:b9:ab:0b:d0:14:82:eb:b5:28:4f:0f:02: c5:2c:1c:72:ac:ab:a4:dd:5a:e0:e2:2a:85:67:46:10:1e:bc: f3:d4:8e:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODk0RjExMC8GA1UEBRMoODVCMTRBODkwQjlCRDQ5ODBEOTdFNDFCQjM5MUZDQzk4 NTBGQ0I3ODAeFw0yNDExMjMwNDUxNDlaFw0yNDExMzAwNDUxNDlaMBgxFjAUBgNV BAMTDTY3NDE1ZjY1LWRkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyreu1J5p66rGZih6IxiZl4aVNjyYBu94MN8lbNeNOec7cXNafXChtGJcFhN1Q rq7KB+WFPCw2DMIv62kITFDMcnffDV3H3BW0uMHEaOeHi0tB8D2x7t6XgUwnnDV1 LXWrlPi8F29XaBBY/UbyANc6tVWJZund6h82SMU5gRHtKOV0qCMfksVSakt27HcD mkaEvvVdPx+aAmLJH4Il8kZHiyywnOoSgn6qPk2yDJD1RxuhLZmjBlKcyYWkz2KI lHzbKPR6nushw69BjI9JsSxIgEkKDSlLJU8GNtSlCoxYPjQEGlT+cWOjlO2DG126 +zajzzCNaIkmqvRIbyLROrKVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD2WGOpFO X5M5AYLsY977JGp0NDMwHwYDVR0jBBgwFoAUhbFKiQub1JgNl+Qbs5H8yYUPy3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4OTRGLzBBRjQ1RTM2MDEy QTExRUZBNUZEOTE2RkM0RjlBRTAyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJGS2lRdWIxSmdObC1RYnM1SDh5WVVQeTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 OTRGLzBBRjQ1RTM2MDEyQTExRUZBNUZEOTE2RkM0RjlBRTAyL2hiRktpUXViMUpn TmwtUWJzNUg4eVlVUHkzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIovlhc3+k2UzaDe0d6xHmPqbc9AcJgOBQoLUQUm22tb5RzSrBecBVVz HmQfoakATxPENvrZRtzo8Spb26MdRfcNwZTySkqs0cJ5zEKu6N2bStcWG2H9xB5y xkgD9l8BQEE/DSoce/qE7S1VXz1wIlnHfYjOInJxweLBtyYBQLYssk0iLzaLQA2q AK3mIZAUaoIgWmtjxTZBe51s7zyAFpEkWqZhXRsps3wIQuXqjbNFK86o2oiyZ97A nfG7PdytDAHcMmx0Io8hK43sz2GOQWNZxwSkqr4gVmgSVhI547mrC9AUguu1KE8P AsUsHHKsq6TdWuDiKoVnRhAevPPUjrE= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org