$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: EkB+NZsLCepZgEISKmfyVi1j0f3MKGuX+fRjPApodkM= Subject key identifier: 8D:C8:92:A9:54:E4:CD:E7:A0:17:A8:69:B7:DF:B8:70:49:92:EB:A1 Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0CAC Signing time: Fri 22 Nov 2024 18:04:44 +0000 Manifest this update: Fri 22 Nov 2024 18:04:43 +0000 Manifest next update: Fri 29 Nov 2024 18:04:43 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: c4D7ltXfp+MYtXMhSpNqCA2GsZypOeR2s+JVTzwO/mw=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: iNF26PQV2QDxZAqXThwlTn9eA9VPYLTtDdkUTHz7O7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: Nov 22 18:04:43 2024 GMT Not After : Nov 29 18:04:43 2024 GMT Subject: CN=6740c7bb-d774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:51:6b:5d:38:1d:a2:85:67:ad:e2:a5:6d: ab:86:df:96:f8:07:79:7a:73:ac:8d:ce:94:ff:b6: 33:b6:40:49:20:13:6d:16:53:9f:df:ad:fd:eb:08: 15:4d:11:78:b4:2f:83:e8:92:2d:b2:9f:d4:c9:ca: 37:15:95:0d:9b:42:34:50:ac:49:91:33:d4:f9:b9: d4:49:78:21:00:45:45:19:c4:fe:2e:56:12:5b:09: ce:c8:06:c1:99:64:bc:ba:83:51:19:d4:48:f0:2d: fb:c9:05:de:71:31:6c:cd:1f:f5:34:a4:a8:7c:20: a9:20:0b:cb:3b:7e:93:80:24:e9:7c:78:1b:2a:1f: 11:fd:6b:1d:3b:b5:cd:c1:8b:4b:5d:34:2f:f2:0e: f4:5e:9d:71:19:4d:4a:c3:b0:83:c0:75:6f:a1:a9: cc:25:cb:5b:ea:4d:e8:14:5c:b0:46:50:26:4b:d0: 6e:fb:40:9e:f1:32:0a:40:63:1a:f3:1c:33:3a:c6: 3b:59:8e:9c:8f:5b:82:f2:30:d9:2c:27:8f:73:79: b2:90:e4:9a:b5:eb:d9:5d:1b:c1:a0:db:e7:42:e7: 37:fb:b6:72:2d:f2:56:fd:22:ab:11:ab:85:36:e2: 84:11:e3:1d:08:7d:a0:8f:a4:5e:aa:7f:37:2f:79: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:92:A9:54:E4:CD:E7:A0:17:A8:69:B7:DF:B8:70:49:92:EB:A1 X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:11:e6:33:18:6e:95:1d:d0:50:11:cf:fe:c5:04:e5:a3:84: ae:07:4d:61:d0:52:35:a8:e6:78:62:da:c0:96:d6:8a:c7:ab: c0:75:bc:e6:b8:b2:20:91:32:67:b2:db:2e:fa:6c:37:3d:ed: 2a:08:b0:25:44:f5:18:27:e6:f1:8d:b6:d9:a2:60:da:80:dd: 38:fc:05:fe:16:84:b0:b8:b0:14:f7:e8:58:2e:aa:0a:a2:ff: 6b:65:8f:dd:d1:22:d4:ae:72:4a:fe:b0:f3:d5:2e:6a:7b:d9: 75:d8:ca:14:f6:ca:d6:57:53:eb:c5:ca:e7:d4:8b:c0:01:ee: c8:ef:dd:e0:d1:68:57:a5:83:d2:e3:02:b3:c6:19:0b:7b:5a: 37:29:f3:05:03:a0:bd:0b:31:af:e3:55:33:98:0d:e6:c9:52: d7:01:26:0e:29:e4:36:b5:b5:31:fa:5e:7a:e8:39:53:9b:43: 8a:84:6e:3b:27:70:dd:00:a9:9f:a8:0d:36:1d:2e:47:7a:21: 1a:e1:2d:99:c9:e4:fb:5e:d6:15:30:08:76:87:8c:4b:65:9c: 10:4a:81:b0:55:9d:a5:f0:5f:43:69:27:b3:65:be:a7:fb:b4: fa:d4:7e:0c:73:6c:54:09:70:26:38:56:0d:c5:ac:e3:7f:0a: 24:5a:be:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjQxMTIyMTgwNDQzWhcNMjQxMTI5MTgwNDQzWjAYMRYwFAYD VQQDEw02NzQwYzdiYi1kNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA399Ra104HaKFZ63ipW2rht+W+Ad5enOsjc6U/7YztkBJIBNtFlOf36396wgV TRF4tC+D6JItsp/Uyco3FZUNm0I0UKxJkTPU+bnUSXghAEVFGcT+LlYSWwnOyAbB mWS8uoNRGdRI8C37yQXecTFszR/1NKSofCCpIAvLO36TgCTpfHgbKh8R/WsdO7XN wYtLXTQv8g70Xp1xGU1Kw7CDwHVvoanMJctb6k3oFFywRlAmS9Bu+0Ce8TIKQGMa 8xwzOsY7WY6cj1uC8jDZLCePc3mykOSatevZXRvBoNvnQuc3+7ZyLfJW/SKrEauF NuKEEeMdCH2gj6Reqn83L3n1gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3IkqlU 5M3noBeoabffuHBJkuuhMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlEeYzGG6VHdBQEc/+xQTlo4SuB01h0FI1qOZ4YtrAltaKx6vAdbzm uLIgkTJnstsu+mw3Pe0qCLAlRPUYJ+bxjbbZomDagN04/AX+FoSwuLAU9+hYLqoK ov9rZY/d0SLUrnJK/rDz1S5qe9l12MoU9srWV1Prxcrn1IvAAe7I793g0WhXpYPS 4wKzxhkLe1o3KfMFA6C9CzGv41UzmA3myVLXASYOKeQ2tbUx+l566DlTm0OKhG47 J3DdAKmfqA02HS5HeiEa4S2ZyeT7XtYVMAh2h4xLZZwQSoGwVZ2l8F9DaSezZb6n +7T61H4Mc2xUCXAmOFYNxazjfwokWr5E -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org