$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: HnV+A7tEAoV3MwVcJ3ihutTJubBbHEbEFnNBsrJJWsU= Subject key identifier: D8:4F:BC:F3:2D:FB:28:5D:D7:62:14:40:6F:49:55:61:E5:79:87:69 Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 0836 Signing time: Fri 22 Nov 2024 20:29:20 +0000 Manifest this update: Fri 22 Nov 2024 20:29:20 +0000 Manifest next update: Fri 29 Nov 2024 20:29:20 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: F+gos7MiHyZsnOZfg035NllyMSnNPHFAZjzv3P8g43M=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: pJopSUouAomRS7bBbLiExTbU2TzCWgsGbKH4r8LjMrI=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: NDjkgreHok48ic1Su9+HPGIeiSQ2Z7P+GcpTGnpZzHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Nov 22 20:29:20 2024 GMT Not After : Nov 29 20:29:20 2024 GMT Subject: CN=6740e9a0-5ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:17:7d:60:6e:87:5f:cc:25:63:6a:9c:fb: dc:b5:73:0b:ff:48:67:11:c6:18:79:ef:cb:7c:24: 29:66:01:c7:a5:ef:92:8b:aa:c2:da:82:58:5d:18: 7f:27:43:cc:6f:2f:d6:c5:e9:9c:08:44:eb:88:46: 02:91:04:00:53:32:d2:8a:65:18:be:3c:d5:43:8a: 96:16:83:fb:65:ca:7a:31:14:44:1b:f0:e3:b6:d5: 84:22:9d:57:4a:32:26:b0:44:80:f6:ef:ee:af:3a: 3a:13:0a:d8:81:f4:60:65:2d:fa:86:9a:f4:40:dd: dc:02:ce:cb:8e:81:89:7e:15:11:3d:0b:d2:7f:87: 16:67:03:06:75:1e:d9:ad:f5:f1:51:80:e0:33:5d: ab:02:fb:77:d1:3d:c7:d6:97:72:a0:2f:77:e2:6e: c9:c5:1e:26:48:b0:bf:28:f5:fa:12:2a:c3:06:5c: 88:c9:0e:f2:8d:22:5b:e5:e7:04:be:9e:61:6e:f7: 8c:11:82:fb:1b:d5:ce:d2:fe:0c:e3:60:b7:22:5d: 7e:f3:fa:80:e0:a3:86:b1:3d:b5:16:85:26:8b:28: 8b:09:6c:95:6f:d9:40:e3:db:37:df:f3:02:71:58: 02:d7:11:62:aa:eb:54:51:ed:39:3f:10:fd:4e:40: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:BC:F3:2D:FB:28:5D:D7:62:14:40:6F:49:55:61:E5:79:87:69 X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f4:09:5e:e6:20:e5:7a:b9:72:09:6b:b5:59:8e:36:bc:9e: 0e:e4:fa:5c:27:e9:bd:13:fb:4b:71:8f:fd:0e:c4:f3:79:44: f5:1a:6a:1e:7e:a6:f0:ab:ec:dd:79:59:f5:55:b0:91:0d:f3: a2:b4:3c:42:f9:c0:c8:54:43:40:94:6e:41:db:e9:31:22:17: 20:32:f9:68:2c:50:1d:ad:30:b9:b0:18:94:86:e6:80:a7:5e: 56:e7:d0:d5:7e:e0:43:16:55:4c:ec:f1:5d:05:3f:1d:6c:92: c6:e4:b1:44:ff:92:42:75:3e:1a:42:58:30:18:6d:41:d6:b6: 63:a8:12:52:20:cd:0c:fd:21:c8:ea:35:b4:de:06:a5:d3:a8: c8:f5:5b:6b:c5:b0:33:d7:c8:c1:fe:6a:c5:eb:df:7c:5e:4c: 46:f7:1f:4c:ba:67:0e:89:aa:47:1d:6d:e3:f7:68:ec:00:62: d6:0e:57:9c:20:96:eb:e1:63:b8:17:59:4a:d8:92:1d:48:3c: af:94:34:9d:75:7c:8f:ef:4a:5c:6b:7b:45:58:6a:ca:a4:83: 07:3e:7c:30:83:50:16:63:7a:ca:c5:57:04:e3:80:66:45:aa: 0d:30:ae:8c:69:b8:b4:14:9a:fe:4e:ed:5b:68:55:47:42:1a: f6:cb:f6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjQxMTIyMjAyOTIwWhcNMjQxMTI5MjAyOTIwWjAYMRYwFAYD VQQDEw02NzQwZTlhMC01ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyksXfWBuh1/MJWNqnPvctXML/0hnEcYYee/LfCQpZgHHpe+Si6rC2oJYXRh/ J0PMby/WxemcCETriEYCkQQAUzLSimUYvjzVQ4qWFoP7Zcp6MRREG/DjttWEIp1X SjImsESA9u/urzo6EwrYgfRgZS36hpr0QN3cAs7LjoGJfhURPQvSf4cWZwMGdR7Z rfXxUYDgM12rAvt30T3H1pdyoC934m7JxR4mSLC/KPX6EirDBlyIyQ7yjSJb5ecE vp5hbveMEYL7G9XO0v4M42C3Il1+8/qA4KOGsT21FoUmiyiLCWyVb9lA49s33/MC cVgC1xFiqutUUe05PxD9TkAS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhPvPMt +yhd12IUQG9JVWHleYdpMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh9Ale5iDlerlyCWu1WY42vJ4O5PpcJ+m9E/tLcY/9DsTzeUT1Gmoe fqbwq+zdeVn1VbCRDfOitDxC+cDIVENAlG5B2+kxIhcgMvloLFAdrTC5sBiUhuaA p15W59DVfuBDFlVM7PFdBT8dbJLG5LFE/5JCdT4aQlgwGG1B1rZjqBJSIM0M/SHI 6jW03gal06jI9VtrxbAz18jB/mrF6998XkxG9x9MumcOiapHHW3j92jsAGLWDlec IJbr4WO4F1lK2JIdSDyvlDSddXyP70pca3tFWGrKpIMHPnwwg1AWY3rKxVcE44Bm RaoNMK6Mabi0FJr+Tu1baFVHQhr2y/be -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org