$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json) Hash identifier: jcZTT4kSywXEjwjXGvho4gXGec1VjA2aLoTGA+ZSLek= Subject key identifier: 37:7F:66:E4:85:41:8D:0D:9C:62:B4:A9:96:04:89:F1:0F:A7:9D:1E Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft Manifest number: 0660 Signing time: Fri 22 Nov 2024 21:59:31 +0000 Manifest this update: Fri 22 Nov 2024 21:59:31 +0000 Manifest next update: Fri 29 Nov 2024 21:59:31 +0000 Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: AQUYQvOo6y5Dg0jr3pu1vSHFD8iuzeIiIkPmzL8hQEo=) 2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: DKHDOAj7+AXAvfjvZlh+voUSgeSh4L2VBg+pbuzzE70=) 3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: HPFeGwKq86ZcwbWrB7sqcvfz9Xbe89k8mMFhGyrTd2o=) 4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: OSo59yjptase6UYWjPMVEsoK3BFfSOe7jd8A1zwV3Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Validity Not Before: Nov 22 21:59:31 2024 GMT Not After : Nov 29 21:59:31 2024 GMT Subject: CN=6740fec3-c412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:26:f3:27:45:53:0b:b8:34:37:0b:ce:f3: dc:53:4a:d9:f5:7d:84:f5:d3:76:d7:e5:26:a2:bc: ca:0f:38:9c:d0:c8:6e:eb:d1:d7:fa:a2:d2:e3:8b: cc:9a:fd:86:15:fd:6e:19:22:c8:5d:33:1f:88:85: 8b:b1:db:41:7b:b1:87:41:b4:6f:2a:2d:d1:57:cc: 8e:88:95:f9:60:f6:0f:ec:c0:69:97:8a:b0:14:66: f9:8e:bd:6d:af:b5:ee:a3:9b:07:29:64:4b:58:14: a8:69:e2:8f:12:6b:69:6f:58:5d:8d:45:68:e9:8f: 2f:2b:7a:eb:49:ef:1e:6d:d5:a3:f8:d5:43:fe:4d: 80:af:94:01:3f:e4:1a:d9:4a:7c:56:87:f8:6d:7b: 68:38:8d:88:53:ce:14:93:1e:d9:b8:77:d8:18:c7: ac:cd:5a:e4:48:23:dc:8b:da:fd:d2:90:71:41:66: 68:de:c6:4f:12:e5:85:70:6c:3f:46:6a:b7:f2:59: bb:70:88:88:3b:5e:71:11:cc:9b:ac:96:b9:2c:c7: 07:e6:3f:19:c5:b6:42:b7:1d:8b:d7:0a:5b:3b:a4: b3:95:e0:fc:4a:e6:9e:f0:0e:bb:8c:c0:24:f2:ca: bd:56:5e:2d:34:fc:c7:42:21:72:5d:86:9a:03:da: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7F:66:E4:85:41:8D:0D:9C:62:B4:A9:96:04:89:F1:0F:A7:9D:1E X509v3 Authority Key Identifier: keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:aa:a5:f5:46:cb:76:d5:be:3f:3c:69:9f:db:b4:27:b4:67: 8d:33:e5:78:35:e6:77:d4:ac:ec:9f:6f:e3:27:24:74:fd:33: 21:f4:b3:f8:b0:59:aa:0f:3e:91:a3:43:91:fb:35:a7:e8:06: 8b:56:e5:d2:63:2b:74:dd:68:80:5f:ff:53:c6:d0:cd:98:4f: 59:50:bf:6e:71:b6:f7:ab:23:6c:85:f2:e2:a0:6d:f2:2b:5a: 1e:02:b8:bd:5f:d4:26:61:ae:e5:d8:28:ff:ac:16:5a:f4:ef: 58:cd:9b:1b:9b:8d:68:55:d8:8d:69:17:21:56:3b:2e:9e:b9: d2:b5:e5:41:82:ea:63:ff:a1:f4:23:f3:a5:c5:f0:16:a3:94: 03:17:03:7b:ed:ac:dd:12:4a:35:3e:d0:c9:68:88:f3:b8:ab: a4:cd:06:1f:ee:ce:ea:5e:2b:31:03:71:a8:ea:ba:d7:a5:98: a9:e3:95:95:25:26:0e:c2:a3:81:df:a5:42:e7:fa:17:bf:d8: 9b:17:4e:3f:be:89:f0:ca:1b:7b:5f:44:96:41:6e:ef:3b:19: 14:df:76:06:8e:6e:f7:2e:f3:2a:58:e9:a6:48:80:c5:a7:6a: 20:86:77:48:94:93:26:ed:dd:28:f8:48:61:14:4e:5f:55:dc: 78:e3:b3:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw N0I1NEM4NkMwHhcNMjQxMTIyMjE1OTMxWhcNMjQxMTI5MjE1OTMxWjAYMRYwFAYD VQQDEw02NzQwZmVjMy1jNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQYm8ydFUwu4NDcLzvPcU0rZ9X2E9dN21+UmorzKDzic0Mhu69HX+qLS44vM mv2GFf1uGSLIXTMfiIWLsdtBe7GHQbRvKi3RV8yOiJX5YPYP7MBpl4qwFGb5jr1t r7Xuo5sHKWRLWBSoaeKPEmtpb1hdjUVo6Y8vK3rrSe8ebdWj+NVD/k2Ar5QBP+Qa 2Up8Vof4bXtoOI2IU84Ukx7ZuHfYGMeszVrkSCPci9r90pBxQWZo3sZPEuWFcGw/ Rmq38lm7cIiIO15xEcybrJa5LMcH5j8ZxbZCtx2L1wpbO6SzleD8Suae8A67jMAk 8sq9Vl4tNPzHQiFyXYaaA9qyzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd/ZuSF QY0NnGK0qZYEifEPp50eMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Qzk3OS9FRDYzM0U4NjVGRDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJ dUU5cGdZOFdvZmNIdFV5R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQqqX1Rst21b4/PGmf27QntGeNM+V4NeZ31Kzsn2/jJyR0/TMh9LP4 sFmqDz6Ro0OR+zWn6AaLVuXSYyt03WiAX/9TxtDNmE9ZUL9ucbb3qyNshfLioG3y K1oeAri9X9QmYa7l2Cj/rBZa9O9YzZsbm41oVdiNaRchVjsunrnSteVBgupj/6H0 I/OlxfAWo5QDFwN77azdEko1PtDJaIjzuKukzQYf7s7qXisxA3Go6rrXpZip45WV JSYOwqOB36VC5/oXv9ibF04/vonwyht7X0SWQW7vOxkU33YGjm73LvMqWOmmSIDF p2oghndIlJMm7d0o+EhhFE5fVdx447MV -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:37 2024 by rpki-client on console-fra.rpki-client.org