$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: evrgDN99dc67k0I3lD/uwTexjFwX75VBfsbROYZ/4DM= Subject key identifier: B5:F3:D2:32:20:4F:6D:E3:03:72:2B:8A:63:80:FF:2F:DB:49:E6:80 Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 3440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 3435 Signing time: Fri 22 Nov 2024 14:57:08 +0000 Manifest this update: Fri 22 Nov 2024 14:57:07 +0000 Manifest next update: Fri 29 Nov 2024 14:57:07 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: kH4u6Cn5OowahU0UIzerVWLZ6zt/iOBmQ8D+5OFF++4=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: alhBAf8jvRhFefsbDXOa8VjrZGUtci5WGYLgfA9nSPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13376 (0x3440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: Nov 22 14:57:07 2024 GMT Not After : Nov 29 14:57:07 2024 GMT Subject: CN=67409bc4-4f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:47:41:b0:52:7a:4e:3f:cd:5d:78:73:6b: 41:62:e7:eb:84:9b:32:1a:2b:90:54:0e:9e:11:d3: a5:7b:f4:82:c5:e4:f5:92:29:18:ec:6c:a7:14:cb: f6:0d:6e:97:6e:ca:4a:ae:27:27:d9:24:e8:a3:3a: 2d:c0:e3:ec:bf:07:a2:c4:86:76:7d:61:7b:4f:32: 32:10:13:bd:1b:a7:39:1f:18:b5:cf:4d:fa:24:89: 55:0e:29:0a:91:fe:ed:28:53:ce:68:1b:71:78:1b: 6a:84:41:fc:44:25:20:72:c4:35:18:c6:5c:16:be: bc:70:35:24:4c:04:e3:02:94:a0:fa:84:64:b0:6b: 63:02:d4:93:dc:c7:4a:8a:d3:82:fa:e7:00:ec:8f: 73:bc:41:f5:41:a7:8d:ab:53:69:66:c6:92:0e:88: a8:4f:09:c7:92:26:92:08:46:ff:57:b0:1d:f0:b9: cc:a4:91:8a:af:b1:1e:1f:61:bf:8a:34:c1:dc:4d: 57:a5:3c:aa:34:43:0d:60:fe:1a:e0:04:53:ea:f3: 5e:50:ee:d3:11:5a:bd:16:39:6c:cf:e8:46:2c:7b: de:20:aa:1d:86:5c:ab:0b:f6:6f:5a:58:25:c5:a5: 41:f7:1a:1e:f7:6f:57:f2:53:e3:42:90:73:13:be: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:D2:32:20:4F:6D:E3:03:72:2B:8A:63:80:FF:2F:DB:49:E6:80 X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:f5:37:62:34:ff:b6:4c:02:fc:f4:2a:72:0c:64:0a:04: 21:0b:7e:0e:20:25:74:d7:df:72:8d:4a:a1:3c:21:a1:d4:b6: d2:c7:8f:11:5e:12:22:03:6e:84:86:0e:67:e2:3b:ba:70:e1: fe:c6:ea:18:ad:c0:d9:5e:fa:c1:f9:1f:e9:29:88:57:72:78: c0:4b:b4:8c:ee:bc:0c:07:ad:7a:91:43:1a:01:c8:46:4c:b3: 16:f1:48:28:f6:f7:02:15:2b:d1:54:24:55:66:cd:b5:c7:d1: 9a:ab:32:62:d6:ad:2c:65:63:80:54:d4:59:36:70:b3:4b:ab: 8d:9c:b3:c3:a8:b8:75:0b:a2:98:59:b6:b5:ff:89:5c:b5:f7: d5:39:34:9c:79:e8:c1:10:ed:d1:3f:75:e4:51:46:0e:02:67: 9d:0e:23:33:ad:7c:27:47:a3:e4:8d:d9:51:77:ee:2b:84:66: 27:ef:27:b6:e6:ff:e2:91:37:1f:9e:1d:04:92:ea:c6:59:9a: d6:1b:a1:45:54:8f:ac:b5:35:7b:65:e2:2b:bf:54:b8:a3:1e: 3e:85:f1:78:8f:07:4e:ca:5c:08:a6:e3:c1:5b:cc:cf:b4:c4: 89:0f:4a:24:49:b6:79:36:66:cf:26:e0:24:36:0f:5e:85:4c: 8d:30:db:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjQxMTIyMTQ1NzA3WhcNMjQxMTI5MTQ1NzA3WjAYMRYwFAYD VQQDEw02NzQwOWJjNC00ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNhHQbBSek4/zV14c2tBYufrhJsyGiuQVA6eEdOle/SCxeT1kikY7GynFMv2 DW6XbspKricn2SToozotwOPsvweixIZ2fWF7TzIyEBO9G6c5Hxi1z036JIlVDikK kf7tKFPOaBtxeBtqhEH8RCUgcsQ1GMZcFr68cDUkTATjApSg+oRksGtjAtST3MdK itOC+ucA7I9zvEH1QaeNq1NpZsaSDoioTwnHkiaSCEb/V7Ad8LnMpJGKr7EeH2G/ ijTB3E1XpTyqNEMNYP4a4ART6vNeUO7TEVq9Fjlsz+hGLHveIKodhlyrC/ZvWlgl xaVB9xoe929X8lPjQpBzE76meQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXz0jIg T23jA3IrimOA/y/bSeaAMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaRvU3YjT/tkwC/PQqcgxkCgQhC34OICV0199yjUqhPCGh1LbSx48R XhIiA26Ehg5n4ju6cOH+xuoYrcDZXvrB+R/pKYhXcnjAS7SM7rwMB616kUMaAchG TLMW8Ugo9vcCFSvRVCRVZs21x9GaqzJi1q0sZWOAVNRZNnCzS6uNnLPDqLh1C6KY Wba1/4lctffVOTSceejBEO3RP3XkUUYOAmedDiMzrXwnR6PkjdlRd+4rhGYn7ye2 5v/ikTcfnh0EkurGWZrWG6FFVI+stTV7ZeIrv1S4ox4+hfF4jwdOylwIpuPBW8zP tMSJD0okSbZ5NmbPJuAkNg9ehUyNMNvp -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org