$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: yVjMBItktlSNc3lyIpoR6V0+BR7prg8Hen/ISi3kvfk= Subject key identifier: D2:8E:CB:97:8E:D0:C3:FE:4A:A2:CE:60:B5:A3:67:90:24:C0:20:05 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 0563 Signing time: Fri 22 Nov 2024 22:55:47 +0000 Manifest this update: Fri 22 Nov 2024 22:55:47 +0000 Manifest next update: Fri 29 Nov 2024 22:55:47 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: T8ChD3BxcQe7j5pZe/xdzPcWlJel5CvinFIt3HTHVAI=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: l/jme7wWS4I9LN6Uqmqgm8y3qkl6ZZcy6rtZNU+mraw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Nov 22 22:55:47 2024 GMT Not After : Nov 29 22:55:47 2024 GMT Subject: CN=67410bf3-a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:95:4d:bf:56:63:67:d3:f1:36:48:e0:63: 7f:bd:3c:7e:22:8f:94:9e:fc:97:1a:72:39:69:35: 61:02:d4:fa:0a:b8:70:e2:a1:8a:99:f0:f7:03:1e: f2:4d:3b:f7:f7:16:91:51:9a:91:34:d4:10:b8:ae: 0e:a4:b9:10:89:33:93:da:07:04:01:2e:b7:64:9c: 48:40:d9:70:14:0d:3e:a4:5d:83:fe:b1:ae:0e:4d: f3:58:16:05:44:86:31:b3:28:8f:d6:f3:d1:d7:d8: 79:60:7a:d4:b9:4e:a7:52:a5:eb:20:1d:4a:1e:fa: 93:f7:67:a1:f2:23:b8:08:10:a8:7e:af:1d:24:c2: ea:8a:1f:bf:85:76:72:a1:a0:81:d0:fb:1d:2e:77: 7c:64:c4:14:27:51:57:15:5a:a6:3e:52:d1:70:9a: 5d:95:c8:32:bc:fc:5c:52:ec:24:a3:c8:a3:b1:62: 2c:34:bb:d9:b9:57:75:60:89:32:a1:9a:05:90:b9: ea:ce:65:b1:00:80:bf:86:f6:1c:62:b9:60:f3:b8: be:b0:37:50:26:be:d8:ee:20:5d:bd:b7:44:91:ac: 14:98:51:91:18:53:fc:99:92:83:10:7f:59:30:49: eb:2b:de:7c:1b:74:d9:d0:74:50:56:61:b3:26:03: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8E:CB:97:8E:D0:C3:FE:4A:A2:CE:60:B5:A3:67:90:24:C0:20:05 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:14:9c:b0:52:a0:f6:76:a0:6e:93:9d:be:36:b7:8b:e4:90: 80:41:6a:5d:20:8d:49:89:ca:27:a2:e6:ce:07:d0:55:ba:de: fd:da:db:f0:6f:1f:ac:f8:e2:52:d4:20:c5:2e:b6:51:c3:24: 51:ba:85:25:b6:d3:4c:fe:2f:68:e9:df:1d:59:f4:c8:f4:43: ca:f6:00:ff:c3:e7:1c:0c:8a:31:c3:55:27:ca:cf:a2:fd:6e: 72:70:80:ac:09:e3:a6:17:37:5b:5b:cd:75:3d:6c:e4:2a:c4: ed:da:10:e9:c9:b9:0f:be:a9:23:f3:fc:cb:38:3e:13:48:38: b0:52:e9:98:7f:ca:68:4e:4c:63:68:a4:e4:59:c6:e6:e5:1d: 78:99:30:6c:7b:dd:4a:71:3e:15:4d:cc:f1:0b:c5:83:a9:cd: f2:6c:fa:2b:2e:4a:ab:84:58:f9:20:e0:1a:6c:b9:5d:df:bc: db:91:26:25:06:5d:b5:4d:3c:c3:66:cf:3d:e4:23:5d:33:d4: 4e:52:12:a4:46:41:cf:6f:85:cc:bc:75:c8:2f:a8:6a:f1:fa: 01:eb:b8:53:5f:b7:64:9b:74:c9:92:99:b3:f1:95:a1:db:90: da:31:42:b3:82:72:3c:4c:50:bc:b3:1b:9d:0e:49:7f:7a:2e: 6b:8a:fc:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjQxMTIyMjI1NTQ3WhcNMjQxMTI5MjI1NTQ3WjAYMRYwFAYD VQQDEw02NzQxMGJmMy1hMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC2VTb9WY2fT8TZI4GN/vTx+Io+UnvyXGnI5aTVhAtT6Crhw4qGKmfD3Ax7y TTv39xaRUZqRNNQQuK4OpLkQiTOT2gcEAS63ZJxIQNlwFA0+pF2D/rGuDk3zWBYF RIYxsyiP1vPR19h5YHrUuU6nUqXrIB1KHvqT92eh8iO4CBCofq8dJMLqih+/hXZy oaCB0PsdLnd8ZMQUJ1FXFVqmPlLRcJpdlcgyvPxcUuwko8ijsWIsNLvZuVd1YIky oZoFkLnqzmWxAIC/hvYcYrlg87i+sDdQJr7Y7iBdvbdEkawUmFGRGFP8mZKDEH9Z MEnrK958G3TZ0HRQVmGzJgOcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKOy5eO 0MP+SqLOYLWjZ5AkwCAFMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8FJywUqD2dqBuk52+NreL5JCAQWpdII1JiconoubOB9BVut792tvw bx+s+OJS1CDFLrZRwyRRuoUlttNM/i9o6d8dWfTI9EPK9gD/w+ccDIoxw1Unys+i /W5ycICsCeOmFzdbW811PWzkKsTt2hDpybkPvqkj8/zLOD4TSDiwUumYf8poTkxj aKTkWcbm5R14mTBse91KcT4VTczxC8WDqc3ybPorLkqrhFj5IOAabLld37zbkSYl Bl21TTzDZs895CNdM9ROUhKkRkHPb4XMvHXIL6hq8foB67hTX7dkm3TJkpmz8ZWh 25DaMUKzgnI8TFC8sxudDkl/ei5rivwB -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org