$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: klbG7qQ14HgVa2ked4l0fOU1FHhtzbKcp9n4jUxrCbk= Subject key identifier: 1C:99:89:41:23:2D:89:D8:30:7F:D4:CE:C2:66:28:4E:78:D3:4A:96 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 0141 Signing time: Sat 23 Nov 2024 02:44:33 +0000 Manifest this update: Sat 23 Nov 2024 02:44:33 +0000 Manifest next update: Sat 30 Nov 2024 02:44:32 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: fpTxWYIdsMZDJg0/ZRo1IBzjDbKAwoF3jeqliIteydk=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: E+oIn482BPyJkmibWcETKP/96GJSMoGPWaphK0YLOX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Nov 23 02:44:33 2024 GMT Not After : Nov 30 02:44:32 2024 GMT Subject: CN=67414191-2e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:2e:40:40:ca:47:a4:66:11:10:07:e6:0f: c6:b3:31:0a:85:5e:86:5d:15:66:81:e9:00:69:ea: c3:81:6d:3b:aa:11:2e:b0:4a:3d:bd:60:c8:36:e7: 08:6a:6d:71:20:0a:69:31:dc:4d:b4:16:0b:4c:7f: 1a:81:64:dd:42:9d:46:c5:c4:21:72:f7:01:8b:87: 1a:bd:24:43:e2:16:fd:f4:c4:11:02:71:4b:00:76: 38:48:0c:79:eb:97:b9:d1:86:5b:b8:f5:fa:4a:76: 0d:84:9c:6b:d8:66:25:79:4e:84:31:03:65:90:ae: ac:ca:b9:6a:5a:20:d6:47:6e:69:21:c8:a2:5d:57: 0e:c3:3c:56:07:78:b8:2f:7b:d3:51:a4:4b:5e:60: 57:5b:cf:7a:6b:c9:67:72:e1:3d:e5:5c:50:06:0e: f9:71:da:05:db:8b:5b:2c:c3:6a:a0:1f:02:b0:84: 0a:8a:be:3a:a5:8b:2a:16:58:a9:e0:cb:58:87:4d: b3:91:d6:ee:10:ce:b3:b3:7c:e1:47:df:52:55:cd: b4:dd:7e:5b:6a:93:6e:4f:9b:e8:9e:88:03:22:d3: ed:25:c1:d3:5c:02:02:5b:04:39:b9:ac:f1:b8:97: 00:8f:6e:41:c4:9e:b5:56:ad:d1:30:85:c2:8f:b4: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:99:89:41:23:2D:89:D8:30:7F:D4:CE:C2:66:28:4E:78:D3:4A:96 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:30:11:7f:bd:2b:ec:ac:f9:eb:37:2b:f9:c1:a3:4b:e1:db: ed:02:7b:b2:47:21:48:94:9d:a4:78:87:8f:0c:b5:98:48:68: 3c:5d:55:85:f2:0b:db:42:f3:dc:18:1c:cb:01:67:c9:56:c4: d9:b6:69:64:00:de:3e:b6:ef:5d:fd:ce:46:1b:0e:45:76:06: ef:54:f4:be:ca:72:db:ff:d5:40:9c:a1:9d:ef:a0:f9:08:d4: 0e:4c:71:59:af:04:80:5a:db:c8:1a:b2:4d:02:a1:9f:35:a4: c6:fb:7c:eb:51:e7:62:ba:35:0f:8c:2d:e5:bd:df:a8:b4:0d: df:22:40:91:78:f7:d2:c0:91:58:a1:2d:ff:e2:29:66:19:9f: 5e:0c:1f:96:17:ef:d3:a7:c0:af:66:ee:fe:3a:d9:ad:f9:ac: 1d:ea:05:ae:41:8f:6a:3f:15:e5:37:b3:13:bc:8d:47:85:a6: 76:fa:0d:77:b5:d4:63:c3:ee:a9:59:59:e9:b5:f6:f7:75:ab: 2b:4e:35:f3:85:44:d1:f6:64:84:82:75:55:25:29:2f:3e:56: 5c:e1:06:ab:b3:af:55:51:8c:ff:18:a6:7a:6f:40:07:4f:d9: 0b:50:37:b9:a9:29:e9:78:22:f0:b5:78:3e:52:71:58:c0:2b: b0:bd:78:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjQxMTIzMDI0NDMzWhcNMjQxMTMwMDI0NDMyWjAYMRYwFAYD VQQDEw02NzQxNDE5MS0yZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVEuQEDKR6RmERAH5g/GszEKhV6GXRVmgekAaerDgW07qhEusEo9vWDINucI am1xIAppMdxNtBYLTH8agWTdQp1GxcQhcvcBi4cavSRD4hb99MQRAnFLAHY4SAx5 65e50YZbuPX6SnYNhJxr2GYleU6EMQNlkK6syrlqWiDWR25pIciiXVcOwzxWB3i4 L3vTUaRLXmBXW896a8lncuE95VxQBg75cdoF24tbLMNqoB8CsIQKir46pYsqFlip 4MtYh02zkdbuEM6zs3zhR99SVc203X5bapNuT5vonogDItPtJcHTXAICWwQ5uazx uJcAj25BxJ61Vq3RMIXCj7RvRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByZiUEj LYnYMH/UzsJmKE5400qWMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMMBF/vSvsrPnrNyv5waNL4dvtAnuyRyFIlJ2keIePDLWYSGg8XVWF 8gvbQvPcGBzLAWfJVsTZtmlkAN4+tu9d/c5GGw5FdgbvVPS+ynLb/9VAnKGd76D5 CNQOTHFZrwSAWtvIGrJNAqGfNaTG+3zrUediujUPjC3lvd+otA3fIkCRePfSwJFY oS3/4ilmGZ9eDB+WF+/Tp8CvZu7+Otmt+awd6gWuQY9qPxXlN7MTvI1HhaZ2+g13 tdRjw+6pWVnptfb3dasrTjXzhUTR9mSEgnVVJSkvPlZc4Qars69VUYz/GKZ6b0AH T9kLUDe5qSnpeCLwtXg+UnFYwCuwvXg0 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org