$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: R+2P4efJxMfipVN/BYCA2B+ytoK9ssWOYjfbLm2I4PU= Subject key identifier: 4F:53:53:8E:4E:A9:6A:43:F0:E7:61:AD:8D:A6:65:D3:38:14:6C:8B Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: DF Signing time: Sat 23 Nov 2024 03:36:14 +0000 Manifest this update: Sat 23 Nov 2024 03:36:13 +0000 Manifest next update: Sat 30 Nov 2024 03:36:13 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: h9US1iOrlLWvj8WK376Ooy1QiHAbjEt0zC0JVLK9CK8=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Nov 23 03:36:13 2024 GMT Not After : Nov 30 03:36:13 2024 GMT Subject: CN=67414dae-ba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:1a:d0:c9:b5:0a:41:ed:6f:d9:bd:8f:e3: 33:6b:b2:a5:bd:b5:3b:4a:7a:4f:25:55:34:82:23: aa:d1:9a:ea:a5:b8:53:c7:a0:f5:c6:fa:bc:02:05: 48:53:db:60:ec:60:1c:55:ae:59:33:e6:e8:b5:da: 28:b6:c8:b5:f8:63:e6:4e:c6:e3:76:0f:c5:2d:db: 63:03:48:ee:18:05:13:b0:f9:42:9e:d5:34:54:e9: be:d8:96:c9:3a:31:cd:35:a7:8f:c1:ba:56:91:34: ea:13:1f:90:3c:ac:bb:bb:99:fa:b9:c3:ba:2e:0e: 24:d9:83:5a:10:9f:25:30:65:c6:f8:4f:ca:cc:1c: 8b:93:e4:b4:27:4e:0e:1e:4d:ea:28:a3:a3:58:f9: 7d:8a:9c:b1:68:e8:36:6d:b2:b6:63:25:b9:0e:be: d6:04:cd:d8:72:a1:2d:af:68:43:31:3b:58:dd:d7: 82:03:3e:70:62:bd:7f:7d:dd:39:4f:aa:bc:ca:4e: 86:ba:91:45:13:c0:5a:30:ff:dc:80:9c:3b:cb:c7: 92:f4:7a:8e:54:eb:3e:f2:99:d2:38:e2:9d:b4:6c: 2e:8c:04:6b:45:4e:f9:c1:5f:4c:58:35:e2:7f:f9: dd:c6:6e:5e:7f:63:e2:37:61:06:47:de:2d:fa:8a: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:53:8E:4E:A9:6A:43:F0:E7:61:AD:8D:A6:65:D3:38:14:6C:8B X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:42:0c:99:ed:ac:ce:37:fd:9b:f0:8c:c8:d7:ce:e1:5b:50: 6f:c7:63:03:87:b9:89:44:f6:12:3d:3b:95:b0:11:7e:53:c5: 49:3f:ee:71:04:1a:b9:d5:7e:96:dc:51:f2:4a:fe:e0:bd:ad: d1:85:0c:d1:40:ab:7a:17:d9:a8:bf:96:fc:32:36:58:3a:0c: f9:f2:b8:72:0e:96:b2:36:dd:1c:a2:ee:64:51:fe:1a:b0:bf: bf:58:ed:03:2a:c3:52:24:00:c2:1c:78:d7:92:3e:aa:82:25: b5:0b:bc:ca:ff:b0:82:ea:64:de:d6:23:35:9e:46:f5:2f:a9: 9a:ad:1c:06:b5:6b:c2:40:af:2e:3f:7c:b8:8d:c3:04:1d:99: 33:f0:8f:d4:ba:3e:c8:aa:82:0f:cb:58:ee:b7:f7:3d:79:46: 3c:72:5d:36:5f:cf:61:c0:f2:b0:25:5c:88:b6:c8:03:13:8a: 6d:e6:32:00:52:0c:c1:14:57:fe:ef:c2:94:a5:76:bb:59:7a: 78:82:d2:54:65:79:ff:18:2f:a3:6d:cd:8a:93:34:47:94:63: 8c:ad:58:54:ac:bb:cf:82:41:c4:60:4e:8c:f6:f3:66:2a:3e: 1a:d7:f4:0d:36:50:0e:9a:5e:c1:a2:4f:f5:21:52:f7:26:36: d7:19:eb:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjQxMTIzMDMzNjEzWhcNMjQxMTMwMDMzNjEzWjAYMRYwFAYD VQQDEw02NzQxNGRhZS1iYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAka0Mm1CkHtb9m9j+Mza7KlvbU7SnpPJVU0giOq0ZrqpbhTx6D1xvq8AgVI U9tg7GAcVa5ZM+botdootsi1+GPmTsbjdg/FLdtjA0juGAUTsPlCntU0VOm+2JbJ OjHNNaePwbpWkTTqEx+QPKy7u5n6ucO6Lg4k2YNaEJ8lMGXG+E/KzByLk+S0J04O Hk3qKKOjWPl9ipyxaOg2bbK2YyW5Dr7WBM3YcqEtr2hDMTtY3deCAz5wYr1/fd05 T6q8yk6GupFFE8BaMP/cgJw7y8eS9HqOVOs+8pnSOOKdtGwujARrRU75wV9MWDXi f/ndxm5ef2PiN2EGR94t+oqBsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9TU45O qWpD8OdhrY2mZdM4FGyLMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfQgyZ7azON/2b8IzI187hW1Bvx2MDh7mJRPYSPTuVsBF+U8VJP+5x BBq51X6W3FHySv7gva3RhQzRQKt6F9mov5b8MjZYOgz58rhyDpayNt0cou5kUf4a sL+/WO0DKsNSJADCHHjXkj6qgiW1C7zK/7CC6mTe1iM1nkb1L6marRwGtWvCQK8u P3y4jcMEHZkz8I/Uuj7IqoIPy1jut/c9eUY8cl02X89hwPKwJVyItsgDE4pt5jIA UgzBFFf+78KUpXa7WXp4gtJUZXn/GC+jbc2KkzRHlGOMrVhUrLvPgkHEYE6M9vNm Kj4a1/QNNlAOml7Bok/1IVL3JjbXGetr -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org