$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: Fj+8JyZ0FujFOnAfFltUtFhXItvy+D2LbRFqemjItpk= Subject key identifier: EF:39:4F:33:C2:28:ED:E4:87:D2:B9:67:B9:EA:96:BE:63:CF:EB:74 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 0671 Signing time: Fri 22 Nov 2024 21:54:34 +0000 Manifest this update: Fri 22 Nov 2024 21:54:34 +0000 Manifest next update: Fri 29 Nov 2024 21:54:34 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: 1aGvodF8UsQiGaTYKyidNN1z5HiZt1YIc1Iy3O2kM6g=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Nov 22 21:54:34 2024 GMT Not After : Nov 29 21:54:34 2024 GMT Subject: CN=6740fd9a-7c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:09:74:c4:01:f6:7b:5b:4b:07:34:e0:0b: 39:d8:7a:7d:66:dc:04:9e:d1:d4:13:0b:db:d8:ed: ef:6f:d6:19:c1:34:b3:88:06:d3:4e:9b:00:c6:2e: c4:8a:ae:8b:0a:93:25:89:4a:55:81:a3:f7:7e:02: d8:a9:84:3a:a6:d7:87:2a:da:03:a0:70:cf:02:bd: c2:b6:0f:b9:b4:31:99:7c:bb:da:6b:1b:30:ac:dc: 83:25:d6:83:5d:e7:9c:69:ca:74:6e:aa:b4:97:bb: 0b:0b:78:9c:ef:5c:bb:2c:ac:13:1a:1a:f9:33:2e: fc:c5:26:4b:e3:2c:69:6d:98:31:ff:20:fc:c6:02: e1:d0:ea:01:d0:cd:8a:67:da:23:3f:4f:70:f6:5a: 02:1d:f1:bd:20:af:17:a0:88:c2:c9:a4:24:3e:8d: be:30:af:e9:fe:d3:78:8a:68:a4:44:5a:8f:d8:d6: 68:1d:af:ab:a3:86:fe:3a:34:72:b2:fe:8f:b0:8a: 55:65:19:f4:de:1f:a3:09:c3:93:23:f2:f8:db:ae: 0e:9b:6c:c2:a7:39:88:c5:52:de:4f:7a:04:8a:14: 9e:ff:3d:fb:7a:c7:01:86:fc:a3:23:53:44:fd:21: 09:e2:d0:0f:4b:d9:15:a8:7a:b5:a1:c3:6f:bf:4b: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:39:4F:33:C2:28:ED:E4:87:D2:B9:67:B9:EA:96:BE:63:CF:EB:74 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:8c:38:14:37:a6:75:98:36:af:bf:ca:b8:2e:1d:7d:52:e1: 64:b7:0c:ac:e5:50:3e:5d:96:b3:59:81:b9:be:2d:4d:8a:ff: ee:33:0d:80:28:20:71:0e:44:e4:c9:b3:0e:af:f1:80:68:76: fb:5e:20:39:87:26:3d:f8:71:46:09:13:d9:38:92:eb:2e:1d: f3:ee:b6:2b:c2:92:58:f0:74:15:f0:7c:af:92:fd:32:2e:0e: a1:ed:24:40:7b:5f:c5:53:a7:b0:aa:e3:0e:65:df:0d:e1:02: 94:dd:cc:64:3e:26:79:00:37:78:08:96:67:b1:20:57:ec:d7: 15:b1:ac:9a:ba:1a:6e:e3:89:ae:2d:e2:76:67:7c:e8:f3:70: 8d:69:a8:7c:1b:be:dd:b5:81:be:f5:ac:5b:8a:f5:57:3b:41: 54:a0:58:35:74:e1:26:b3:e0:51:c3:8e:c7:73:03:72:a8:b3: ed:19:13:95:70:d7:43:69:c9:52:ac:86:7e:d4:63:f4:7b:c9: 38:a3:86:15:89:a9:11:5a:ae:15:de:93:d3:be:f0:66:6b:7f: 12:8f:5f:5f:d5:2f:9b:4f:a8:f6:7f:70:77:4c:e3:96:ea:94: fc:46:bf:ee:bf:65:eb:37:b5:3b:5e:1d:60:ba:49:db:90:e5: 71:d4:ed:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjQxMTIyMjE1NDM0WhcNMjQxMTI5MjE1NDM0WjAYMRYwFAYD VQQDEw02NzQwZmQ5YS03YzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+AJdMQB9ntbSwc04As52Hp9ZtwEntHUEwvb2O3vb9YZwTSziAbTTpsAxi7E iq6LCpMliUpVgaP3fgLYqYQ6pteHKtoDoHDPAr3Ctg+5tDGZfLvaaxswrNyDJdaD Xeecacp0bqq0l7sLC3ic71y7LKwTGhr5My78xSZL4yxpbZgx/yD8xgLh0OoB0M2K Z9ojP09w9loCHfG9IK8XoIjCyaQkPo2+MK/p/tN4imikRFqP2NZoHa+ro4b+OjRy sv6PsIpVZRn03h+jCcOTI/L4264Om2zCpzmIxVLeT3oEihSe/z37escBhvyjI1NE /SEJ4tAPS9kVqHq1ocNvv0uhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO85TzPC KO3kh9K5Z7nqlr5jz+t0MB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2jDgUN6Z1mDavv8q4Lh19UuFktwys5VA+XZazWYG5vi1Niv/uMw2A KCBxDkTkybMOr/GAaHb7XiA5hyY9+HFGCRPZOJLrLh3z7rYrwpJY8HQV8Hyvkv0y Lg6h7SRAe1/FU6ewquMOZd8N4QKU3cxkPiZ5ADd4CJZnsSBX7NcVsayauhpu44mu LeJ2Z3zo83CNaah8G77dtYG+9axbivVXO0FUoFg1dOEms+BRw47HcwNyqLPtGROV cNdDaclSrIZ+1GP0e8k4o4YViakRWq4V3pPTvvBma38Sj19f1S+bT6j2f3B3TOOW 6pT8Rr/uv2XrN7U7Xh1guknbkOVx1O0V -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org