$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: JP8JDuOGuH6Amgv/Q4YFSha9XiYbtkAslc1w+If1Jws= Subject key identifier: F2:B8:DD:1D:74:81:C8:E2:56:33:39:16:17:A2:EC:F6:AB:0B:7E:C9 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0BE1 Signing time: Fri 22 Nov 2024 18:27:30 +0000 Manifest this update: Fri 22 Nov 2024 18:27:29 +0000 Manifest next update: Fri 29 Nov 2024 18:27:29 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: VzzTV1gCXotZfFGk+vGcUQr6Y5eJtenmFl8AA2aIrYM=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: 8ePOlBYKqgy0MK4nBzW4xCCIxX7mzxm4E8sEUtNm6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Nov 22 18:27:29 2024 GMT Not After : Nov 29 18:27:29 2024 GMT Subject: CN=6740cd11-8767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:3e:91:07:b0:82:72:8e:83:51:f4:d7:ba: d6:fb:7b:55:39:46:71:5c:f0:8b:89:f5:6b:f6:0b: 8e:16:e5:b3:20:17:bc:9c:b0:9f:01:7a:24:70:cb: fc:58:23:57:56:19:6d:15:cc:29:54:61:61:2e:7d: 17:2e:4f:3c:d2:de:09:36:8d:72:24:59:2b:3a:69: d6:71:ee:4b:ca:10:c2:cf:59:33:33:8c:86:08:0d: 75:96:f7:d7:ab:96:f5:a0:91:73:93:9e:1d:f7:83: f4:a6:ac:fb:9a:90:33:87:e0:bc:d3:d9:3a:8c:0b: b6:e0:3f:fc:96:b0:54:d7:8a:c2:a6:90:26:46:e1: 0d:8b:52:79:68:0d:bc:65:8d:b5:84:12:02:0a:dd: be:75:4a:43:5a:95:60:5f:a9:02:7a:04:13:be:44: f5:8a:76:d1:31:63:c1:d5:9d:1c:16:3c:ed:3b:01: a1:15:cd:72:5f:8d:41:2b:04:f4:57:aa:7c:c5:0e: 7f:10:f7:91:7e:c5:ff:44:3a:36:33:90:ca:a0:bb: a5:7c:df:29:b2:7e:3d:b6:00:df:c8:22:26:3c:f8: c3:de:03:2f:17:d6:ca:6e:50:05:1d:0e:8d:a6:f6: 97:47:10:70:87:e4:05:1d:68:bf:fe:6c:58:0b:3b: f3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:DD:1D:74:81:C8:E2:56:33:39:16:17:A2:EC:F6:AB:0B:7E:C9 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:bb:b3:8d:d0:04:42:9d:33:e1:ab:ff:4a:20:20:74:dd: 42:fa:c5:1f:4c:d0:d9:c8:b3:0d:aa:79:4a:bd:37:6f:5b:b3: dc:22:fd:9b:a1:bf:56:a5:ab:83:32:f0:7b:d6:0b:10:ec:b7: 12:fa:ed:6d:59:bb:9b:da:be:06:19:fe:dc:26:88:17:45:4d: c8:e1:f7:cf:48:8f:a4:9d:cd:1e:45:dc:f5:2c:42:6c:c3:56: 05:af:1e:86:58:ea:4e:8c:5f:c2:d7:4d:6e:c5:fa:8f:5a:42: ef:a0:68:16:85:d9:d6:11:e5:89:26:02:fd:40:ff:53:3e:52: e1:3e:10:33:65:b6:c9:05:a7:d2:d3:9a:20:84:cc:d9:06:21: 88:24:9f:ed:cb:38:f5:0e:a9:d1:a0:0c:48:dd:23:80:50:6d: c1:a1:24:05:83:e8:76:12:c1:21:71:15:f0:d0:67:e5:b0:df: c3:9c:77:ec:03:c9:f8:80:cd:63:fe:5b:fa:45:f5:a4:d8:82: 6d:9b:73:59:6c:06:55:b9:bf:04:93:bd:78:31:57:2a:b7:df: 15:09:2f:f3:37:28:6a:02:05:15:35:52:15:05:58:dd:8e:9d: 31:a9:ab:96:43:59:0b:67:bc:d7:71:a0:f9:07:70:6e:37:b3: f0:68:f5:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjQxMTIyMTgyNzI5WhcNMjQxMTI5MTgyNzI5WjAYMRYwFAYD VQQDEw02NzQwY2QxMS04NzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjo+kQewgnKOg1H017rW+3tVOUZxXPCLifVr9guOFuWzIBe8nLCfAXokcMv8 WCNXVhltFcwpVGFhLn0XLk880t4JNo1yJFkrOmnWce5LyhDCz1kzM4yGCA11lvfX q5b1oJFzk54d94P0pqz7mpAzh+C809k6jAu24D/8lrBU14rCppAmRuENi1J5aA28 ZY21hBICCt2+dUpDWpVgX6kCegQTvkT1inbRMWPB1Z0cFjztOwGhFc1yX41BKwT0 V6p8xQ5/EPeRfsX/RDo2M5DKoLulfN8psn49tgDfyCImPPjD3gMvF9bKblAFHQ6N pvaXRxBwh+QFHWi//mxYCzvz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK43R10 gcjiVjM5Fhei7ParC37JMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqSbuzjdAEQp0z4av/SiAgdN1C+sUfTNDZyLMNqnlKvTdvW7PcIv2b ob9WpauDMvB71gsQ7LcS+u1tWbub2r4GGf7cJogXRU3I4ffPSI+knc0eRdz1LEJs w1YFrx6GWOpOjF/C101uxfqPWkLvoGgWhdnWEeWJJgL9QP9TPlLhPhAzZbbJBafS 05oghMzZBiGIJJ/tyzj1DqnRoAxI3SOAUG3BoSQFg+h2EsEhcRXw0GflsN/DnHfs A8n4gM1j/lv6RfWk2IJtm3NZbAZVub8Ek714MVcqt98VCS/zNyhqAgUVNVIVBVjd jp0xqauWQ1kLZ7zXcaD5B3BuN7PwaPXG -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org