$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: NUEXghGnMD1kHxrvTeI+LDH4i2iAFzAHTwNsXEISqys= Subject key identifier: F0:BC:D8:26:84:F1:0A:E3:45:4B:69:10:69:42:80:79:59:AB:C5:B1 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 0173 Signing time: Sat 23 Nov 2024 02:15:13 +0000 Manifest this update: Sat 23 Nov 2024 02:15:13 +0000 Manifest next update: Sat 30 Nov 2024 02:15:13 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: FmvT7k/MdvQXtULK75S1tg3+MN3PGXQqUhKNHlCLyyM=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: 70V2cII6ULY6BBWf+9zyNcfzJhH0MCllEioHlbtCrmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Nov 23 02:15:13 2024 GMT Not After : Nov 30 02:15:13 2024 GMT Subject: CN=67413ab1-b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:65:47:87:fe:e5:1d:4b:e8:19:de:09:8a: 63:e2:6d:f1:be:90:01:95:22:46:31:9d:ba:17:bb: 07:36:e9:16:0c:fa:d7:f5:9d:8f:d2:88:1a:8d:46: f2:40:67:04:32:35:0a:03:11:ca:ef:57:34:bd:22: 7c:2f:a6:dd:9c:7d:50:ea:40:bb:ee:1c:68:5a:f5: 3c:a7:34:61:ac:88:0e:2b:ed:09:b9:7e:44:7b:2b: 51:a2:ac:b0:3e:43:17:d3:9c:27:60:9c:1c:b4:9a: 81:0e:83:6e:40:be:5f:7c:ca:20:67:ee:a9:5d:6d: 06:e3:b8:3d:ab:8e:02:3b:05:59:80:35:57:ab:a0: 8c:c0:70:47:c4:97:93:70:55:7f:59:54:65:3c:c4: 15:fa:8a:eb:d6:32:7c:29:7f:a4:1e:8d:86:cb:c3: a8:b1:3f:21:09:a9:02:87:4a:f8:67:d8:d9:76:5b: 4c:d7:27:a6:a1:5e:39:12:24:65:22:9d:f8:bf:d6: db:b3:f7:cf:4f:29:a2:9e:94:d6:9d:8d:a6:8b:eb: d7:41:5b:88:85:03:8b:76:28:46:a0:04:23:92:f5: 5d:31:43:1c:96:3c:24:c3:94:a5:2e:3a:8a:e9:9a: e5:75:6a:df:01:98:db:e3:19:b1:6c:74:7c:ee:ee: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:D8:26:84:F1:0A:E3:45:4B:69:10:69:42:80:79:59:AB:C5:B1 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:4d:d0:4f:38:8c:64:49:f1:92:34:4a:66:96:e3:b8:f5:de: 40:50:94:6f:ad:d9:99:84:34:29:1f:49:22:cd:a6:ba:5c:04: bd:dd:f9:b8:cf:76:ef:64:2e:1e:2b:ba:24:d2:6d:53:00:41: 06:11:c4:a1:cd:14:cc:bb:48:ad:ad:ee:45:3a:c3:33:f1:4b: 61:75:55:34:2f:ad:85:7b:5c:61:79:b4:84:d7:90:7b:6f:ad: 90:a8:27:90:c1:d8:a4:6a:d7:d7:63:b9:92:50:29:dc:87:50: cc:59:7f:1f:2a:ce:2d:e2:7d:84:3e:24:f8:62:f4:02:69:23: eb:08:c8:1c:e0:ea:e1:dc:69:d5:a1:2d:ed:e4:14:98:2d:22: 1a:5b:9c:ae:36:76:3c:f1:24:f2:ff:56:98:79:cb:00:e7:2f: 76:4b:32:8d:87:02:1f:e4:8d:c5:58:05:86:c0:69:35:b3:65: 03:26:4c:7e:7f:87:b7:e9:21:ac:49:03:c9:75:f2:40:08:6c: 43:9f:37:0a:fe:9a:68:17:98:ff:d9:ea:ee:ee:30:31:58:48: 87:79:db:7d:40:d5:1f:bb:22:57:b1:c4:29:08:3f:9d:44:44: 2d:34:d9:49:29:e7:20:73:2d:16:54:3c:8a:a6:be:9a:d4:02: 40:a7:da:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjQxMTIzMDIxNTEzWhcNMjQxMTMwMDIxNTEzWjAYMRYwFAYD VQQDEw02NzQxM2FiMS1iNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50JlR4f+5R1L6BneCYpj4m3xvpABlSJGMZ26F7sHNukWDPrX9Z2P0ogajUby QGcEMjUKAxHK71c0vSJ8L6bdnH1Q6kC77hxoWvU8pzRhrIgOK+0JuX5EeytRoqyw PkMX05wnYJwctJqBDoNuQL5ffMogZ+6pXW0G47g9q44COwVZgDVXq6CMwHBHxJeT cFV/WVRlPMQV+orr1jJ8KX+kHo2Gy8OosT8hCakCh0r4Z9jZdltM1yemoV45EiRl Ip34v9bbs/fPTyminpTWnY2mi+vXQVuIhQOLdihGoAQjkvVdMUMcljwkw5SlLjqK 6ZrldWrfAZjb4xmxbHR87u5TDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC82CaE 8QrjRUtpEGlCgHlZq8WxMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4TdBPOIxkSfGSNEpmluO49d5AUJRvrdmZhDQpH0kizaa6XAS93fm4 z3bvZC4eK7ok0m1TAEEGEcShzRTMu0itre5FOsMz8UthdVU0L62Fe1xhebSE15B7 b62QqCeQwdikatfXY7mSUCnch1DMWX8fKs4t4n2EPiT4YvQCaSPrCMgc4Orh3GnV oS3t5BSYLSIaW5yuNnY88STy/1aYecsA5y92SzKNhwIf5I3FWAWGwGk1s2UDJkx+ f4e36SGsSQPJdfJACGxDnzcK/ppoF5j/2eru7jAxWEiHedt9QNUfuyJXscQpCD+d REQtNNlJKecgcy0WVDyKpr6a1AJAp9oK -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org