$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: RhBCTzR9y+Hsx4KJy3IULwSmM8gnYMMudMiISt9EypU= Subject key identifier: 02:D8:1D:C8:90:3F:03:06:48:21:3D:64:7A:BE:15:A6:09:34:03:2B Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0A90 Signing time: Fri 22 Nov 2024 19:21:45 +0000 Manifest this update: Fri 22 Nov 2024 19:21:44 +0000 Manifest next update: Fri 29 Nov 2024 19:21:44 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: GK3yPhzy68nSuLkm3mEQzDhB6CpjCttrwm0IeEKk0O4=) 2: E2CAB200747311EDABDC9A09C4F9AE02.roa (hash: jEVSkSeVPG+CRHE/RY6mwUE07Rduex07MaziWZ9BtcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Nov 22 19:21:44 2024 GMT Not After : Nov 29 19:21:44 2024 GMT Subject: CN=6740d9c9-f489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:ec:86:c4:c5:35:1e:16:ac:df:eb:05:6c: 36:bc:a7:42:b0:4e:19:e1:ab:89:33:ee:2a:be:23: 3d:02:37:30:bd:c8:ed:c2:7f:b6:98:27:f6:b6:ba: d6:f4:9f:10:27:72:ad:07:5a:3b:98:c9:df:de:b8: 27:3a:ad:b5:80:15:ee:eb:a6:ac:1c:5c:f5:55:41: 81:5e:48:f8:f7:ec:de:27:e8:15:2d:90:e8:0f:ce: 8c:32:22:c6:ef:2d:f0:44:85:62:e2:1b:d6:06:2c: 22:1e:3b:85:89:ad:a5:1c:76:70:42:8e:2c:5f:a0: 57:70:71:15:b1:2e:c0:65:6b:e5:0a:11:37:b9:b6: 74:73:79:4b:03:3b:a1:82:42:74:3c:56:33:7a:b3: 53:7d:9a:4a:a3:bf:90:e7:f4:49:d4:e1:98:e3:fb: 4b:f4:6a:46:67:86:38:c9:af:4b:84:a9:18:2e:14: 84:19:6b:99:cf:b2:82:a8:31:2b:d2:7c:36:55:58: e6:cd:2e:0d:0c:87:cb:1a:04:18:89:a9:11:47:0a: 12:b9:0c:cd:65:53:30:a8:68:c7:87:c4:99:a9:4b: e6:fe:aa:a3:61:b8:c2:f2:53:5e:82:32:0b:e9:39: 08:ab:0c:66:29:61:a2:df:72:ff:ee:88:d3:e5:ae: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:1D:C8:90:3F:03:06:48:21:3D:64:7A:BE:15:A6:09:34:03:2B X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:22:68:5f:68:10:fb:a8:1c:af:4f:55:bc:7c:5f:1d:39:f0: 6b:27:5c:3d:ab:c1:81:4b:74:29:9a:dd:f9:49:20:63:25:6e: da:41:44:70:f6:24:34:0c:3a:99:a8:92:88:2c:da:ec:a5:67: ab:54:ff:f3:34:28:60:ca:55:02:d1:49:8d:8f:16:d5:e1:23: d4:e2:cb:06:84:19:1c:1f:0c:85:fe:8e:b8:ef:7f:90:ab:e3: 19:56:92:8f:6e:9c:0a:94:f9:02:61:cb:a4:b4:4b:49:a5:04: 13:f1:15:6a:44:dd:39:0a:98:1d:ab:3a:ea:f4:16:2e:c6:c3: 3b:11:1c:9d:26:73:0c:b6:a1:a5:9a:23:ff:a3:59:05:89:1b: 43:97:83:54:22:88:c5:19:20:d5:cb:a2:8e:be:8b:ce:53:15: e0:de:31:29:18:0b:e5:22:ef:2d:af:90:2a:4c:8d:bd:cc:8b: 8a:1f:25:8b:b8:7a:fa:85:4b:f5:61:e8:cf:4e:4b:5a:84:79: d0:6f:7e:1c:6c:18:bf:08:9f:4a:9d:2f:f0:15:6d:5b:3e:16: 60:1c:e4:3d:39:a3:a5:cf:19:4f:63:81:f5:7e:75:ec:f5:62: a6:f8:a7:b7:15:9d:9a:33:ec:8d:fa:eb:01:84:82:d9:88:48: b5:f7:e0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjQxMTIyMTkyMTQ0WhcNMjQxMTI5MTkyMTQ0WjAYMRYwFAYD VQQDEw02NzQwZDljOS1mNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdPshsTFNR4WrN/rBWw2vKdCsE4Z4auJM+4qviM9Ajcwvcjtwn+2mCf2trrW 9J8QJ3KtB1o7mMnf3rgnOq21gBXu66asHFz1VUGBXkj49+zeJ+gVLZDoD86MMiLG 7y3wRIVi4hvWBiwiHjuFia2lHHZwQo4sX6BXcHEVsS7AZWvlChE3ubZ0c3lLAzuh gkJ0PFYzerNTfZpKo7+Q5/RJ1OGY4/tL9GpGZ4Y4ya9LhKkYLhSEGWuZz7KCqDEr 0nw2VVjmzS4NDIfLGgQYiakRRwoSuQzNZVMwqGjHh8SZqUvm/qqjYbjC8lNegjIL 6TkIqwxmKWGi33L/7ojT5a6fKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALYHciQ PwMGSCE9ZHq+FaYJNAMrMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFImhfaBD7qByvT1W8fF8dOfBrJ1w9q8GBS3Qpmt35SSBjJW7aQURw 9iQ0DDqZqJKILNrspWerVP/zNChgylUC0UmNjxbV4SPU4ssGhBkcHwyF/o6473+Q q+MZVpKPbpwKlPkCYcuktEtJpQQT8RVqRN05Cpgdqzrq9BYuxsM7ERydJnMMtqGl miP/o1kFiRtDl4NUIojFGSDVy6KOvovOUxXg3jEpGAvlIu8tr5AqTI29zIuKHyWL uHr6hUv1YejPTktahHnQb34cbBi/CJ9KnS/wFW1bPhZgHOQ9OaOlzxlPY4H1fnXs 9WKm+Ke3FZ2aM+yN+usBhILZiEi19+Ch -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org