$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: SLxWhc7+tiPB02dFTPm6Cfj+I/IZQnKP2r0hPxYgQjA= Subject key identifier: 85:61:69:EE:FF:83:A9:59:78:77:AB:82:E5:4C:38:41:9F:79:B3:56 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 05DB Signing time: Fri 22 Nov 2024 22:31:42 +0000 Manifest this update: Fri 22 Nov 2024 22:31:41 +0000 Manifest next update: Fri 29 Nov 2024 22:31:41 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: y4eFgkehKs5XuIe0qo+aLLfRMLHxlsrwHsgKXhULI4U=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: i8DoGHYlHx46c/zGymlOqfsnnDW4xU0Ca98hVoxidlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Nov 22 22:31:41 2024 GMT Not After : Nov 29 22:31:41 2024 GMT Subject: CN=6741064d-a2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:2b:2b:f8:3b:be:2a:18:db:24:00:46:d3: 41:39:4f:1d:61:95:12:68:82:2f:5d:1d:de:19:3d: e1:26:ef:db:9d:c3:05:21:5d:3f:36:8f:7b:dc:ac: 40:be:37:e3:74:d2:d3:01:3e:9a:ad:36:50:47:c1: 53:e1:ed:d9:ca:e7:95:ea:70:d6:28:0d:99:ee:e2: 40:b5:30:e5:7b:2b:7b:36:e3:34:5a:ea:f8:44:6b: df:a1:c2:39:9a:87:b1:8a:aa:0d:ce:68:b9:94:e0: 96:6c:85:37:b3:42:1a:6b:82:20:93:43:95:cd:2c: f9:b9:09:61:c0:25:ce:c5:72:41:97:04:1c:80:db: 9c:b8:7e:4d:1b:d9:a5:0a:38:df:58:c0:d4:5d:6a: 1f:d1:e7:45:ee:66:6b:b9:89:4a:75:8e:c4:10:41: 46:94:1d:9c:e4:d1:59:c2:0b:1c:c7:1e:db:7d:9c: ad:c9:a2:ff:2d:e5:53:ee:86:c6:2c:45:df:43:35: f9:b5:b9:1c:5e:5a:98:23:19:04:e6:62:21:6e:e9: 8b:b8:7a:a9:0e:03:ee:bd:23:5c:1a:99:bd:85:53: 34:c9:1b:91:92:fe:d3:04:fb:b7:12:f4:0b:3a:fb: 58:03:38:ca:ca:4f:7c:fe:d9:0a:93:9e:20:8a:ae: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:61:69:EE:FF:83:A9:59:78:77:AB:82:E5:4C:38:41:9F:79:B3:56 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:06:b1:a4:aa:81:26:3d:8e:9b:cf:62:20:06:aa:1a:4d: 26:c3:98:a7:19:2d:1f:b3:5b:41:6b:19:26:dc:dc:9b:37:ad: da:26:01:e5:e2:33:a2:a4:60:ef:5f:5b:be:ce:0e:61:40:c4: 2b:a0:f5:80:51:ec:aa:61:aa:13:e9:7e:b7:0d:7c:c5:c3:9f: b9:f6:64:0a:28:5d:0c:d6:8f:2f:2b:b6:44:27:32:ed:b0:23: ad:6e:e4:be:e5:0e:3a:a9:fe:93:0a:e9:2f:79:8f:e2:a3:54: 22:41:3c:d9:10:3e:66:fc:86:ec:da:a0:64:9c:51:f2:33:8e: a9:e8:2c:ab:b6:2b:24:bf:25:47:f8:ff:ba:0c:e9:bf:3e:ce: c7:69:28:39:df:94:51:74:c9:75:e0:34:ed:17:03:1e:84:89: 78:e9:68:5b:b0:5b:ef:26:fa:ac:17:64:a0:f1:59:d9:e2:0f: a7:c6:8f:98:8e:98:cb:bb:79:0d:a3:53:41:d2:47:db:0a:4f: eb:39:2e:45:d9:47:0e:3d:7e:2e:21:c6:a7:21:9c:dc:8b:b1: b1:a2:9b:9b:72:25:2b:fb:10:8c:ed:d2:cd:5c:42:62:60:ef: bb:65:33:0b:16:3f:62:8c:98:a7:41:1e:e4:54:88:e3:d5:ca: 76:82:df:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjQxMTIyMjIzMTQxWhcNMjQxMTI5MjIzMTQxWjAYMRYwFAYD VQQDEw02NzQxMDY0ZC1hMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuMrK/g7vioY2yQARtNBOU8dYZUSaIIvXR3eGT3hJu/bncMFIV0/No973KxA vjfjdNLTAT6arTZQR8FT4e3ZyueV6nDWKA2Z7uJAtTDleyt7NuM0Wur4RGvfocI5 moexiqoNzmi5lOCWbIU3s0Iaa4Igk0OVzSz5uQlhwCXOxXJBlwQcgNucuH5NG9ml CjjfWMDUXWof0edF7mZruYlKdY7EEEFGlB2c5NFZwgscxx7bfZytyaL/LeVT7obG LEXfQzX5tbkcXlqYIxkE5mIhbumLuHqpDgPuvSNcGpm9hVM0yRuRkv7TBPu3EvQL OvtYAzjKyk98/tkKk54giq75dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVhae7/ g6lZeHerguVMOEGfebNWMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANyQaxpKqBJj2Om89iIAaqGk0mw5inGS0fs1tBaxkm3NybN63aJgHl 4jOipGDvX1u+zg5hQMQroPWAUeyqYaoT6X63DXzFw5+59mQKKF0M1o8vK7ZEJzLt sCOtbuS+5Q46qf6TCukveY/io1QiQTzZED5m/Ibs2qBknFHyM46p6CyrtiskvyVH +P+6DOm/Ps7HaSg535RRdMl14DTtFwMehIl46WhbsFvvJvqsF2Sg8VnZ4g+nxo+Y jpjLu3kNo1NB0kfbCk/rOS5F2UcOPX4uIcanIZzci7GxopubciUr+xCM7dLNXEJi YO+7ZTMLFj9ijJinQR7kVIjj1cp2gt9c -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org