$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: 5xyw/XX1EHoOqH4GaO65otOzOjqAdtFokOMZ8AkiHQk= Subject key identifier: 3E:5F:9B:F7:67:AB:27:09:17:23:BC:71:37:85:2B:FA:32:5D:30:FC Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0D2B Signing time: Fri 22 Nov 2024 17:57:35 +0000 Manifest this update: Fri 22 Nov 2024 17:57:35 +0000 Manifest next update: Fri 29 Nov 2024 17:57:35 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: ov2hFT2ipbB2nypL+4PBeGoiI/v+DLb1SAb/uqSQTEA=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: kFWfFvMf8UzdUKp7Sm2Crxx6xTlM+hUx3GB42JsMyUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Nov 22 17:57:35 2024 GMT Not After : Nov 29 17:57:35 2024 GMT Subject: CN=6740c60f-940c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:f7:1e:c5:75:0d:0c:64:4c:cc:d8:04:24: ed:97:fa:d6:75:d8:f5:7f:73:62:e7:89:28:f6:bc: df:ca:cd:0f:29:30:ab:39:99:2c:ff:34:ee:bb:26: 5d:b6:5b:14:dd:6a:16:d3:4e:0a:10:58:0a:86:6c: dc:95:be:44:ae:c1:61:17:b8:aa:65:82:80:d4:52: 6e:9e:49:80:f4:9a:e6:d8:04:cb:62:37:be:09:df: 59:1b:b6:38:3d:1b:53:55:03:3d:92:f0:9b:d4:92: 82:4f:3a:58:f6:e2:fa:b6:2a:fc:e7:09:20:3f:9a: 54:cd:c4:43:5c:74:ce:0e:79:99:e0:9f:ba:04:6d: 75:73:15:3b:50:08:11:b7:1d:af:e6:6d:e3:b6:6f: 93:67:ee:9b:2a:7e:0d:5b:60:9d:4a:f0:b1:a8:2a: 64:5c:77:4d:c5:d4:51:99:a5:08:f3:cf:85:0b:be: 56:a6:e3:12:e6:57:6a:5f:c9:e2:d5:94:bc:34:83: e4:70:f1:85:dc:59:e0:d2:e0:9e:ea:45:1e:89:8e: 13:ce:4f:82:35:59:a3:62:76:1c:77:c3:32:d7:53: aa:8c:58:58:4f:04:ac:d7:63:18:3b:a4:1b:0b:cc: 20:ce:3b:30:a8:29:cf:3a:f9:f3:a3:93:03:dd:d8: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5F:9B:F7:67:AB:27:09:17:23:BC:71:37:85:2B:FA:32:5D:30:FC X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ea:d6:f6:43:2c:4f:ed:d5:b8:d6:20:ef:2f:ee:51:10:7a: 59:96:9e:29:70:e2:c3:cd:47:55:29:79:39:68:9e:96:58:0e: c4:2c:0a:3a:b4:c5:49:7c:0a:2c:da:61:21:3d:a9:50:f3:f3: c2:36:4b:52:da:34:5a:72:af:3f:83:8f:94:d2:c1:2c:e8:26: 98:7d:a0:96:db:e6:a3:31:e9:5b:8a:8a:2f:a3:82:4d:9a:5e: d3:46:22:ad:d6:31:e2:52:38:f2:eb:0b:6b:3f:8b:c3:59:37: ff:f7:85:f5:4c:b4:13:41:25:76:18:a4:fa:68:9b:1d:ef:cb: a4:da:ac:1e:18:03:ec:b4:cb:9b:73:ec:0b:fa:6f:85:fb:fe: b9:73:c5:9f:38:50:62:73:f2:18:e5:ae:d3:23:e8:a1:67:d7: 14:f9:86:03:dc:fc:20:37:84:9a:14:63:00:ca:6d:32:ce:a6: 6a:02:be:cb:b6:b0:f5:3c:5c:bd:11:aa:23:e7:f5:06:01:49: 3c:fb:73:c9:90:14:65:88:11:85:0c:5f:03:b3:61:fe:74:00: 2b:25:ef:ab:55:b2:5d:c6:3f:84:b1:02:36:da:39:0f:41:9a: ff:20:2b:85:40:b6:2c:c5:bb:76:5b:3c:5d:96:e0:63:e7:bf: ee:39:43:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjQxMTIyMTc1NzM1WhcNMjQxMTI5MTc1NzM1WjAYMRYwFAYD VQQDEw02NzQwYzYwZi05NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZn3HsV1DQxkTMzYBCTtl/rWddj1f3Ni54ko9rzfys0PKTCrOZks/zTuuyZd tlsU3WoW004KEFgKhmzclb5ErsFhF7iqZYKA1FJunkmA9Jrm2ATLYje+Cd9ZG7Y4 PRtTVQM9kvCb1JKCTzpY9uL6tir85wkgP5pUzcRDXHTODnmZ4J+6BG11cxU7UAgR tx2v5m3jtm+TZ+6bKn4NW2CdSvCxqCpkXHdNxdRRmaUI88+FC75WpuMS5ldqX8ni 1ZS8NIPkcPGF3Fng0uCe6kUeiY4Tzk+CNVmjYnYcd8My11OqjFhYTwSs12MYO6Qb C8wgzjswqCnPOvnzo5MD3dj+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5fm/dn qycJFyO8cTeFK/oyXTD8MB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB36tb2QyxP7dW41iDvL+5REHpZlp4pcOLDzUdVKXk5aJ6WWA7ELAo6 tMVJfAos2mEhPalQ8/PCNktS2jRacq8/g4+U0sEs6CaYfaCW2+ajMelbioovo4JN ml7TRiKt1jHiUjjy6wtrP4vDWTf/94X1TLQTQSV2GKT6aJsd78uk2qweGAPstMub c+wL+m+F+/65c8WfOFBic/IY5a7TI+ihZ9cU+YYD3PwgN4SaFGMAym0yzqZqAr7L trD1PFy9Eaoj5/UGAUk8+3PJkBRliBGFDF8Ds2H+dAArJe+rVbJdxj+EsQI22jkP QZr/ICuFQLYsxbt2WzxdluBj57/uOUMw -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org