$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: WrKRA5wCpQB64DdMuSxOCSCH3A2ilfj2B8O9aAz2VXw= Subject key identifier: CE:23:70:2A:A2:30:0A:BB:29:A3:52:FA:73:C2:AB:22:F8:E8:DA:DD Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 015F Signing time: Sat 23 Nov 2024 02:21:02 +0000 Manifest this update: Sat 23 Nov 2024 02:21:01 +0000 Manifest next update: Sat 30 Nov 2024 02:21:01 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: 10WZp1/84Sa0vA/HvvA5n/ycyHV5WDV69eLwc19u1FI=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: PCkpJGGyaL0qMyeq5nDVBcrPUQ3t5Mx881bY2sCX7Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Nov 23 02:21:01 2024 GMT Not After : Nov 30 02:21:01 2024 GMT Subject: CN=67413c0d-7a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:25:fd:c0:3a:07:1c:c9:7d:e7:b6:55:05: 9f:0b:56:a2:75:15:01:c5:35:93:13:32:4d:d0:8c: 5a:ec:92:cd:2c:b2:0a:e1:21:75:58:c2:8b:d5:e6: 92:01:71:f2:e4:42:28:66:8a:dc:39:9b:e9:2f:09: b1:6f:36:02:21:5a:f6:07:bc:27:47:50:d3:79:40: 04:da:07:56:fc:b2:c2:e4:d5:23:ec:8f:60:6e:3e: 69:3a:90:9f:fe:5e:0c:13:1f:e4:f1:7e:07:89:ba: 1f:fe:13:ba:41:1f:36:a3:e2:46:21:fd:6c:44:db: c7:8e:e8:61:fb:a2:cf:e3:f4:5e:16:c5:43:aa:3c: 0d:f3:43:07:2c:d4:7a:29:5a:bb:4c:76:c3:6d:df: 0a:af:07:ba:9e:48:fd:4f:03:c0:46:6d:47:3a:e8: 11:ef:6e:3b:1c:67:64:75:22:06:17:a2:32:8c:c0: a7:3f:6d:3b:68:f6:35:35:a2:e5:07:29:a1:66:af: c5:4c:3c:90:1b:ce:0f:71:f5:ca:5f:da:6a:8e:4d: b9:9c:78:ed:b6:84:d5:bb:85:c2:02:33:a1:cf:0f: 56:50:f9:e8:6f:80:26:c0:4b:a4:a7:a3:cb:1f:af: 59:41:40:c9:7e:b7:96:5e:f8:60:e5:32:79:93:c3: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:70:2A:A2:30:0A:BB:29:A3:52:FA:73:C2:AB:22:F8:E8:DA:DD X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4c:8d:c6:15:ec:93:1b:0d:74:32:42:fc:80:09:02:b3:7e: 7c:64:be:b9:ed:51:a9:7e:f3:11:6f:7b:08:61:47:fd:1d:19: 05:08:27:5f:77:cc:ca:02:3d:4b:0c:9d:d1:9c:e8:51:24:1b: ae:c1:92:72:46:c1:87:ee:1a:03:b9:53:11:46:ae:a9:fa:ec: f1:24:51:26:a5:b8:f3:35:5f:41:a7:65:75:52:7d:91:a1:d1: 38:a2:7b:27:c5:b5:70:0f:b0:ab:47:d5:08:93:04:c2:cc:2d: 13:64:81:ea:2d:f9:f6:8f:b8:8c:90:30:00:87:88:de:fe:28: f4:17:ec:73:a2:49:f1:49:a1:c4:a9:f6:60:20:f7:d5:66:8e: c7:b2:d8:72:00:cf:0a:82:75:a8:d4:a2:11:17:3c:ff:6c:98: 09:c8:15:bf:e9:09:5b:d3:7c:67:c8:b4:e8:44:90:36:31:a7: a7:19:5b:d9:70:19:a3:29:9b:83:15:9c:ec:d3:93:ff:8d:1b: 9a:2a:78:aa:d3:2b:8c:af:28:2e:fc:78:1e:50:33:5f:c5:fe: 03:ca:31:e8:dc:5c:f4:06:e6:ad:49:93:0a:9e:9a:fe:9d:1c: 22:03:d9:10:4d:0b:2e:95:cc:a8:dd:d7:ef:36:2a:84:4e:4a: 3e:98:fa:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjQxMTIzMDIyMTAxWhcNMjQxMTMwMDIyMTAxWjAYMRYwFAYD VQQDEw02NzQxM2MwZC03YTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3El/cA6BxzJfee2VQWfC1aidRUBxTWTEzJN0Ixa7JLNLLIK4SF1WMKL1eaS AXHy5EIoZorcOZvpLwmxbzYCIVr2B7wnR1DTeUAE2gdW/LLC5NUj7I9gbj5pOpCf /l4MEx/k8X4Hibof/hO6QR82o+JGIf1sRNvHjuhh+6LP4/ReFsVDqjwN80MHLNR6 KVq7THbDbd8Krwe6nkj9TwPARm1HOugR7247HGdkdSIGF6IyjMCnP207aPY1NaLl BymhZq/FTDyQG84PcfXKX9pqjk25nHjttoTVu4XCAjOhzw9WUPnob4AmwEukp6PL H69ZQUDJfreWXvhg5TJ5k8NerQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4jcCqi MAq7KaNS+nPCqyL46NrdMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0TI3GFeyTGw10MkL8gAkCs358ZL657VGpfvMRb3sIYUf9HRkFCCdf d8zKAj1LDJ3RnOhRJBuuwZJyRsGH7hoDuVMRRq6p+uzxJFEmpbjzNV9Bp2V1Un2R odE4onsnxbVwD7CrR9UIkwTCzC0TZIHqLfn2j7iMkDAAh4je/ij0F+xzoknxSaHE qfZgIPfVZo7HsthyAM8KgnWo1KIRFzz/bJgJyBW/6Qlb03xnyLToRJA2MaenGVvZ cBmjKZuDFZzs05P/jRuaKniq0yuMrygu/HgeUDNfxf4DyjHo3Fz0BuatSZMKnpr+ nRwiA9kQTQsulcyo3dfvNiqETko+mPqn -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org