$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: 4P/LE57YbXDPS7ET9lOXiNtiWiSwZ7PvP3wOIwZJEo0= Subject key identifier: 15:E4:AD:64:19:C2:82:8E:76:F3:0A:AE:1A:B0:82:93:84:DC:78:0D Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 06CB Signing time: Fri 22 Nov 2024 21:39:19 +0000 Manifest this update: Fri 22 Nov 2024 21:39:19 +0000 Manifest next update: Fri 29 Nov 2024 21:39:19 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: DoF5kArDvFjyyNeLcXS4JawLgvjuiWQTKmOn++7xzWE=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: 3vNGkA3tCUjQbATswchBY3GI0Vd54z+gZRifmc/PxUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Nov 22 21:39:19 2024 GMT Not After : Nov 29 21:39:19 2024 GMT Subject: CN=6740fa07-ba76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:3e:9c:9c:50:3d:b7:09:29:4d:7d:d0:cd: d8:f3:3b:31:72:89:6e:5c:57:e0:fd:f6:52:17:21: 64:4c:b7:21:26:94:de:b0:01:c7:ae:4a:42:08:7e: 04:57:de:65:47:ce:65:32:f2:08:16:43:ab:93:ea: 1a:65:f2:2e:5e:35:67:cb:03:c3:2b:97:c8:01:a3: a5:da:51:3f:8c:21:e1:61:8b:22:ee:94:1c:e8:bd: 80:83:3d:4c:05:d9:e5:d0:b9:fd:d4:7f:51:c1:85: f3:2a:f0:bb:a1:f2:2d:ea:bb:19:70:a2:fe:62:86: c2:f0:d9:37:60:be:0b:23:72:7f:cb:d1:b9:4d:fd: 99:df:84:26:68:70:a2:1e:9f:ac:d1:6a:09:d1:a9: b9:8f:4c:93:73:7b:7e:a6:f7:b8:dd:f7:20:8b:f0: ee:1b:b1:d4:bf:fa:70:ba:1d:34:49:86:c1:80:4a: 9b:a2:d8:b2:53:a9:7a:a6:49:83:bb:60:ae:45:c6: fe:fb:89:8f:f9:3f:5b:bd:e3:ff:e5:2c:2f:0a:5d: cb:c6:2f:3e:ae:53:03:51:62:bf:b5:e1:1e:1c:52: be:dc:2d:f4:41:68:d6:bc:e7:b7:39:3a:a0:49:22: 48:11:c6:39:51:8a:08:f5:da:f3:8b:7a:f9:20:50: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:AD:64:19:C2:82:8E:76:F3:0A:AE:1A:B0:82:93:84:DC:78:0D X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:28:73:67:68:53:c1:99:30:f6:43:17:b9:3f:e8:ee:d3:99: 8a:d0:29:94:ca:04:01:04:c2:8e:a0:73:11:84:24:dd:bb:5d: 50:0c:e4:56:21:c5:9a:59:6d:da:78:93:0f:ea:5c:1a:07:0e: e6:c3:79:06:42:cf:50:09:c8:01:7a:48:cc:d3:75:16:91:68: 12:0a:52:b8:29:13:2f:8d:7c:54:72:59:00:63:06:a6:a0:4e: e3:9a:1d:37:fe:02:96:92:59:2c:eb:b0:95:47:e5:4a:57:65: fd:de:22:02:45:f3:03:6a:cd:a4:55:aa:df:81:01:58:3f:b8: a8:d0:5c:72:f9:49:0c:90:14:24:ec:82:e9:c6:2f:ba:e9:6b: b7:25:24:12:55:d9:e3:46:c2:81:77:5c:c6:e4:cb:4c:2d:f9: 5e:9d:44:78:83:89:2a:db:ee:c4:11:4c:cb:a9:bb:51:06:be: 4e:b0:c8:8c:4f:27:a0:f0:03:d0:e7:9f:3e:48:54:ab:28:d2: 88:9c:83:de:24:f3:1e:a6:94:14:31:08:8c:7e:2e:a8:e6:4a: dc:4d:37:91:62:5a:57:a0:81:43:62:d8:10:cc:b7:b2:6b:01: b0:07:5d:8c:69:86:dc:38:02:38:3b:1f:09:e1:3d:9f:4c:e3: 0f:d8:ce:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjQxMTIyMjEzOTE5WhcNMjQxMTI5MjEzOTE5WjAYMRYwFAYD VQQDEw02NzQwZmEwNy1iYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryw+nJxQPbcJKU190M3Y8zsxcoluXFfg/fZSFyFkTLchJpTesAHHrkpCCH4E V95lR85lMvIIFkOrk+oaZfIuXjVnywPDK5fIAaOl2lE/jCHhYYsi7pQc6L2Agz1M Bdnl0Ln91H9RwYXzKvC7ofIt6rsZcKL+YobC8Nk3YL4LI3J/y9G5Tf2Z34QmaHCi Hp+s0WoJ0am5j0yTc3t+pve43fcgi/DuG7HUv/pwuh00SYbBgEqbotiyU6l6pkmD u2CuRcb++4mP+T9bveP/5SwvCl3Lxi8+rlMDUWK/teEeHFK+3C30QWjWvOe3OTqg SSJIEcY5UYoI9drzi3r5IFAEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXkrWQZ woKOdvMKrhqwgpOE3HgNMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgKHNnaFPBmTD2Qxe5P+ju05mK0CmUygQBBMKOoHMRhCTdu11QDORW IcWaWW3aeJMP6lwaBw7mw3kGQs9QCcgBekjM03UWkWgSClK4KRMvjXxUclkAYwam oE7jmh03/gKWklks67CVR+VKV2X93iICRfMDas2kVarfgQFYP7io0Fxy+UkMkBQk 7ILpxi+66Wu3JSQSVdnjRsKBd1zG5MtMLflenUR4g4kq2+7EEUzLqbtRBr5OsMiM Tyeg8APQ558+SFSrKNKInIPeJPMeppQUMQiMfi6o5krcTTeRYlpXoIFDYtgQzLey awGwB12MaYbcOAI4Ox8J4T2fTOMP2M6m -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org