$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: zQbu2nZtzyHdER3p0TF6ElmtZ8uyWOCMUoFbcZeynZI= Subject key identifier: BE:7E:3B:77:B1:DD:DB:39:34:5A:62:A6:74:29:AF:F8:C5:41:82:2E Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 02:44:13 +0000 Manifest this update: Sat 23 Nov 2024 02:44:12 +0000 Manifest next update: Sat 30 Nov 2024 02:44:12 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: Ebvp2hvShoSBRedRNI4zntNvmEf8+ygXVgBc7hn/Qfo=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: ncbBfvNfTN+9UCNMy82nzUawOBbP+HTp1MNHAi4I74c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Nov 23 02:44:12 2024 GMT Not After : Nov 30 02:44:12 2024 GMT Subject: CN=6741417d-a80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:71:f5:56:bf:3f:09:34:7d:c4:16:80:b9: 08:41:63:e3:c3:ab:c5:16:32:e9:b6:ac:ea:5e:81: ad:c5:ac:83:69:49:b1:f7:3c:7f:b2:de:85:c2:fd: 7a:fd:12:67:cc:e0:83:95:fd:a0:45:a6:31:10:58: d1:7e:60:c6:df:03:dd:e2:1a:af:ec:a2:1f:e9:d8: 6b:80:18:5a:20:ed:43:c9:15:b8:6c:10:24:cd:2b: 16:6a:17:41:1b:56:79:7c:ac:ad:6d:7f:28:68:a6: b1:18:f2:15:1c:06:95:8b:87:a5:08:05:2c:50:8e: d3:31:ba:09:2c:12:59:f9:dc:30:3c:e5:49:64:34: b8:2a:91:74:b4:40:b3:d0:d0:cc:4f:0e:b8:5a:8a: be:65:d3:98:27:3a:b9:2a:94:14:e4:c6:19:2c:8f: 1f:1c:84:82:84:ff:1f:3e:d7:46:1b:5f:c5:59:71: a3:1a:d4:52:44:30:3a:8b:fa:96:84:e2:c6:5b:1b: 4d:17:7b:ec:59:35:86:5a:14:77:1f:1d:fa:85:82: 8d:3e:98:a8:b8:5c:b0:95:42:ba:50:63:63:1f:26: 9d:35:f9:ba:47:b2:ba:36:51:82:92:a3:5f:d7:80: 50:24:61:d9:85:b4:1d:32:68:16:2f:45:46:26:b2: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7E:3B:77:B1:DD:DB:39:34:5A:62:A6:74:29:AF:F8:C5:41:82:2E X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cb:f7:20:ad:a4:80:5f:1e:ac:2e:83:24:71:52:76:6a:c5: d5:2d:f9:79:1d:ca:a8:eb:28:22:e4:61:7f:df:fd:09:99:1b: 6d:bc:46:13:0a:2d:e4:23:58:2c:41:15:f2:7e:41:65:10:af: ee:80:ef:9d:95:94:f6:2f:b5:54:9f:b4:10:a5:36:1d:14:c2: 0d:45:83:82:51:82:9f:9a:fc:b8:31:92:f7:a5:de:20:83:0b: 38:3d:ba:b0:b7:ab:c1:d4:dd:aa:24:a5:0c:8c:08:b7:99:0c: 80:f6:46:04:f8:d2:9b:cb:71:5a:02:a1:3e:97:86:61:d8:ee: 2a:52:b0:81:65:0c:e9:ff:81:32:e4:3a:12:5a:79:d2:56:a6: 10:b4:dc:b4:2c:35:58:fa:d7:66:62:8f:d7:1c:d4:92:b1:d0: 21:84:4e:2d:b7:58:9f:99:68:74:df:1b:26:bc:c5:4b:c5:92: 19:60:b0:dc:07:ac:55:f2:61:40:18:fd:91:b4:a6:ed:1b:96: 23:8a:28:77:a7:79:d2:53:86:78:28:a5:71:4a:78:b6:10:75: c1:40:53:93:b2:de:42:14:0a:cb:1b:b5:9b:a6:c6:97:b9:cf: 65:a4:a0:a2:10:79:a2:56:b4:84:a6:4b:7d:15:a1:fa:ef:1d: 03:52:50:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjQxMTIzMDI0NDEyWhcNMjQxMTMwMDI0NDEyWjAYMRYwFAYD VQQDEw02NzQxNDE3ZC1hODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7Zx9Va/Pwk0fcQWgLkIQWPjw6vFFjLptqzqXoGtxayDaUmx9zx/st6Fwv16 /RJnzOCDlf2gRaYxEFjRfmDG3wPd4hqv7KIf6dhrgBhaIO1DyRW4bBAkzSsWahdB G1Z5fKytbX8oaKaxGPIVHAaVi4elCAUsUI7TMboJLBJZ+dwwPOVJZDS4KpF0tECz 0NDMTw64Woq+ZdOYJzq5KpQU5MYZLI8fHISChP8fPtdGG1/FWXGjGtRSRDA6i/qW hOLGWxtNF3vsWTWGWhR3Hx36hYKNPpiouFywlUK6UGNjHyadNfm6R7K6NlGCkqNf 14BQJGHZhbQdMmgWL0VGJrJxJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5+O3ex 3ds5NFpipnQpr/jFQYIuMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAby/cgraSAXx6sLoMkcVJ2asXVLfl5Hcqo6ygi5GF/3/0JmRttvEYT Ci3kI1gsQRXyfkFlEK/ugO+dlZT2L7VUn7QQpTYdFMINRYOCUYKfmvy4MZL3pd4g gws4Pbqwt6vB1N2qJKUMjAi3mQyA9kYE+NKby3FaAqE+l4Zh2O4qUrCBZQzp/4Ey 5DoSWnnSVqYQtNy0LDVY+tdmYo/XHNSSsdAhhE4tt1ifmWh03xsmvMVLxZIZYLDc B6xV8mFAGP2RtKbtG5Yjiih3p3nSU4Z4KKVxSni2EHXBQFOTst5CFArLG7WbpsaX uc9lpKCiEHmiVrSEpkt9FaH67x0DUlBl -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org