$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: HGE2nwDo6XCE+aRLraxj7QzGoVHftR5vKtoYE8jQoiw= Subject key identifier: C8:1D:58:33:C8:E9:1E:BA:AA:70:3D:B0:AD:9D:C9:AC:FC:62:C6:96 Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 20 Signing time: Sat 23 Nov 2024 05:47:25 +0000 Manifest this update: Sat 23 Nov 2024 05:47:24 +0000 Manifest next update: Sat 30 Nov 2024 05:47:24 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: oHhM1veIYZdXat2wcgdPuLWJaTPFCL//ZdWP7XBIiQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Nov 23 05:47:24 2024 GMT Not After : Nov 30 05:47:24 2024 GMT Subject: CN=67416c6d-8ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:4b:1e:ad:7a:f6:92:9a:3f:45:17:0b:95: d9:ad:79:b1:7e:bd:5f:4e:48:af:48:96:6e:a1:ea: ff:94:f9:12:0e:96:46:1a:89:32:cd:5c:ae:51:ce: 81:ac:e2:6e:3a:1a:80:50:2a:c3:74:97:d8:86:3d: 41:b4:f8:f7:24:fa:ae:46:ab:c3:e2:47:6c:ea:e5: fb:1b:8c:a1:47:5c:56:e0:75:c7:dd:ab:e7:33:1d: 9d:a3:d2:f0:6c:fd:71:e2:81:49:c8:0d:cd:e7:ed: 4f:ce:50:ab:73:0d:42:a9:85:23:df:85:86:38:9a: e3:90:02:0c:f7:6d:1b:af:e4:93:44:9c:28:ff:8a: 28:12:3a:fb:89:9d:c3:98:30:aa:0b:ee:4c:7d:b5: 02:b5:47:42:18:91:54:fb:28:a7:91:96:5c:66:b1: 7e:ff:20:4f:51:7e:35:23:f6:de:e7:6f:4e:dc:b9: f6:28:99:84:51:33:66:e9:5e:62:1a:e7:4f:89:ab: 1d:5d:ca:f4:26:eb:1d:63:32:b4:1c:51:ac:90:66: 94:19:a9:1c:b5:b7:f2:b6:42:2a:dc:bb:07:af:ee: a4:09:c2:c7:75:75:bb:ab:1d:d1:9e:4b:11:a7:8f: 61:b1:d3:0d:54:65:a1:4a:f2:e1:4c:e1:6a:8e:7a: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:58:33:C8:E9:1E:BA:AA:70:3D:B0:AD:9D:C9:AC:FC:62:C6:96 X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1d:c2:b4:88:4c:b8:cd:cf:e1:ea:b4:d9:15:b2:ca:4a:4e: 15:7f:49:7b:d6:8b:60:4c:89:6c:29:86:8e:4a:bf:58:4a:2a: da:91:b8:14:ca:2d:21:85:9c:aa:bf:6a:87:5b:ff:ab:1d:a6: 81:b6:ec:99:49:e5:5c:1b:2a:33:06:42:15:aa:ab:79:5a:02: a3:65:ef:cd:52:55:9b:84:47:d5:9d:02:bb:5a:28:f4:e5:df: cf:51:55:6e:c0:ca:fb:30:87:dd:f9:1d:dc:fd:3d:3b:6b:d5: 30:ab:44:3e:8a:66:cf:a2:2a:b9:2e:44:64:94:d8:33:a5:7d: 5d:29:83:3f:06:d7:da:79:49:10:1f:48:b4:68:15:cf:3c:76: dc:89:23:26:48:22:b8:91:fa:84:1d:e0:f9:53:5a:a5:6d:cf: 0c:41:b5:5a:09:b1:4e:14:4f:62:b5:ad:32:e0:fc:70:28:46: 74:d2:3f:67:93:66:8c:03:78:c8:03:14:e1:26:76:9c:18:97: f4:ed:14:88:12:b8:84:d0:1a:67:a9:7e:67:40:f0:e5:ea:7c: 90:97:78:40:e5:9f:87:34:02:b0:17:ad:de:af:ae:0f:75:61: fa:09:80:95:62:d4:7d:4c:30:06:09:42:1f:9c:6d:36:eb:54: 4b:0f:c4:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoNUU5NjBENTE4OEYwMzZGNzlFQUE3OTQxNTUyQ0NGNDZC ODdBQkYwNzAeFw0yNDExMjMwNTQ3MjRaFw0yNDExMzAwNTQ3MjRaMBgxFjAUBgNV BAMTDTY3NDE2YzZkLThlYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0QkserXr2kpo/RRcLldmtebF+vV9OSK9Ilm6h6v+U+RIOlkYaiTLNXK5RzoGs 4m46GoBQKsN0l9iGPUG0+Pck+q5Gq8PiR2zq5fsbjKFHXFbgdcfdq+czHZ2j0vBs /XHigUnIDc3n7U/OUKtzDUKphSPfhYY4muOQAgz3bRuv5JNEnCj/iigSOvuJncOY MKoL7kx9tQK1R0IYkVT7KKeRllxmsX7/IE9RfjUj9t7nb07cufYomYRRM2bpXmIa 50+Jqx1dyvQm6x1jMrQcUayQZpQZqRy1t/K2Qircuwev7qQJwsd1dburHdGeSxGn j2Gx0w1UZaFK8uFM4WqOekBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyB1YM8jp HrqqcD2wrZ3JrPxixpYwHwYDVR0jBBgwFoAUXpYNUYjwNveeqnlBVSzPRrh6vwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0M4NUJBMTJDN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHBZTlVZandOdmVlcW5sQlZTelBScmg2dndjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0M4NUJBMTJDN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZl ZXFubEJWU3pQUnJoNnZ3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkdwrSITLjNz+HqtNkVsspKThV/SXvWi2BMiWwpho5Kv1hKKtqRuBTK LSGFnKq/aodb/6sdpoG27JlJ5VwbKjMGQhWqq3laAqNl781SVZuER9WdArtaKPTl 389RVW7Ayvswh935Hdz9PTtr1TCrRD6KZs+iKrkuRGSU2DOlfV0pgz8G19p5SRAf SLRoFc88dtyJIyZIIriR+oQd4PlTWqVtzwxBtVoJsU4UT2K1rTLg/HAoRnTSP2eT ZowDeMgDFOEmdpwYl/TtFIgSuITQGmepfmdA8OXqfJCXeEDln4c0ArAXrd6vrg91 YfoJgJVi1H1MMAYJQh+cbTbrVEsPxEQ= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org