$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: VAffuwERnqF+3Ed2MTtt4kOlmP1saDGJIMFClMAMC58= Subject key identifier: C1:52:9C:BA:4E:3C:9A:C2:3B:ED:5C:0C:68:07:79:18:A6:9B:67:73 Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 0491 Signing time: Fri 22 Nov 2024 23:34:16 +0000 Manifest this update: Fri 22 Nov 2024 23:34:16 +0000 Manifest next update: Fri 29 Nov 2024 23:34:16 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: NQ1532fFziv8pfNAzHLuHeWWSCy8bv1DA+vWfPtc90A=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: rYm3bxzeD9Hz/zvaLyO6m3QZv6wC6yDqGi0rEoUEXJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Nov 22 23:34:16 2024 GMT Not After : Nov 29 23:34:16 2024 GMT Subject: CN=674114f8-6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:fe:a1:dd:05:cf:5d:cb:68:82:22:b5:d4: 41:d6:e2:8c:f2:e3:d6:b6:d1:3d:5f:09:d6:c3:77: 6c:f3:72:20:33:fb:d0:ae:9b:a2:c7:70:c0:f8:b4: 57:58:d0:7c:72:d7:7f:bd:dd:17:29:5c:26:e0:ac: 7c:74:81:60:04:90:1a:31:f1:55:50:fb:5f:7c:ba: 3c:55:56:2a:d0:c3:42:58:eb:04:f6:ac:e8:db:96: 71:cc:75:29:0d:10:96:b8:86:8e:44:9c:25:08:8d: 1b:39:c9:d3:b6:3d:2c:b9:eb:1e:6f:3c:de:b5:7a: d0:26:f4:96:32:58:0a:ef:4d:f4:a5:f5:54:a2:64: dd:c7:64:9b:fb:4d:2f:fd:8d:5c:66:35:c3:42:ae: dc:06:33:84:1e:4f:d8:46:43:c6:7a:68:df:cc:b5: 9f:cb:87:b8:a9:c4:73:f7:b9:f2:db:52:41:51:5a: 0d:e2:fa:ea:b7:a0:16:bc:e7:90:4f:82:41:93:b6: 8d:df:a1:7b:30:8b:c2:31:46:d8:67:f1:e1:ab:8b: 5b:4c:10:be:4d:19:ea:0a:19:3d:bf:28:f2:3b:e5: 71:47:8a:9b:3d:36:92:68:8e:a0:24:38:09:9e:ee: 0a:c4:c9:bd:a3:d6:91:db:db:2d:1c:1e:04:a7:66: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:52:9C:BA:4E:3C:9A:C2:3B:ED:5C:0C:68:07:79:18:A6:9B:67:73 X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7d:83:ad:e0:96:3d:3e:fa:28:66:36:02:9c:cf:eb:49:c6: 22:7d:e0:21:10:65:d5:1d:56:01:85:a1:7e:a9:af:7a:a5:bb: 95:1d:69:e4:cd:98:a9:66:51:24:a6:9b:cf:f7:21:2b:5f:37: 35:11:f7:f2:c2:62:3e:d9:e6:88:8b:83:9c:c3:fd:a4:b3:54: 7d:f1:29:66:f1:bf:4d:59:17:f9:07:75:eb:94:81:e4:a2:e7: 63:00:ad:b9:a5:ae:95:bd:eb:0e:f6:ce:54:d7:ab:0b:44:a6: e1:c5:22:f6:44:65:70:1b:56:fc:25:4e:30:db:8a:ec:48:2f: cf:3e:6c:13:4a:1d:4a:02:4a:e7:0e:c3:05:61:36:63:02:7a: 49:9c:56:04:80:89:fa:dd:71:32:74:49:3d:e5:10:9e:cc:89: fc:b0:57:32:50:8c:54:e5:a5:61:86:b9:c7:6a:d8:47:f2:60: 5e:25:f3:89:aa:a9:68:0d:4b:48:62:a1:65:17:bc:14:47:30: 8c:3d:72:8c:68:91:34:31:11:50:1a:0d:7c:e6:71:b6:d9:f7: 8d:23:9e:97:b5:e6:fc:33:4c:88:8e:93:da:8d:a3:96:08:22: f0:47:88:91:7c:d7:8b:fd:20:06:15:e6:fd:76:dd:29:5a:2c: 2f:ab:3a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjQxMTIyMjMzNDE2WhcNMjQxMTI5MjMzNDE2WjAYMRYwFAYD VQQDEw02NzQxMTRmOC02ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjH+od0Fz13LaIIitdRB1uKM8uPWttE9XwnWw3ds83IgM/vQrpuix3DA+LRX WNB8ctd/vd0XKVwm4Kx8dIFgBJAaMfFVUPtffLo8VVYq0MNCWOsE9qzo25ZxzHUp DRCWuIaORJwlCI0bOcnTtj0suesebzzetXrQJvSWMlgK7030pfVUomTdx2Sb+00v /Y1cZjXDQq7cBjOEHk/YRkPGemjfzLWfy4e4qcRz97ny21JBUVoN4vrqt6AWvOeQ T4JBk7aN36F7MIvCMUbYZ/Hhq4tbTBC+TRnqChk9vyjyO+VxR4qbPTaSaI6gJDgJ nu4KxMm9o9aR29stHB4Ep2aqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFSnLpO PJrCO+1cDGgHeRimm2dzMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANfYOt4JY9PvooZjYCnM/rScYifeAhEGXVHVYBhaF+qa96pbuVHWnk zZipZlEkppvP9yErXzc1EffywmI+2eaIi4Ocw/2ks1R98Slm8b9NWRf5B3XrlIHk oudjAK25pa6VvesO9s5U16sLRKbhxSL2RGVwG1b8JU4w24rsSC/PPmwTSh1KAkrn DsMFYTZjAnpJnFYEgIn63XEydEk95RCezIn8sFcyUIxU5aVhhrnHathH8mBeJfOJ qqloDUtIYqFlF7wURzCMPXKMaJE0MRFQGg185nG22feNI56Xteb8M0yIjpPajaOW CCLwR4iRfNeL/SAGFeb9dt0pWiwvqzo6 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org