$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: cHK9FVhE3rinvE7PUwtdkLy1m0i+h+ZDM/S2Rw9v/ZQ= Subject key identifier: BC:21:EF:AA:71:DD:A2:09:E9:E8:7F:68:F9:69:B6:07:CB:F4:E8:E1 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: B2 Signing time: Sat 23 Nov 2024 04:08:55 +0000 Manifest this update: Sat 23 Nov 2024 04:08:55 +0000 Manifest next update: Sat 30 Nov 2024 04:08:55 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: K9g/gNzjFtZPUeqKuJEJS3IwUN7S1Bl46JrIBSpt+tI=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: t+gLjWKuMmtai3i+isqz9fnXY+98bRxTkq694uOYDEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Nov 23 04:08:55 2024 GMT Not After : Nov 30 04:08:55 2024 GMT Subject: CN=67415557-30c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:4e:da:e4:a8:af:23:ec:51:e5:df:28:a7: fa:8e:2e:b4:b9:51:50:ad:8e:0a:f0:d3:9b:1c:ca: 56:f4:a0:34:c8:c0:19:80:ee:f7:85:b2:46:d4:bd: 5d:99:cb:a5:42:39:a4:df:cf:96:42:94:ea:32:6f: 5b:6d:d3:cc:9d:59:f2:55:d3:61:21:38:33:c8:a1: 27:71:dd:0d:bd:8b:8d:21:25:32:ef:23:68:b4:0a: e0:18:d7:24:b4:e8:f7:a4:b4:ee:8f:e8:c6:91:c9: 19:db:c3:6c:cb:bf:f7:66:24:1e:07:df:b5:7b:b2: 5f:34:65:9a:a3:09:25:37:41:8e:68:29:38:6a:91: cd:9e:5a:39:12:b1:2a:dd:2d:01:29:27:bb:45:1a: 45:4b:84:40:f7:98:30:8a:28:83:82:03:f5:83:06: 07:b6:8a:16:68:e2:aa:af:4f:aa:79:01:3c:8a:3d: b1:b5:e2:bc:1a:23:8a:3c:55:5f:5d:c0:aa:38:d2: cd:54:2a:13:a7:77:e4:ee:86:c2:35:34:ae:99:99: bc:11:d0:53:0c:32:fd:1b:45:b6:68:a6:5f:4b:91: e3:50:89:2c:32:5d:de:e5:22:99:fa:f7:d5:90:40: 81:29:e8:ac:9b:2c:2a:7c:f6:3d:34:17:6e:48:a2: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:EF:AA:71:DD:A2:09:E9:E8:7F:68:F9:69:B6:07:CB:F4:E8:E1 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a5:15:e7:5f:bd:b5:5b:ed:58:74:6a:f5:8c:0f:57:f6:d6: 17:60:6f:d1:a2:61:cb:dd:ad:c8:23:51:a0:2f:4f:47:47:ed: ed:f0:4e:c7:a1:80:3e:6e:95:28:ab:36:8d:f0:b5:17:2b:4b: 20:91:42:a1:0a:60:cc:29:0b:ef:88:b7:79:c7:2c:4b:8e:e4: 8d:43:04:96:eb:f2:7f:a5:e4:1c:41:57:d5:49:62:ed:fb:4a: a9:e7:28:92:6f:a8:19:5e:ae:9e:86:74:8c:4c:f2:13:b3:52: 20:6a:38:0e:c4:f6:1d:ab:0e:9a:59:97:ca:7f:c2:a3:50:ea: ed:91:2e:d0:39:2c:bb:71:da:93:83:66:d4:2d:94:20:fe:8d: d1:fe:8f:81:f9:42:d3:cd:1b:77:7a:0a:d0:ae:42:09:2a:62: eb:37:e1:96:38:db:22:f9:3c:20:ec:08:49:d7:e4:0f:7e:91: a1:6d:d7:96:83:1f:da:3b:95:d5:b4:68:02:6a:ac:05:81:68: cc:59:76:1e:11:50:cc:41:a4:0a:71:28:33:f7:bc:d9:9d:d5: 76:18:cc:d3:c0:5d:77:a2:83:6a:6d:47:95:53:23:45:9c:20: e4:fb:24:56:35:17:05:82:60:75:7f:fa:80:65:0a:b4:25:91: af:2e:93:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjQxMTIzMDQwODU1WhcNMjQxMTMwMDQwODU1WjAYMRYwFAYD VQQDEw02NzQxNTU1Ny0zMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgxO2uSoryPsUeXfKKf6ji60uVFQrY4K8NObHMpW9KA0yMAZgO73hbJG1L1d mculQjmk38+WQpTqMm9bbdPMnVnyVdNhITgzyKEncd0NvYuNISUy7yNotArgGNck tOj3pLTuj+jGkckZ28Nsy7/3ZiQeB9+1e7JfNGWaowklN0GOaCk4apHNnlo5ErEq 3S0BKSe7RRpFS4RA95gwiiiDggP1gwYHtooWaOKqr0+qeQE8ij2xteK8GiOKPFVf XcCqONLNVCoTp3fk7obCNTSumZm8EdBTDDL9G0W2aKZfS5HjUIksMl3e5SKZ+vfV kECBKeismywqfPY9NBduSKLTywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwh76px 3aIJ6eh/aPlptgfL9OjhMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcpRXnX721W+1YdGr1jA9X9tYXYG/RomHL3a3II1GgL09HR+3t8E7H oYA+bpUoqzaN8LUXK0sgkUKhCmDMKQvviLd5xyxLjuSNQwSW6/J/peQcQVfVSWLt +0qp5yiSb6gZXq6ehnSMTPITs1IgajgOxPYdqw6aWZfKf8KjUOrtkS7QOSy7cdqT g2bULZQg/o3R/o+B+ULTzRt3egrQrkIJKmLrN+GWONsi+Twg7AhJ1+QPfpGhbdeW gx/aO5XVtGgCaqwFgWjMWXYeEVDMQaQKcSgz97zZndV2GMzTwF13ooNqbUeVUyNF nCDk+yRWNRcFgmB1f/qAZQq0JZGvLpP4 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org