$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: WPCvD2rWv9FCFSBsEykvvZDvkPNye/g36FO8EahyES8= Subject key identifier: 9D:57:5A:63:A1:CB:7C:D5:0D:31:73:EA:B6:5D:76:56:C9:29:5F:60 Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 0119 Signing time: Sat 23 Nov 2024 03:02:36 +0000 Manifest this update: Sat 23 Nov 2024 03:02:35 +0000 Manifest next update: Sat 30 Nov 2024 03:02:35 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: AcJTYUSHtqByxfm77MR1hz+gz1NRZ2zeFP2Av6wxPv8=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: c4j3BT+E4smp1yj+NNkAhq9oIz18pRs2O7mBfT7X02E=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: LVu5lLN0u/AS4E5Zp/UtRZns7oQMI1bsTYNJ+73L+Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Nov 23 03:02:35 2024 GMT Not After : Nov 30 03:02:35 2024 GMT Subject: CN=674145cb-c523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:82:f6:5b:b3:73:7c:ba:1b:b3:67:47:88: db:c5:7f:34:6b:71:86:93:c8:da:9e:41:06:14:65: 3f:d6:1b:16:5e:f0:24:52:52:3d:4f:e9:07:d8:0a: 2a:02:53:e2:45:3d:a5:98:6f:9a:e3:eb:53:3d:69: d9:ed:14:68:31:34:03:2d:cc:8c:59:cc:6d:2d:16: 32:a8:12:50:04:fd:4b:7c:91:5e:5c:12:26:1a:f4: 71:fb:aa:cc:49:64:ff:03:45:ed:a3:4f:fe:d4:69: 8b:2b:fd:6b:dd:4d:6f:36:e5:78:a1:4e:5a:6f:c3: fb:49:84:b3:e8:05:54:48:f5:8d:7f:16:3e:39:5e: a5:51:c1:cc:78:d3:9f:4b:2d:8b:2c:1d:f7:20:bf: d6:16:e1:db:02:f0:6f:be:b0:71:f6:2c:13:06:1e: 9e:33:37:fc:84:d1:95:3e:c7:87:ab:6e:92:e9:06: 9d:a6:8c:29:b4:9f:19:a0:49:1b:e3:d6:67:9b:c0: 79:37:ac:36:10:5f:44:b5:ee:16:2c:62:25:a8:77: bd:5b:dc:2d:dd:ea:0f:f6:ba:fe:88:7a:ce:cc:27: 32:72:f7:c3:ee:4d:9a:76:17:ee:af:75:f2:9a:3e: f9:e9:e2:89:fd:ef:1b:92:d6:47:18:90:1a:d5:9c: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:5A:63:A1:CB:7C:D5:0D:31:73:EA:B6:5D:76:56:C9:29:5F:60 X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:13:12:73:1e:66:66:27:17:2f:7b:e8:63:a4:f1:c9:de:91: 29:61:43:79:c8:af:b6:db:88:22:52:fb:7f:ea:4f:8d:bc:b3: d3:8c:df:80:63:8f:59:d3:f2:f8:22:ca:87:3c:60:42:4b:ab: 0a:fd:b9:84:bb:7b:a7:08:27:64:b1:9c:7c:90:46:5e:59:fe: fa:19:ca:18:69:9b:fa:aa:9b:51:0e:d6:8a:6d:e1:18:1e:52: 83:4f:1c:ae:d7:15:01:23:d3:ab:bd:4e:2e:bd:98:a1:95:89: 9e:76:0d:0d:9e:ff:2a:65:2d:ef:96:7d:fe:e0:f6:2d:66:b5: f4:4b:5a:11:63:6a:53:5d:9d:fa:c1:72:d3:2f:9f:2d:cf:71: 31:7c:6a:79:70:be:58:47:d4:e5:81:8a:36:a2:b2:74:95:50: fa:89:63:52:66:b2:5e:82:cb:4e:cb:b5:f3:54:f0:b2:0f:5c: 7a:a6:d8:1d:79:b6:b3:0b:a8:a6:e8:ea:6c:05:25:bf:1e:c0: 5e:d9:c0:f5:49:40:ea:4c:e4:a1:ef:23:64:ca:ae:6c:0d:2a: dc:0a:d2:a8:74:59:57:f2:11:80:c0:85:cd:82:e5:e5:8c:72: 90:40:b4:a9:1d:e7:b2:61:38:b1:a8:72:79:6b:5a:c5:b5:83: 2c:48:2c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjQxMTIzMDMwMjM1WhcNMjQxMTMwMDMwMjM1WjAYMRYwFAYD VQQDEw02NzQxNDVjYi1jNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA2C9luzc3y6G7NnR4jbxX80a3GGk8jankEGFGU/1hsWXvAkUlI9T+kH2Aoq AlPiRT2lmG+a4+tTPWnZ7RRoMTQDLcyMWcxtLRYyqBJQBP1LfJFeXBImGvRx+6rM SWT/A0Xto0/+1GmLK/1r3U1vNuV4oU5ab8P7SYSz6AVUSPWNfxY+OV6lUcHMeNOf Sy2LLB33IL/WFuHbAvBvvrBx9iwTBh6eMzf8hNGVPseHq26S6QadpowptJ8ZoEkb 49Znm8B5N6w2EF9Ete4WLGIlqHe9W9wt3eoP9rr+iHrOzCcycvfD7k2adhfur3Xy mj756eKJ/e8bktZHGJAa1ZyLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1XWmOh y3zVDTFz6rZddlbJKV9gMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnExJzHmZmJxcve+hjpPHJ3pEpYUN5yK+224giUvt/6k+NvLPTjN+A Y49Z0/L4IsqHPGBCS6sK/bmEu3unCCdksZx8kEZeWf76GcoYaZv6qptRDtaKbeEY HlKDTxyu1xUBI9OrvU4uvZihlYmedg0Nnv8qZS3vln3+4PYtZrX0S1oRY2pTXZ36 wXLTL58tz3ExfGp5cL5YR9TlgYo2orJ0lVD6iWNSZrJegstOy7XzVPCyD1x6ptgd ebazC6im6OpsBSW/HsBe2cD1SUDqTOSh7yNkyq5sDSrcCtKodFlX8hGAwIXNguXl jHKQQLSpHeeyYTixqHJ5a1rFtYMsSCw3 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org