$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: kl/2D6OMW3oLC4towq7gowYGY/TId3LY+RceXCWccFA= Subject key identifier: EE:6D:79:D2:2D:17:5D:51:57:B4:4C:F9:31:CF:0F:95:54:68:88:66 Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 0614 Signing time: Fri 22 Nov 2024 22:10:33 +0000 Manifest this update: Fri 22 Nov 2024 22:10:33 +0000 Manifest next update: Fri 29 Nov 2024 22:10:33 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: u0HJgWKqbv23E3joAWpojla3FQasDKn5SbtFI1YwP0k=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: 6eHddETss++N0efl0wYCBKU3NII6SFsuAEjJL0+ySL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Nov 22 22:10:33 2024 GMT Not After : Nov 29 22:10:33 2024 GMT Subject: CN=67410159-39f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:ca:11:3e:41:36:52:a2:f6:4e:74:08:f0: 58:52:9c:6c:29:18:fb:02:d2:a2:be:2f:7f:65:f9: 23:d0:8a:02:37:b3:8f:23:db:d2:c5:c4:a3:33:69: f8:72:a5:64:69:89:30:11:2b:e4:40:dd:22:69:a9: 99:1f:9c:8a:3e:c3:30:0e:c2:85:3c:65:fc:6c:96: 35:60:0b:c0:54:75:77:db:56:41:8d:cf:2c:90:b4: 97:7c:b9:4e:0b:9c:45:78:a8:58:70:1c:31:35:71: 48:55:39:2d:28:0a:fb:40:69:bd:53:bb:c7:28:fa: 4f:02:b1:a3:1b:07:46:c4:bc:3a:24:21:51:5e:d7: 24:bc:6a:aa:66:09:19:57:aa:6b:7d:46:5a:ca:c7: a6:58:fa:cb:73:6f:f5:95:9d:47:5e:1f:9f:5f:59: 93:a7:7a:3c:b3:e3:c6:1d:ca:60:0e:6d:d3:06:6d: 42:2b:b0:47:52:1b:24:2b:40:92:30:12:72:08:c1: 37:71:dd:a9:df:89:d8:52:26:97:a2:81:7e:47:af: 70:61:c3:c2:c1:be:29:28:98:09:cc:6c:a6:f9:98: 4c:e2:37:9a:d1:d8:de:2d:3a:a7:2f:74:6b:94:96: 3b:47:81:27:15:a2:fa:6d:92:37:59:b7:03:45:5c: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6D:79:D2:2D:17:5D:51:57:B4:4C:F9:31:CF:0F:95:54:68:88:66 X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b2:fe:e9:7a:b2:be:ff:e0:be:2f:d0:f1:6a:e7:cd:6d:c4: 1c:93:93:ab:44:af:96:fd:10:a1:9e:43:3e:b9:4b:d1:ee:d3: 11:89:6a:75:8d:c9:75:da:33:72:83:66:af:f8:63:5e:de:22: 45:e2:e6:be:63:11:87:f8:b2:f8:c8:7e:30:d1:85:ff:ad:db: d2:04:5f:27:cc:6b:68:56:87:d9:72:22:01:55:94:d9:76:8a: e2:37:e4:32:6d:23:73:23:4e:2e:19:68:73:48:64:c1:1d:69: 43:5d:3f:a5:e8:4a:d8:f8:93:76:9b:b1:a9:8c:be:a8:38:18: 11:8f:0c:37:cb:a5:35:5b:d9:9f:0e:56:62:c7:ca:0a:af:c0: 6b:30:21:a3:cd:2e:6d:78:0c:34:b2:59:fb:88:80:b2:92:39: 90:e1:bb:09:05:07:28:37:c9:d8:27:6d:d0:11:7a:0a:03:16: 3c:46:1b:84:44:a1:8a:b6:c4:81:df:32:f5:33:a5:e4:97:ca: ca:8d:e8:fe:91:ae:e6:3b:6f:6c:2d:9d:37:8a:a3:b1:06:67: 8d:d6:44:d0:85:96:6b:7d:97:b1:f1:07:5a:2e:97:51:17:ca: 05:d6:46:59:73:89:f4:c6:8c:f4:43:c6:02:9e:57:1d:56:84: d6:00:74:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjQxMTIyMjIxMDMzWhcNMjQxMTI5MjIxMDMzWjAYMRYwFAYD VQQDEw02NzQxMDE1OS0zOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTvKET5BNlKi9k50CPBYUpxsKRj7AtKivi9/Zfkj0IoCN7OPI9vSxcSjM2n4 cqVkaYkwESvkQN0iaamZH5yKPsMwDsKFPGX8bJY1YAvAVHV321ZBjc8skLSXfLlO C5xFeKhYcBwxNXFIVTktKAr7QGm9U7vHKPpPArGjGwdGxLw6JCFRXtckvGqqZgkZ V6prfUZaysemWPrLc2/1lZ1HXh+fX1mTp3o8s+PGHcpgDm3TBm1CK7BHUhskK0CS MBJyCME3cd2p34nYUiaXooF+R69wYcPCwb4pKJgJzGym+ZhM4jea0djeLTqnL3Rr lJY7R4EnFaL6bZI3WbcDRVz/BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5tedIt F11RV7RM+THPD5VUaIhmMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBesv7perK+/+C+L9DxaufNbcQck5OrRK+W/RChnkM+uUvR7tMRiWp1 jcl12jNyg2av+GNe3iJF4ua+YxGH+LL4yH4w0YX/rdvSBF8nzGtoVofZciIBVZTZ doriN+QybSNzI04uGWhzSGTBHWlDXT+l6ErY+JN2m7GpjL6oOBgRjww3y6U1W9mf DlZix8oKr8BrMCGjzS5teAw0sln7iICykjmQ4bsJBQcoN8nYJ23QEXoKAxY8RhuE RKGKtsSB3zL1M6Xkl8rKjej+ka7mO29sLZ03iqOxBmeN1kTQhZZrfZex8QdaLpdR F8oF1kZZc4n0xoz0Q8YCnlcdVoTWAHSy -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org