$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: VSq9BPrZflraxlJgPdSUAWEJZ7FHEA+XDkHNEK5/jSc= Subject key identifier: 2A:13:21:F7:09:AE:11:C4:13:37:BA:43:A0:DD:59:FC:39:6F:80:5E Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0726 Signing time: Wed 20 Nov 2024 21:17:03 +0000 Manifest this update: Wed 20 Nov 2024 21:17:02 +0000 Manifest next update: Wed 27 Nov 2024 21:17:02 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: HKJD6+VfFzVqwYTw/AnEWmeCAGggzKxDK3F4zsDuawg=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 0Y4V+EWkL3FbcoWlsNiGkR+IyKHT+HocUV9zzfnIVl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Nov 20 21:17:02 2024 GMT Not After : Nov 27 21:17:02 2024 GMT Subject: CN=673e51cf-3e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:08:4b:61:2d:28:f8:a5:8c:30:23:40:b4: 4a:92:a8:e0:03:fa:00:39:ee:c7:4e:ed:20:b3:45: 58:19:52:0e:d6:51:0e:b3:9d:9c:eb:fe:9b:b3:fb: bb:4f:5c:e0:41:2a:88:2a:c0:bd:c3:f6:8d:5c:6f: fc:d9:4a:de:f9:9c:74:a3:41:57:42:24:3f:d0:74: 42:49:c2:80:d0:d0:5a:cf:52:d4:ef:67:1b:b1:f3: 5a:e0:00:fb:be:5f:9f:af:80:91:11:cf:74:3d:f3: 79:da:5d:ae:e4:50:dc:06:ab:d0:18:51:ee:02:04: da:a4:f2:f8:9d:49:42:fb:6a:81:c1:58:fc:f6:9f: 76:a3:be:8c:1c:8b:02:19:53:63:bc:a3:85:46:9a: d5:b2:95:ad:11:3d:78:4d:d0:7f:71:d1:55:7e:0b: 84:12:bb:41:07:25:d4:f9:61:b6:71:27:6f:58:36: 5e:c6:c5:ed:00:7e:e0:8d:75:1c:63:b4:05:ed:60: 16:79:dd:42:7b:b7:92:62:b9:88:d0:bf:3b:15:3c: 2d:7c:50:80:da:48:58:08:f1:90:92:2e:22:7b:08: 25:a7:90:2a:d1:0b:47:2b:69:d7:13:0b:e2:10:c5: bc:a3:bb:32:e5:b2:c8:89:c5:a2:10:c7:27:15:f2: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:13:21:F7:09:AE:11:C4:13:37:BA:43:A0:DD:59:FC:39:6F:80:5E X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3a:62:64:74:eb:d0:f6:7c:5f:ec:7b:c7:49:79:1f:96:7d: a5:7e:af:78:f0:31:f2:a6:4a:4b:1c:48:05:bd:16:19:0b:68: ef:b9:5d:8f:82:b2:b6:87:c2:4a:f6:03:95:8a:d8:31:c4:10: 26:40:12:95:96:de:b2:36:81:7a:e0:8b:1e:9d:21:8e:c4:60: 44:e3:21:c7:bd:55:1a:9d:eb:53:65:57:4e:03:13:38:4b:f8: 2d:93:d8:2b:68:42:91:5d:33:19:f9:92:d3:ac:e3:54:89:27: e1:4d:09:20:d6:f3:89:aa:35:8b:89:f7:86:f3:ef:8b:4f:48: 7a:2a:70:1b:cd:9a:61:7a:48:c4:b6:68:59:47:3b:52:9f:a9: b2:cf:84:df:12:98:9e:e1:ef:89:0e:ac:51:9c:ff:03:ca:23: 44:06:f3:38:20:88:61:bb:a4:1f:d9:b3:7b:3c:ea:33:d7:ef: cb:eb:be:c0:df:0b:f7:d4:de:50:64:92:7e:14:84:5e:ca:bc: 45:84:90:a6:9e:92:b4:29:7d:c9:01:f5:02:a0:83:3c:83:d2: 8f:77:43:38:2e:b7:04:99:e9:db:9a:9c:20:08:b1:1b:7f:6f: 1f:cf:c4:2a:5e:b1:51:b7:c5:ae:dd:45:e4:e8:7a:a6:f1:3d: 73:fb:09:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjQxMTIwMjExNzAyWhcNMjQxMTI3MjExNzAyWjAYMRYwFAYD VQQDEw02NzNlNTFjZi0zZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GUIS2EtKPiljDAjQLRKkqjgA/oAOe7HTu0gs0VYGVIO1lEOs52c6/6bs/u7 T1zgQSqIKsC9w/aNXG/82Ure+Zx0o0FXQiQ/0HRCScKA0NBaz1LU72cbsfNa4AD7 vl+fr4CREc90PfN52l2u5FDcBqvQGFHuAgTapPL4nUlC+2qBwVj89p92o76MHIsC GVNjvKOFRprVspWtET14TdB/cdFVfguEErtBByXU+WG2cSdvWDZexsXtAH7gjXUc Y7QF7WAWed1Ce7eSYrmI0L87FTwtfFCA2khYCPGQki4iewglp5Aq0QtHK2nXEwvi EMW8o7sy5bLIicWiEMcnFfLL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoTIfcJ rhHEEze6Q6DdWfw5b4BeMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNOmJkdOvQ9nxf7HvHSXkfln2lfq948DHypkpLHEgFvRYZC2jvuV2P grK2h8JK9gOVitgxxBAmQBKVlt6yNoF64IsenSGOxGBE4yHHvVUanetTZVdOAxM4 S/gtk9graEKRXTMZ+ZLTrONUiSfhTQkg1vOJqjWLifeG8++LT0h6KnAbzZphekjE tmhZRztSn6myz4TfEpie4e+JDqxRnP8DyiNEBvM4IIhhu6Qf2bN7POoz1+/L677A 3wv31N5QZJJ+FIReyrxFhJCmnpK0KX3JAfUCoIM8g9KPd0M4LrcEmenbmpwgCLEb f28fz8QqXrFRt8Wu3UXk6Hqm8T1z+wm4 -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org