$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: pJsManLxwTDUBL0vTn9ILMiSuTD1wpO/3Umtv1+2Kgs= Subject key identifier: 9B:1F:D5:9D:76:7A:CB:81:63:DE:03:6B:F4:33:1C:D2:39:4A:7F:D3 Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 078F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 0789 Signing time: Fri 22 Nov 2024 20:52:52 +0000 Manifest this update: Fri 22 Nov 2024 20:52:51 +0000 Manifest next update: Fri 29 Nov 2024 20:52:51 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: NlzA7B3473dLGvSjbWJGDrx0r23nsrLo/QRWDcKmYTg=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Nov 22 20:52:51 2024 GMT Not After : Nov 29 20:52:51 2024 GMT Subject: CN=6740ef23-2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:8b:6e:52:96:f3:97:81:1a:1f:94:27:33: 14:0f:0a:16:93:f1:33:69:f7:d0:38:4c:36:a7:00: 49:d9:30:3d:45:f1:41:60:8f:64:1f:87:48:82:e4: 45:43:64:50:50:fe:14:09:63:91:d7:8e:d7:d7:09: 1b:ba:25:36:c4:8e:0d:d1:9a:ce:60:cc:dd:95:28: ee:1d:aa:a7:d6:ef:5c:4f:e8:e9:e2:bf:26:59:db: 12:ee:bc:7b:df:bc:13:e6:2c:c3:7e:d2:46:ea:c5: d8:c2:bf:32:ef:0c:16:01:e8:19:c0:72:63:a7:16: bd:a5:56:d0:b0:9a:93:69:e9:30:1a:65:05:9c:c9: 16:28:16:13:a4:ac:3b:21:e7:8e:42:aa:eb:47:f5: 75:2a:4d:9e:2a:e7:32:47:23:12:d2:c2:c5:2e:ce: 6f:e4:40:c6:57:58:92:3d:48:e5:80:dc:d1:c7:68: 7e:71:8c:a8:ee:f3:9c:7c:a8:9a:03:9c:f6:4f:41: 79:f8:2a:12:6d:85:b3:db:21:a6:fa:ee:dd:8c:13: 46:d7:27:2a:d2:18:c3:07:c0:9b:67:ce:e8:fd:ec: 96:6a:71:39:07:46:fe:68:7b:35:e8:6f:72:5f:75: 2c:93:ba:e8:35:8f:c6:01:50:f6:68:1e:02:0d:70: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:D5:9D:76:7A:CB:81:63:DE:03:6B:F4:33:1C:D2:39:4A:7F:D3 X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:17:de:b4:c0:07:39:60:04:12:80:5c:33:6e:d1:15:c4: 7a:eb:9b:ea:a4:7d:5d:89:8a:ac:13:c8:d6:07:25:15:5a:9e: b3:58:24:94:ea:04:65:f9:e5:f8:c8:27:8d:68:4e:a8:0d:35: 69:5b:49:33:30:1b:e8:a1:46:f8:77:c7:cb:e4:f7:9a:47:8e: 60:6e:97:d4:62:9a:24:9e:ea:e4:c0:2e:6b:28:fe:ff:3a:e5: 9b:6e:e6:99:cb:6b:7f:3f:bd:0c:f6:4b:c1:c2:26:d0:d2:d0: 3d:9f:fc:b5:19:7a:9c:22:99:c5:6e:57:bd:82:ac:15:c5:d0: bf:39:6a:b6:dc:40:27:50:0b:04:99:bc:32:74:c9:70:94:65: 0f:68:d2:f6:e8:f0:4c:34:7f:b1:03:56:09:87:2f:49:f7:06: 8e:f5:71:5c:71:4a:e6:30:d2:cd:1a:1f:fb:5a:3a:31:cd:1e: b4:0d:93:86:16:56:f2:43:b8:ff:2b:0d:b5:64:c1:54:36:f4: 1b:e0:f6:56:78:91:11:c8:62:3c:eb:ba:74:05:46:8f:e8:b8: f9:a1:5f:59:b0:16:e9:bc:80:64:8b:ce:4b:f3:f7:66:7d:bb: b4:ee:14:a2:1b:c1:10:be:8e:b6:60:6e:a4:41:ed:ab:be:19: 33:d5:b1:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjQxMTIyMjA1MjUxWhcNMjQxMTI5MjA1MjUxWjAYMRYwFAYD VQQDEw02NzQwZWYyMy0yODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK6LblKW85eBGh+UJzMUDwoWk/EzaffQOEw2pwBJ2TA9RfFBYI9kH4dIguRF Q2RQUP4UCWOR147X1wkbuiU2xI4N0ZrOYMzdlSjuHaqn1u9cT+jp4r8mWdsS7rx7 37wT5izDftJG6sXYwr8y7wwWAegZwHJjpxa9pVbQsJqTaekwGmUFnMkWKBYTpKw7 IeeOQqrrR/V1Kk2eKucyRyMS0sLFLs5v5EDGV1iSPUjlgNzRx2h+cYyo7vOcfKia A5z2T0F5+CoSbYWz2yGm+u7djBNG1ycq0hjDB8CbZ87o/eyWanE5B0b+aHs16G9y X3Usk7roNY/GAVD2aB4CDXBNvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsf1Z12 esuBY94Da/QzHNI5Sn/TMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb1hfetMAHOWAEEoBcM27RFcR665vqpH1diYqsE8jWByUVWp6zWCSU 6gRl+eX4yCeNaE6oDTVpW0kzMBvooUb4d8fL5PeaR45gbpfUYpoknurkwC5rKP7/ OuWbbuaZy2t/P70M9kvBwibQ0tA9n/y1GXqcIpnFble9gqwVxdC/OWq23EAnUAsE mbwydMlwlGUPaNL26PBMNH+xA1YJhy9J9waO9XFccUrmMNLNGh/7WjoxzR60DZOG FlbyQ7j/Kw21ZMFUNvQb4PZWeJERyGI867p0BUaP6Lj5oV9ZsBbpvIBki85L8/dm fbu07hSiG8EQvo62YG6kQe2rvhkz1bEn -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org