$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: d/YZ1FfDP3GrbQyXMY97aq1D6cJuPT3vglSdR3c7kvM= Subject key identifier: 82:DF:B6:F1:DE:84:5B:A5:54:54:DF:D8:AB:32:CA:E5:7C:C7:08:85 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 0444 Signing time: Fri 22 Nov 2024 23:51:36 +0000 Manifest this update: Fri 22 Nov 2024 23:51:35 +0000 Manifest next update: Fri 29 Nov 2024 23:51:35 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: TmbN8pT+4YaGThs3ll/fCddZMqPFHGgdEb9nY5eTcBI=) 2: 8BF809E4892411EDBAF42C12C4F9AE02.roa (hash: eXbmOFmMxcvm0Xsyzg3/1U2kY3p0kjNdosXsryg+sqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Nov 22 23:51:35 2024 GMT Not After : Nov 29 23:51:35 2024 GMT Subject: CN=67411907-6b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:7e:92:49:47:7e:71:e1:ed:41:b3:e4:d1: 97:51:fc:53:bf:73:bc:ed:bd:54:84:49:c3:77:c3: 86:1d:e0:4b:ef:d7:ee:2c:b7:7f:3a:22:b8:1b:c8: f2:37:0c:14:9a:70:6d:49:73:f0:d4:39:b8:c0:89: 9d:35:9d:a9:1a:eb:01:b3:5f:88:fc:70:77:b4:a4: b6:c9:36:79:f8:3a:a1:af:51:3e:67:89:e8:0f:dd: 04:51:9b:67:2e:9e:1a:f9:18:d0:12:53:c5:b1:da: 48:f0:93:d3:6d:3c:8f:b1:c1:98:54:01:ec:1f:a5: e1:db:f3:c3:30:e6:e6:07:52:7c:7d:61:c3:61:ed: bc:36:cc:19:50:42:37:7f:3a:11:1b:b3:8d:4c:46: d4:46:04:15:cb:cc:8a:92:f9:fd:82:d5:a7:0c:ce: 5a:08:cd:cc:0c:e7:4e:8e:61:ff:74:35:1f:22:c0: 12:7f:1d:6a:c1:59:53:86:4d:3e:99:fe:6a:f4:08: fd:1c:eb:ad:e6:8d:56:bf:90:bd:80:bd:1e:35:e0: a1:14:98:d1:ab:f2:0e:d4:f6:7c:ec:d0:e6:04:db: 15:d0:23:95:5e:b1:44:87:31:3a:4f:31:f0:dc:be: 52:70:06:88:0d:2f:3d:b0:af:4f:d6:2d:53:ad:a6: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DF:B6:F1:DE:84:5B:A5:54:54:DF:D8:AB:32:CA:E5:7C:C7:08:85 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:92:d2:54:9d:97:e1:ee:d1:14:e2:6e:08:73:4b:c9:a9:ae: 9c:3c:ca:08:05:9a:fe:12:69:d4:a1:a6:d9:f0:2a:b1:fc:8c: b2:a5:07:a1:63:4c:d2:51:1c:1d:0a:ef:59:d1:30:46:8e:e1: ad:f0:c9:fb:9d:24:79:11:15:0f:ca:42:cf:89:21:cc:d4:ab: a3:bb:bb:90:62:be:29:d2:6f:eb:ac:cd:fa:87:c6:32:79:2a: 2e:00:77:76:7f:8a:c9:59:3a:da:cf:0d:8d:a5:3e:38:81:56: 94:51:74:10:f0:5c:f1:bd:41:1f:ed:9d:88:24:08:2c:78:63: fe:c7:1a:51:3d:a7:23:0d:96:3b:e3:db:26:2b:c1:e5:31:ef: cf:52:b7:42:a9:f6:18:c8:cc:3c:49:3f:29:18:14:3c:52:b6: 7e:04:cc:32:3a:6d:7a:35:19:fa:68:73:f3:7c:cc:fe:dd:18: 5d:23:de:13:94:af:66:7f:59:7a:39:9c:ad:32:56:28:d1:52: de:f2:43:f4:38:5e:f7:d1:5b:cf:6d:33:c7:2f:e1:95:7c:79: c8:b1:08:eb:74:e9:81:b4:c4:83:b0:f4:2f:06:54:9d:6c:e2: 9f:dd:50:cf:b3:0b:82:92:87:67:f4:88:5b:91:ea:21:d2:b1: 14:61:f1:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjQxMTIyMjM1MTM1WhcNMjQxMTI5MjM1MTM1WjAYMRYwFAYD VQQDEw02NzQxMTkwNy02Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE1+kklHfnHh7UGz5NGXUfxTv3O87b1UhEnDd8OGHeBL79fuLLd/OiK4G8jy NwwUmnBtSXPw1Dm4wImdNZ2pGusBs1+I/HB3tKS2yTZ5+Dqhr1E+Z4noD90EUZtn Lp4a+RjQElPFsdpI8JPTbTyPscGYVAHsH6Xh2/PDMObmB1J8fWHDYe28NswZUEI3 fzoRG7ONTEbURgQVy8yKkvn9gtWnDM5aCM3MDOdOjmH/dDUfIsASfx1qwVlThk0+ mf5q9Aj9HOut5o1Wv5C9gL0eNeChFJjRq/IO1PZ87NDmBNsV0COVXrFEhzE6TzHw 3L5ScAaIDS89sK9P1i1Traa9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILftvHe hFulVFTf2KsyyuV8xwiFMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIktJUnZfh7tEU4m4Ic0vJqa6cPMoIBZr+EmnUoabZ8Cqx/IyypQeh Y0zSURwdCu9Z0TBGjuGt8Mn7nSR5ERUPykLPiSHM1Kuju7uQYr4p0m/rrM36h8Yy eSouAHd2f4rJWTrazw2NpT44gVaUUXQQ8FzxvUEf7Z2IJAgseGP+xxpRPacjDZY7 49smK8HlMe/PUrdCqfYYyMw8ST8pGBQ8UrZ+BMwyOm16NRn6aHPzfMz+3RhdI94T lK9mf1l6OZytMlYo0VLe8kP0OF730VvPbTPHL+GVfHnIsQjrdOmBtMSDsPQvBlSd bOKf3VDPswuCkodn9Ihbkeoh0rEUYfFK -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org