$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: hrfRGKzXhcTOIy6anaDh8uhh0mMlrTwkzGetACgaKgk= Subject key identifier: 53:28:DD:62:E7:92:5D:CB:A6:D6:F0:CD:D9:F0:A7:7C:E4:A6:64:71 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 0A Signing time: Sat 23 Nov 2024 06:04:55 +0000 Manifest this update: Sat 23 Nov 2024 06:04:54 +0000 Manifest next update: Sat 30 Nov 2024 06:04:54 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: 71dncW4uDvLtYt0p+XXYsLHVkDj2Z0odBZvl55Kjn8Q=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Nov 23 06:04:54 2024 GMT Not After : Nov 30 06:04:54 2024 GMT Subject: CN=67417086-600b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:53:93:da:60:40:a2:44:2b:9d:8a:94:fd: fe:6c:23:f4:1b:d9:75:11:2c:06:dc:90:71:fe:2b: 4f:01:00:c7:b5:d6:65:e8:1a:e9:22:f5:9d:e8:20: 0f:5c:77:6d:46:1b:6f:45:25:8c:f9:3d:53:aa:f2: 71:ac:a0:94:0c:24:65:2f:f2:43:de:31:a5:14:00: 42:77:fd:5c:c1:35:57:9b:bb:29:39:5c:6e:f3:4a: 93:e6:a8:12:97:63:dc:a5:58:39:bd:b3:0c:ea:1f: fa:a8:38:c5:cd:1e:1e:7a:c6:35:3a:de:bc:5e:9c: 65:c4:aa:9c:a7:7e:01:e0:f4:86:78:87:ed:37:06: 59:e1:01:57:43:58:da:bf:8d:63:07:b9:4f:4f:5e: ae:a6:0e:25:cd:ea:e5:db:94:4e:e1:5d:df:e7:da: 47:ac:e8:d7:86:66:04:89:83:a6:17:07:32:b9:3a: 78:fc:bd:eb:5b:73:c3:9f:e5:2f:e6:64:06:a8:d8: 00:33:9c:f1:a0:19:ec:c5:db:a2:63:1a:ff:e6:66: 64:d9:37:f3:08:d2:2f:75:12:cb:80:93:68:1f:f4: a5:1a:10:f1:2b:81:3e:b5:ca:48:05:68:44:e7:d9: 25:a8:69:49:56:2c:80:72:8d:d3:6e:57:36:47:87: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:28:DD:62:E7:92:5D:CB:A6:D6:F0:CD:D9:F0:A7:7C:E4:A6:64:71 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:1c:13:38:e0:d7:d7:6d:90:bc:c2:bf:ae:6b:1d:10:de:14: 1d:23:81:50:a1:0e:8f:d4:5d:73:a9:f8:b4:70:24:3d:3f:a8: a8:8c:94:55:25:4e:a0:f1:e4:76:c6:37:2b:43:cd:24:67:2a: 13:cf:c7:f2:bf:c7:53:0d:da:a0:42:12:cf:20:0d:81:83:6a: ad:a3:ea:84:1a:dd:01:3e:a0:8a:d5:4b:0d:ed:9c:58:14:65: 8c:eb:c7:e8:7b:7d:a0:c2:26:41:c5:d9:5c:cd:a2:92:d0:b6: 47:18:1f:64:1e:47:fa:4e:e2:4e:38:34:cd:dc:ba:45:82:52: 30:70:57:39:5b:fd:00:c0:61:f2:b6:d3:5e:9b:af:96:d9:aa: cb:aa:da:b7:5a:d5:3a:35:15:53:56:37:3c:dc:e0:aa:93:d4: 72:d0:c5:82:af:70:db:d9:a2:0a:4f:b2:51:82:5b:a3:67:14: 5f:90:8c:68:1d:cd:97:2e:0b:85:84:6d:07:a7:c4:cc:dd:8b: 9c:c9:b0:de:07:86:26:b4:1d:bb:4a:c8:f2:6a:ec:4b:d7:62: 1c:4d:62:1c:ee:be:35:fe:cd:01:f7:0a:de:ef:03:c6:c6:b2: da:89:0b:82:ba:21:31:40:6b:f4:bd:0b:e0:d4:02:a4:16:43: 67:37:99:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNzE3MkVEMENGNDQ3MDVFQ0VCMTk2MUQxM0EwNTdFQ0ZG MzA3Qzg2RjAeFw0yNDExMjMwNjA0NTRaFw0yNDExMzAwNjA0NTRaMBgxFjAUBgNV BAMTDTY3NDE3MDg2LTYwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF2lOT2mBAokQrnYqU/f5sI/Qb2XURLAbckHH+K08BAMe11mXoGuki9Z3oIA9c d21GG29FJYz5PVOq8nGsoJQMJGUv8kPeMaUUAEJ3/VzBNVebuyk5XG7zSpPmqBKX Y9ylWDm9swzqH/qoOMXNHh56xjU63rxenGXEqpynfgHg9IZ4h+03BlnhAVdDWNq/ jWMHuU9PXq6mDiXN6uXblE7hXd/n2kes6NeGZgSJg6YXBzK5Onj8vetbc8Of5S/m ZAao2AAznPGgGezF26JjGv/mZmTZN/MI0i91EsuAk2gf9KUaEPErgT61ykgFaETn 2SWoaUlWLIByjdNuVzZHh9ulAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUyjdYueS Xcum1vDN2fCnfOSmZHEwHwYDVR0jBBgwFoAUcXLtDPRHBezrGWHROgV+z/MHyG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0FBMkE3ODRDOUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hMdERQUkhCZXpyR1dIUk9nVi16X01IeUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0FBMkE3ODRDOUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6 ckdXSFJPZ1Ytel9NSHlHOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADccEzjg19dtkLzCv65rHRDeFB0jgVChDo/UXXOp+LRwJD0/qKiMlFUl TqDx5HbGNytDzSRnKhPPx/K/x1MN2qBCEs8gDYGDaq2j6oQa3QE+oIrVSw3tnFgU ZYzrx+h7faDCJkHF2VzNopLQtkcYH2QeR/pO4k44NM3cukWCUjBwVzlb/QDAYfK2 016br5bZqsuq2rda1To1FVNWNzzc4KqT1HLQxYKvcNvZogpPslGCW6NnFF+QjGgd zZcuC4WEbQenxMzdi5zJsN4Hhia0HbtKyPJq7EvXYhxNYhzuvjX+zQH3Ct7vA8bG stqJC4K6ITFAa/S9C+DUAqQWQ2c3mVU= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org