$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: Kz8doVDcDWB9ElvQwLCA19GczgXI/iTV44Q5xdi3/0Y= Subject key identifier: 37:0F:50:6F:69:42:F9:80:66:6D:D4:A5:4A:30:FD:7C:39:9C:A7:E6 Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 0239 Signing time: Sat 23 Nov 2024 01:23:41 +0000 Manifest this update: Sat 23 Nov 2024 01:23:40 +0000 Manifest next update: Sat 30 Nov 2024 01:23:40 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: Us9b+Pv6nL9spS7CA8brpc1iq0rOj8+wbJJu5Kw9ES4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: Nov 23 01:23:40 2024 GMT Not After : Nov 30 01:23:40 2024 GMT Subject: CN=67412e9d-4948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:a3:02:bd:90:4e:60:89:f3:60:a5:86:6f: 8a:fe:eb:f0:21:1d:6c:ad:8c:7f:75:54:15:99:c2: 63:fe:7f:39:95:da:ed:c3:08:64:96:86:1d:62:1d: 73:a5:be:31:ea:f5:99:e0:16:fe:02:3d:59:27:da: 8d:da:03:c8:95:9c:4a:68:a1:4a:52:36:f9:a5:17: 62:10:3a:a8:e8:9b:ea:cb:38:ae:63:8b:2f:cd:13: 7a:6d:3a:a6:72:ec:ed:e1:b7:6d:70:9d:5d:ba:19: 7e:28:4a:c7:ee:dd:27:33:20:03:d7:33:17:19:e5: 21:de:ab:1b:8d:e9:71:6a:ab:6c:51:05:a0:50:79: bf:0a:cc:2f:95:b7:7e:ad:eb:c6:e7:c9:d8:a0:92: 64:98:22:a8:4b:37:8f:cb:6e:f9:ed:0f:45:b0:e8: 93:14:21:1e:ab:c7:f5:24:1e:14:6a:79:a0:20:cf: 04:08:b3:8f:c1:cd:ff:93:b4:83:1a:f9:7a:8a:19: 70:29:cc:87:3f:4d:42:78:19:b0:42:1f:69:39:10: fb:4b:28:0a:af:70:c8:6b:93:65:4c:7b:49:d4:33: 93:c0:2e:29:ff:89:2d:8f:9b:cb:39:62:3d:e3:aa: 0f:5e:ed:1a:74:87:71:29:a7:66:3c:9e:32:fe:3a: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:50:6F:69:42:F9:80:66:6D:D4:A5:4A:30:FD:7C:39:9C:A7:E6 X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5d:b9:08:81:78:fd:fe:6d:82:08:68:fa:f3:ad:8d:42:cf: 10:ba:9f:99:d7:97:20:5f:81:b4:9b:42:3a:99:b5:38:29:46: 83:78:ad:a7:06:85:0e:6b:d1:a9:b1:b6:23:bb:cc:c8:08:80: 69:29:1c:17:9b:78:f6:f1:64:fc:a3:26:b5:51:c8:71:e5:f9: d5:1a:98:ca:27:96:30:6f:6e:f8:da:35:7f:69:37:c8:f7:7e: be:30:0d:08:39:07:97:7d:ef:31:12:84:39:86:44:d7:4b:92: e7:73:75:01:58:9f:e2:08:9d:7b:27:59:cf:53:a5:a3:b0:29: 86:9d:25:08:9c:68:02:a9:b4:30:be:22:c1:c0:70:66:98:c2: ce:35:96:b3:9f:96:f1:b6:3b:97:e6:a1:50:72:96:76:6e:5e: f5:b3:b1:fd:1d:b6:b0:ed:f8:bd:94:98:1e:2c:19:2e:b2:8f: 0b:05:e8:a5:a2:48:c1:c4:ef:77:3e:d9:f5:17:08:3e:84:7b: 13:63:8a:06:f7:dd:7d:31:83:d9:04:4d:1e:48:42:40:70:7d: 1b:ba:28:4e:a0:f2:ce:89:ca:6b:de:96:3f:88:8f:e6:3f:53: 54:3b:86:64:eb:f7:7d:3a:fb:cf:82:49:bc:e1:65:07:70:f4: 02:65:a3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjQxMTIzMDEyMzQwWhcNMjQxMTMwMDEyMzQwWjAYMRYwFAYD VQQDEw02NzQxMmU5ZC00OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZOjAr2QTmCJ82Clhm+K/uvwIR1srYx/dVQVmcJj/n85ldrtwwhkloYdYh1z pb4x6vWZ4Bb+Aj1ZJ9qN2gPIlZxKaKFKUjb5pRdiEDqo6JvqyziuY4svzRN6bTqm cuzt4bdtcJ1duhl+KErH7t0nMyAD1zMXGeUh3qsbjelxaqtsUQWgUHm/Cswvlbd+ revG58nYoJJkmCKoSzePy2757Q9FsOiTFCEeq8f1JB4UanmgIM8ECLOPwc3/k7SD Gvl6ihlwKcyHP01CeBmwQh9pORD7SygKr3DIa5NlTHtJ1DOTwC4p/4ktj5vLOWI9 46oPXu0adIdxKadmPJ4y/jricwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcPUG9p QvmAZm3UpUow/Xw5nKfmMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiXbkIgXj9/m2CCGj6862NQs8Qup+Z15cgX4G0m0I6mbU4KUaDeK2n BoUOa9GpsbYju8zICIBpKRwXm3j28WT8oya1Uchx5fnVGpjKJ5Ywb2742jV/aTfI 936+MA0IOQeXfe8xEoQ5hkTXS5Lnc3UBWJ/iCJ17J1nPU6WjsCmGnSUInGgCqbQw viLBwHBmmMLONZazn5bxtjuX5qFQcpZ2bl71s7H9Hbaw7fi9lJgeLBkuso8LBeil okjBxO93Ptn1Fwg+hHsTY4oG9919MYPZBE0eSEJAcH0buihOoPLOicpr3pY/iI/m P1NUO4Zk6/d9OvvPgkm84WUHcPQCZaPx -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org