$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: pVLHsRgcTXeYQX3rxJiz9duT/nWNO6qJuT4OK2sGYk4= Subject key identifier: 64:67:C7:E2:3B:D9:8A:06:D9:04:C3:50:6B:64:03:EA:0D:43:82:0C Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: D1 Signing time: Thu 21 Nov 2024 03:52:13 +0000 Manifest this update: Thu 21 Nov 2024 03:52:12 +0000 Manifest next update: Thu 28 Nov 2024 03:52:12 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: P9MoD01hG2MAIRbxntAjpd1davpv8PNujBBtMQAO7xA=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: Nov 21 03:52:12 2024 GMT Not After : Nov 28 03:52:12 2024 GMT Subject: CN=673eae6c-9a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:07:57:d4:58:9e:c5:04:76:64:a6:1c:84: 58:f8:db:9d:46:00:62:63:1f:2e:fb:a5:a9:fd:87: 2e:22:4e:08:53:14:17:cd:b1:bd:9b:5b:f8:50:3f: 7d:53:6e:d0:87:70:a8:ba:9f:f8:85:69:1b:12:8c: b7:ab:77:da:30:a2:5a:35:06:c4:c9:d1:cc:ee:d6: 1c:e6:25:a4:8d:f0:93:c1:41:d1:e3:0a:08:35:1b: 2a:d3:3b:f1:41:06:20:94:aa:dd:69:8f:55:72:cf: af:37:92:dd:a1:ee:bd:60:3d:9b:7f:89:65:9b:e9: ff:d8:d5:38:bc:70:d7:60:7b:d7:c9:5d:20:7a:de: 5b:a5:af:fc:5e:da:4e:e6:a7:2c:01:bd:5b:6b:83: 4c:15:28:f9:18:d2:50:3a:d2:b1:8c:6c:42:25:02: 55:5f:71:4a:01:8e:df:0b:a3:ea:c4:7f:0b:f8:33: a3:17:42:a9:27:d1:b7:14:6a:e6:98:1f:0c:44:ad: be:c2:c6:b7:ab:4c:70:6f:0b:02:36:0c:c5:d2:8f: 77:7a:99:c6:f1:c4:c4:5d:8d:2c:03:0b:bd:ca:7a: a3:a8:bf:dc:94:9b:83:35:47:02:78:df:7c:ff:73: 6c:2e:ce:89:cf:ab:d4:36:a2:f7:d8:37:d4:45:8d: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:C7:E2:3B:D9:8A:06:D9:04:C3:50:6B:64:03:EA:0D:43:82:0C X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e6:c6:e2:0a:95:91:67:9a:51:05:1b:4b:9f:41:4a:df:f1: f0:8f:c0:90:e9:c9:83:e6:0e:69:9e:71:c4:e3:31:34:52:7c: 80:d9:10:b1:56:8f:fd:7d:a8:d1:75:80:41:10:7a:7f:01:de: b9:05:7d:dd:14:58:3b:a3:90:6a:e2:c8:f3:02:ab:43:58:1e: 6a:ca:b1:e7:10:cc:7b:30:00:d0:35:14:e9:1d:9e:b8:73:8d: 84:02:74:78:3d:78:6d:61:a5:16:f8:e0:f6:14:1b:4d:f7:82: 45:7f:3e:df:f4:f4:4a:53:9c:60:95:46:3b:09:2e:41:bd:8c: 81:3b:88:ce:4d:99:71:fc:e0:77:97:7c:df:f0:97:19:1e:42: 8d:e3:6b:90:11:60:b3:b0:6a:1c:6d:bb:53:13:e6:ae:33:bc: b9:8d:2d:86:f5:27:b4:ce:d9:d7:44:b6:fd:05:a1:7d:6c:df: 03:cf:57:9d:00:f5:58:57:67:2b:aa:50:92:6a:0b:e7:e7:6e: 25:9e:75:51:bb:f8:76:08:c8:c0:41:17:92:be:45:59:0a:f2: 57:a2:08:fe:a1:e2:67:bd:5c:67:b0:99:59:7e:52:37:d8:0c: 7d:c3:96:be:bc:46:b5:00:51:78:00:15:53:4b:a4:17:b8:15: 05:52:00:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw NkMwOENBMzgwHhcNMjQxMTIxMDM1MjEyWhcNMjQxMTI4MDM1MjEyWjAYMRYwFAYD VQQDEw02NzNlYWU2Yy05YTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZMHV9RYnsUEdmSmHIRY+NudRgBiYx8u+6Wp/YcuIk4IUxQXzbG9m1v4UD99 U27Qh3Coup/4hWkbEoy3q3faMKJaNQbEydHM7tYc5iWkjfCTwUHR4woINRsq0zvx QQYglKrdaY9Vcs+vN5Ldoe69YD2bf4llm+n/2NU4vHDXYHvXyV0get5bpa/8XtpO 5qcsAb1ba4NMFSj5GNJQOtKxjGxCJQJVX3FKAY7fC6PqxH8L+DOjF0KpJ9G3FGrm mB8MRK2+wsa3q0xwbwsCNgzF0o93epnG8cTEXY0sAwu9ynqjqL/clJuDNUcCeN98 /3NsLs6Jz6vUNqL32DfURY27KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRnx+I7 2YoG2QTDUGtkA+oNQ4IMMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB TExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB05sbiCpWRZ5pRBRtLn0FK3/Hwj8CQ6cmD5g5pnnHE4zE0UnyA2RCx Vo/9fajRdYBBEHp/Ad65BX3dFFg7o5Bq4sjzAqtDWB5qyrHnEMx7MADQNRTpHZ64 c42EAnR4PXhtYaUW+OD2FBtN94JFfz7f9PRKU5xglUY7CS5BvYyBO4jOTZlx/OB3 l3zf8JcZHkKN42uQEWCzsGocbbtTE+auM7y5jS2G9Se0ztnXRLb9BaF9bN8Dz1ed APVYV2crqlCSagvn524lnnVRu/h2CMjAQReSvkVZCvJXogj+oeJnvVxnsJlZflI3 2Ax9w5a+vEa1AFF4ABVTS6QXuBUFUgCU -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org