$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: ML5j9yDkHW+Hyh7DgJbix0tOrW4CIlcbhXuIs78l/9Q= Subject key identifier: 10:02:93:A6:A5:F3:6F:4F:C3:02:86:EF:4E:BB:8E:A0:6C:DB:E7:41 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 22B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2286 Signing time: Wed 20 Nov 2024 15:51:07 +0000 Manifest this update: Wed 20 Nov 2024 15:51:07 +0000 Manifest next update: Wed 27 Nov 2024 15:51:07 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: NJXsUldyBVRvmuqqxcgReenxEPgDUpUyd4f2wWfHNrI=) 2: 3CB9EF84BF9511EEAD184E59C4F9AE02.roa (hash: 0E6kCAbBWjOzpnldz+3yyTPwXBQYeelPRq++GjN98pI=) 3: 1A519CD615DD11EBAA7C4D52C4F9AE02.roa (hash: LvnN9fDKCVzFVLCsoE1cCwf8BQyVry4uoLmQQxu2nXs=) 4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: 0oH2mmU5r5IU4xxxT30t56WYPFMGsM6PNMn8tM27vV4=) 5: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: ZjyNbUjTEmXclvfkUsDawMAFcngwwS/cepT6NtuGViI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8880 (0x22b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Nov 20 15:51:07 2024 GMT Not After : Nov 27 15:51:07 2024 GMT Subject: CN=673e056b-cec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:d8:c1:1c:b4:3d:f0:89:4b:ee:2c:d9:cd: 15:b2:8f:9b:af:54:3e:68:b0:d8:20:a5:93:e0:84: 7e:5f:4f:cb:c0:39:4d:df:ee:d2:48:4d:5e:73:e3: 89:c8:53:d5:18:08:ab:c2:44:c0:5f:a1:6e:2e:5b: c7:a8:4c:96:54:2b:d9:05:40:d4:1d:34:7e:ea:55: 88:75:04:31:e7:d2:10:56:e3:38:0a:a8:77:30:93: 04:95:9e:dd:87:71:4f:f7:60:12:cc:2d:55:4b:20: eb:6b:99:cc:af:52:56:48:2d:be:e6:40:3f:d8:19: 55:a9:6a:02:d7:9a:4c:52:3a:23:b5:a6:fb:60:00: 77:da:6f:bc:71:07:a9:fb:05:0c:ca:37:80:e7:00: b0:bb:04:46:00:4a:7c:2f:0a:9f:b1:06:53:93:ac: 08:87:0d:97:5d:24:d7:1c:a1:dc:38:b0:ee:01:30: 3b:67:db:3a:58:dc:65:37:d4:f6:01:a1:b9:3f:af: 23:ca:02:c5:5d:e2:c5:43:e3:f2:05:84:cd:1c:6f: 86:b5:01:df:0b:d5:cd:ee:e0:3b:25:12:8d:f6:31: a4:7d:d4:e6:a8:e1:36:94:0e:f1:a3:07:7e:59:86: 6f:4b:c6:79:9a:3a:c3:6d:b3:61:e9:d4:6b:b6:f5: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:02:93:A6:A5:F3:6F:4F:C3:02:86:EF:4E:BB:8E:A0:6C:DB:E7:41 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:44:4b:87:5b:9b:d1:39:77:c8:1d:ee:d8:4a:0a:31:96:d0: 9c:4d:bf:f6:54:78:8a:21:2b:64:f0:cb:5e:51:20:f1:43:69: 39:dc:64:e9:96:d7:c2:21:10:15:7a:c9:0c:8c:e5:c1:eb:95: f0:15:9e:cc:98:82:ea:9b:e0:dc:5a:14:56:a6:2b:d8:88:33: 55:af:aa:9b:3d:49:03:d1:36:27:8b:b6:c7:c6:49:97:1d:92: e8:4f:78:ca:b0:a4:cf:a3:ca:81:98:68:57:49:a7:03:93:74: af:b5:a8:63:7f:7a:f0:e4:16:b3:ad:23:a2:c2:9b:80:c5:c1: 19:95:01:ee:d6:a9:49:86:d9:6c:ab:bc:a8:ac:d7:12:db:eb: 92:70:c8:b5:e9:c5:01:80:2c:5a:37:a4:c4:c8:77:a1:21:62: e2:ff:87:7b:05:5f:b4:24:ea:f4:ef:4d:2f:8e:7b:43:bf:6a: da:14:2b:2c:02:2c:78:4f:06:a7:c3:e8:e8:6f:4a:c7:be:1e: 5b:b9:47:c6:de:fd:bb:b0:33:93:3a:9e:86:8e:9d:29:27:0b: a2:31:0a:ff:1c:b7:30:da:f2:10:50:13:19:2e:90:80:d2:b1: 85:f3:99:8a:14:03:8e:ac:6a:10:90:d5:cb:38:9e:91:90:98: df:7b:a2:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjQxMTIwMTU1MTA3WhcNMjQxMTI3MTU1MTA3WjAYMRYwFAYD VQQDEw02NzNlMDU2Yi1jZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kjYwRy0PfCJS+4s2c0Vso+br1Q+aLDYIKWT4IR+X0/LwDlN3+7SSE1ec+OJ yFPVGAirwkTAX6FuLlvHqEyWVCvZBUDUHTR+6lWIdQQx59IQVuM4Cqh3MJMElZ7d h3FP92ASzC1VSyDra5nMr1JWSC2+5kA/2BlVqWoC15pMUjojtab7YAB32m+8cQep +wUMyjeA5wCwuwRGAEp8LwqfsQZTk6wIhw2XXSTXHKHcOLDuATA7Z9s6WNxlN9T2 AaG5P68jygLFXeLFQ+PyBYTNHG+GtQHfC9XN7uA7JRKN9jGkfdTmqOE2lA7xowd+ WYZvS8Z5mjrDbbNh6dRrtvUPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBACk6al 829PwwKG7067jqBs2+dBMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvREuHW5vROXfIHe7YSgoxltCcTb/2VHiKIStk8MteUSDxQ2k53GTp ltfCIRAVeskMjOXB65XwFZ7MmILqm+DcWhRWpivYiDNVr6qbPUkD0TYni7bHxkmX HZLoT3jKsKTPo8qBmGhXSacDk3Svtahjf3rw5BazrSOiwpuAxcEZlQHu1qlJhtls q7yorNcS2+uScMi16cUBgCxaN6TEyHehIWLi/4d7BV+0JOr0700vjntDv2raFCss Aix4Twanw+job0rHvh5buUfG3v27sDOTOp6Gjp0pJwuiMQr/HLcw2vIQUBMZLpCA 0rGF85mKFAOOrGoQkNXLOJ6RkJjfe6Ls -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:54 2024 by rpki-client on console-fra.rpki-client.org