$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: sCU76meEPGn1YH884OlsmO6HfHoIf/4mFctWjfFNOBU= Subject key identifier: 6F:D6:E4:1A:CF:D6:8A:79:9F:29:03:80:61:50:A2:E9:2B:1F:40:35 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3422 Signing time: Wed 20 Nov 2024 15:12:28 +0000 Manifest this update: Wed 20 Nov 2024 15:12:27 +0000 Manifest next update: Wed 27 Nov 2024 15:12:27 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: PzADqR0CKPNfQoZHi+IkDriMBM76n3Pc4EGORS32u98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Nov 20 15:12:27 2024 GMT Not After : Nov 27 15:12:27 2024 GMT Subject: CN=673dfc5b-0133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:cf:48:c3:ac:6d:7e:f3:ff:a3:0e:23:ea: 5b:86:ef:4d:02:eb:7c:08:cd:32:89:f0:f3:4a:33: 27:ea:00:db:4d:10:fe:89:4e:c0:1b:5c:82:fd:9d: 01:a8:69:25:0b:72:2d:b1:46:6a:c1:d3:f2:d3:d7: 6a:a4:ad:78:b6:0a:0f:18:87:da:eb:58:0c:37:55: 2d:84:c8:16:7d:74:60:9c:1c:81:63:2a:29:05:a9: 6b:07:06:ef:b4:77:9b:92:bc:54:77:fb:02:90:91: 53:94:7e:e9:5f:d3:55:eb:c9:2b:3f:08:34:81:39: 16:49:78:57:75:b6:64:69:77:26:b9:3a:24:26:45: 59:17:d8:38:c0:fc:a1:6a:9d:7f:0d:65:2f:e7:cc: d3:04:f7:b4:f3:96:97:3f:f2:85:c3:f3:44:48:ef: 34:3a:0d:3e:92:a3:ec:be:50:4a:cb:88:57:ca:1a: 2e:2d:73:0a:76:1a:b4:46:f3:dd:5b:1f:68:af:28: 7b:ea:06:9b:d7:ae:d9:37:54:ab:b2:19:dd:84:f7: cf:8b:63:9c:f7:af:27:5c:9a:05:0b:a3:0b:3a:95: c1:6f:0e:b4:f8:1f:e5:dc:16:de:8c:94:6d:e9:a1: 81:84:ed:7f:71:c9:d4:a4:25:72:24:47:be:85:11: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D6:E4:1A:CF:D6:8A:79:9F:29:03:80:61:50:A2:E9:2B:1F:40:35 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:25:4f:c8:b1:e9:f5:c7:69:9e:3c:20:8b:f0:34:b9:41:78: fc:d1:3c:24:88:23:db:8f:45:65:61:4f:81:bc:1c:e8:53:6c: 98:69:15:c5:da:7d:35:ac:67:fe:58:8e:b2:cb:9b:8d:9d:6a: 18:1b:a0:76:a6:70:b0:ed:b5:b9:8f:ba:d1:37:67:bd:b2:5e: d1:6f:57:88:2a:94:c0:6e:d7:e1:ea:79:ee:d4:10:3c:2d:58: 6d:1b:93:3b:29:bd:76:8d:e0:ca:32:66:ec:8f:59:8b:da:ab: 91:43:a6:78:33:49:e8:69:f6:fb:80:67:52:92:b3:11:b3:60: df:d9:68:d1:c6:24:60:24:59:04:46:25:5b:db:46:be:f4:f2: 3c:41:7c:54:d1:a9:22:ac:f8:5b:b3:eb:38:b4:9c:bb:45:e9: 9c:c9:06:bd:0c:db:fe:f6:4a:34:64:d3:ee:e4:6d:03:62:df: e6:d5:36:83:89:b5:4b:a9:d5:40:62:ad:3c:c2:60:7c:d7:dd: 1f:2b:db:ac:e2:cb:72:96:a1:dc:54:c4:17:6d:7a:6c:df:01: 8c:5f:3d:c0:aa:d1:d4:c3:33:c2:9d:64:15:09:02:71:4e:b2: c9:20:e8:2a:81:06:18:c3:29:60:d0:7b:8b:0e:29:54:3c:75: 5e:24:d7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjQxMTIwMTUxMjI3WhcNMjQxMTI3MTUxMjI3WjAYMRYwFAYD VQQDEw02NzNkZmM1Yi0wMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqTPSMOsbX7z/6MOI+pbhu9NAut8CM0yifDzSjMn6gDbTRD+iU7AG1yC/Z0B qGklC3ItsUZqwdPy09dqpK14tgoPGIfa61gMN1UthMgWfXRgnByBYyopBalrBwbv tHebkrxUd/sCkJFTlH7pX9NV68krPwg0gTkWSXhXdbZkaXcmuTokJkVZF9g4wPyh ap1/DWUv58zTBPe085aXP/KFw/NESO80Og0+kqPsvlBKy4hXyhouLXMKdhq0RvPd Wx9oryh76gab167ZN1SrshndhPfPi2Oc968nXJoFC6MLOpXBbw60+B/l3BbejJRt 6aGBhO1/ccnUpCVyJEe+hRGKlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/W5BrP 1op5nykDgGFQoukrH0A1MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRJU/Isen1x2mePCCL8DS5QXj80TwkiCPbj0VlYU+BvBzoU2yYaRXF 2n01rGf+WI6yy5uNnWoYG6B2pnCw7bW5j7rRN2e9sl7Rb1eIKpTAbtfh6nnu1BA8 LVhtG5M7Kb12jeDKMmbsj1mL2quRQ6Z4M0noafb7gGdSkrMRs2Df2WjRxiRgJFkE RiVb20a+9PI8QXxU0akirPhbs+s4tJy7RemcyQa9DNv+9ko0ZNPu5G0DYt/m1TaD ibVLqdVAYq08wmB8190fK9us4stylqHcVMQXbXps3wGMXz3AqtHUwzPCnWQVCQJx TrLJIOgqgQYYwylg0HuLDilUPHVeJNcI -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org