$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: SlDpB1E3l2cFLR65mnVUW73zX1XKe9hWWnus+FiCQfM= Subject key identifier: DA:54:A4:48:EF:23:8F:90:3A:4F:B7:93:53:60:DB:0B:E1:29:7F:79 Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 1296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 128D Signing time: Fri 22 Nov 2024 17:05:44 +0000 Manifest this update: Fri 22 Nov 2024 17:05:43 +0000 Manifest next update: Fri 29 Nov 2024 17:05:43 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: Kbhwt23uKgtbjWkmqVBQ1ik66bhAlDAWiRYYy8zk+H8=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: uFyvztQzxevciuQ6NLXE4AsYEtpQjXVKdG3AXeRRVx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4758 (0x1296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: Nov 22 17:05:43 2024 GMT Not After : Nov 29 17:05:43 2024 GMT Subject: CN=6740b9e7-077c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:92:3c:7f:6f:7f:2d:28:da:b1:e8:61:c9: 15:70:4c:af:f5:90:36:09:9a:cb:c4:9c:83:17:0f: 65:c6:1b:8c:9a:be:46:73:8c:9e:bc:34:c5:71:a0: cc:70:d7:4c:ac:09:e7:6f:14:0b:3b:cd:29:8f:5d: 2d:a2:74:fc:70:4a:91:ad:f8:40:f8:bf:32:fc:bb: 46:73:25:3b:e8:15:c5:4e:ee:8d:24:87:4a:51:0b: 59:63:cd:f6:2b:61:89:56:bd:cc:e9:19:1c:de:5f: 4b:5f:55:7f:b9:69:d0:8a:af:92:37:87:f0:cf:a9: 3f:65:44:6c:15:ca:be:47:ba:90:1c:7e:65:4a:78: 77:23:4a:ae:dc:f4:48:b2:ec:dd:3e:36:78:15:e9: 33:44:42:9a:1a:56:0b:c9:7c:64:c3:a7:5a:bd:87: d9:52:33:8f:3b:0c:b2:c9:36:06:5f:d6:1f:23:e7: b6:7d:54:35:42:28:8e:c8:34:ca:d2:7b:49:ac:c3: d3:89:75:2c:e1:31:cd:1b:7b:56:a4:3c:9d:e8:c2: 45:fb:08:58:ac:7f:03:58:38:f6:eb:fa:58:05:1b: 67:f5:9c:8f:65:6d:4a:46:cc:ba:19:19:fa:41:b7: df:5c:99:aa:f5:d8:e4:95:5f:59:46:b6:20:7b:30: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:54:A4:48:EF:23:8F:90:3A:4F:B7:93:53:60:DB:0B:E1:29:7F:79 X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7c:35:d8:fa:a9:75:3f:a0:dc:53:ac:32:ab:ad:33:62:ee: 5c:ec:46:2e:d0:61:06:a8:bb:e7:ae:f4:4a:78:4d:3e:2c:4a: f3:7f:6d:d5:95:66:bd:8c:c4:f2:b2:7f:99:3e:28:9a:a2:d5: cb:22:45:f4:d3:13:dc:03:c7:26:30:64:f3:e6:ef:f5:b0:f0: aa:2d:17:18:4b:ac:fa:14:26:71:60:ac:47:46:ea:1c:4e:dc: a3:69:bc:e1:eb:e5:b8:92:5e:11:55:8e:ce:8c:dc:fc:6d:cf: 02:b7:ea:26:03:db:9b:96:f8:36:09:7e:bb:e4:0f:a0:39:9e: 2d:91:8c:e7:20:c5:29:94:6e:4f:c3:1a:1d:2d:dd:b1:1d:2e: f7:5e:8a:7e:25:55:3c:c2:1f:1a:5c:fb:42:4f:13:e2:b8:8c: 6e:7a:03:f1:bd:a7:11:84:a3:f8:19:9e:e0:ed:e7:3a:bf:e0: 69:e5:fb:be:9f:8d:a5:9e:e1:a6:62:bc:34:7c:00:0b:ad:8c: 96:0a:e9:ab:ab:fd:4f:ad:1e:10:dd:0a:fc:19:6b:99:00:c8: d1:d5:cd:8d:6f:38:6f:c9:59:71:5a:04:e0:b6:4c:dc:50:9a: ed:f1:58:3c:af:9f:f2:14:fb:07:d8:e6:03:bf:54:12:8b:b6: c9:dc:b8:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjQxMTIyMTcwNTQzWhcNMjQxMTI5MTcwNTQzWjAYMRYwFAYD VQQDEw02NzQwYjllNy0wNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3aSPH9vfy0o2rHoYckVcEyv9ZA2CZrLxJyDFw9lxhuMmr5Gc4yevDTFcaDM cNdMrAnnbxQLO80pj10tonT8cEqRrfhA+L8y/LtGcyU76BXFTu6NJIdKUQtZY832 K2GJVr3M6Rkc3l9LX1V/uWnQiq+SN4fwz6k/ZURsFcq+R7qQHH5lSnh3I0qu3PRI suzdPjZ4FekzREKaGlYLyXxkw6davYfZUjOPOwyyyTYGX9YfI+e2fVQ1QiiOyDTK 0ntJrMPTiXUs4THNG3tWpDyd6MJF+whYrH8DWDj26/pYBRtn9ZyPZW1KRsy6GRn6 QbffXJmq9djklV9ZRrYgezD3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpUpEjv I4+QOk+3k1Ng2wvhKX95MB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqfDXY+ql1P6DcU6wyq60zYu5c7EYu0GEGqLvnrvRKeE0+LErzf23V lWa9jMTysn+ZPiiaotXLIkX00xPcA8cmMGTz5u/1sPCqLRcYS6z6FCZxYKxHRuoc Ttyjabzh6+W4kl4RVY7OjNz8bc8Ct+omA9ublvg2CX675A+gOZ4tkYznIMUplG5P wxodLd2xHS73Xop+JVU8wh8aXPtCTxPiuIxuegPxvacRhKP4GZ7g7ec6v+Bp5fu+ n42lnuGmYrw0fAALrYyWCumrq/1PrR4Q3Qr8GWuZAMjR1c2NbzhvyVlxWgTgtkzc UJrt8Vg8r5/yFPsH2OYDv1QSi7bJ3Ljs -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org