$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: Q1J4rsA+HopR6VrO0d40HFXpZo4jks3a9J7QUVT48Zs= Subject key identifier: 50:B4:49:9C:11:11:84:7F:E5:30:5D:F2:9B:D6:7E:C6:5A:9A:8B:EA Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 075D Signing time: Wed 20 Nov 2024 21:01:55 +0000 Manifest this update: Wed 20 Nov 2024 21:01:54 +0000 Manifest next update: Wed 27 Nov 2024 21:01:54 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: YDROgcO2jXQGz24R5FQ5BAcPwQ2dIdCVrsIg3275Sp8=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Nov 20 21:01:54 2024 GMT Not After : Nov 27 21:01:54 2024 GMT Subject: CN=673e4e42-c484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:10:cd:26:df:4a:36:93:48:bf:ef:c7:27: e6:2e:50:86:eb:42:30:48:81:f8:19:9d:99:81:bf: a4:6e:77:fe:73:3a:3b:06:e7:6e:f4:c8:40:4e:86: ac:1c:a1:5d:d9:54:5c:94:09:1b:33:5a:ae:d8:62: 4e:a1:6e:bb:9f:a0:25:88:b4:be:1c:e5:56:1f:63: 9c:88:e0:95:a0:df:9d:c4:af:87:d6:42:36:10:dd: db:a2:7c:39:77:75:52:b8:71:33:e4:ef:6f:2e:00: e8:05:5d:ca:11:eb:41:e7:e4:a4:e3:33:19:01:49: d5:0a:6f:90:e2:56:e7:c8:87:a1:5c:e1:12:79:c1: 0a:7f:f4:23:9c:0e:b2:b4:95:fc:5f:0c:aa:02:93: 0c:96:d8:90:27:09:64:15:4b:7c:f6:f1:a5:55:e1: a7:90:e1:7a:25:6d:39:9d:7a:c8:df:eb:36:0c:05: 18:c2:20:be:15:dd:b1:c0:c0:cc:ec:33:88:3e:22: 36:87:06:72:45:05:ff:36:dc:ba:22:04:a8:e1:75: df:b4:cc:97:21:89:17:cf:41:da:18:2f:57:8f:4e: 17:9d:f4:88:3a:e0:98:29:b3:d1:a0:cb:a6:75:8d: 3a:7e:70:93:c7:3d:c9:06:aa:a7:f7:ba:68:64:69: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B4:49:9C:11:11:84:7F:E5:30:5D:F2:9B:D6:7E:C6:5A:9A:8B:EA X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:04:e4:01:02:61:67:14:c9:f5:ce:ad:53:09:d9:4e:cb:fc: 53:c7:a1:fc:81:30:64:6b:53:5e:ae:d9:34:42:1a:d7:3d:de: 6e:32:23:ea:f6:6e:30:e3:45:59:fb:10:5a:e6:9e:d7:92:03: 27:cb:8f:f8:46:b7:63:1f:87:82:9b:04:ba:7a:ff:7d:1b:83: 37:71:6d:ef:93:1b:d0:d0:32:03:7b:8c:8c:b3:bd:b4:14:ac: 99:22:33:9e:8a:46:c8:ed:75:87:0b:6d:dc:0f:6a:d1:8d:7e: 47:dd:1b:62:a8:ae:60:72:23:a6:16:ef:9e:c7:dd:07:d8:55: a5:26:59:f1:3b:f5:a6:68:40:3f:d6:3e:f6:f0:be:da:d2:d3: 2d:fa:2e:03:f2:dd:f0:a9:4a:ed:58:fb:13:5c:b4:2a:af:e0: 26:b4:77:16:9c:87:78:5a:55:cc:b1:59:20:d5:00:4d:06:8b: 5a:35:05:28:aa:76:f5:dc:27:08:4d:19:3e:54:ed:53:83:76: 5e:14:3c:1a:f6:96:f2:75:dc:55:37:d3:8d:9a:21:ff:32:1e: d4:1f:12:a2:85:e8:13:7a:4d:ac:91:7f:90:38:79:36:9d:53: 23:5b:78:47:84:06:72:44:bb:b1:d9:1e:28:11:59:32:fe:ec: de:04:35:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjQxMTIwMjEwMTU0WhcNMjQxMTI3MjEwMTU0WjAYMRYwFAYD VQQDEw02NzNlNGU0Mi1jNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYoQzSbfSjaTSL/vxyfmLlCG60IwSIH4GZ2Zgb+kbnf+czo7Budu9MhAToas HKFd2VRclAkbM1qu2GJOoW67n6AliLS+HOVWH2OciOCVoN+dxK+H1kI2EN3bonw5 d3VSuHEz5O9vLgDoBV3KEetB5+Sk4zMZAUnVCm+Q4lbnyIehXOESecEKf/QjnA6y tJX8XwyqApMMltiQJwlkFUt89vGlVeGnkOF6JW05nXrI3+s2DAUYwiC+Fd2xwMDM 7DOIPiI2hwZyRQX/Nty6IgSo4XXftMyXIYkXz0HaGC9Xj04XnfSIOuCYKbPRoMum dY06fnCTxz3JBqqn97poZGnzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC0SZwR EYR/5TBd8pvWfsZamovqMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIBOQBAmFnFMn1zq1TCdlOy/xTx6H8gTBka1Nertk0QhrXPd5uMiPq 9m4w40VZ+xBa5p7XkgMny4/4RrdjH4eCmwS6ev99G4M3cW3vkxvQ0DIDe4yMs720 FKyZIjOeikbI7XWHC23cD2rRjX5H3RtiqK5gciOmFu+ex90H2FWlJlnxO/WmaEA/ 1j728L7a0tMt+i4D8t3wqUrtWPsTXLQqr+AmtHcWnId4WlXMsVkg1QBNBotaNQUo qnb13CcITRk+VO1Tg3ZeFDwa9pbyddxVN9ONmiH/Mh7UHxKihegTek2skX+QOHk2 nVMjW3hHhAZyRLux2R4oEVky/uzeBDVA -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org