$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: dWveC5BMt3kKHm6wM9qlR+SLZa+rFyqj1f4lTTGi8Mw= Subject key identifier: 6A:31:74:6B:E2:C2:91:18:9F:61:A1:43:9E:B0:E6:F7:75:2C:F6:C0 Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 84 Signing time: Mon 25 Nov 2024 04:40:08 +0000 Manifest this update: Mon 25 Nov 2024 04:40:07 +0000 Manifest next update: Mon 02 Dec 2024 04:40:07 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: AkB2XssVs0ZvgvvMYAfhg0vv42W06dFjn9OmMI/gntw=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Nov 25 04:40:07 2024 GMT Not After : Dec 2 04:40:07 2024 GMT Subject: CN=6743ffa8-40c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:7c:f8:15:27:16:23:a8:bc:25:8b:3c:0c: d1:fb:29:fd:68:3e:22:63:04:d5:8c:cd:14:d1:01: 4c:58:f5:62:5d:c6:15:9e:d1:5f:7a:2c:e4:92:18: 65:66:a2:62:8f:04:56:bc:27:92:fa:d7:ed:5e:b5: 17:32:34:1c:2d:c4:6f:57:a5:1e:47:8f:07:28:6e: e5:ab:35:fc:78:4c:d8:9c:ce:38:44:7d:32:ec:db: c0:d6:11:ed:75:11:6f:45:64:6f:80:4d:d2:cf:3a: bb:95:89:a1:3c:5b:33:83:a3:c8:ff:6b:91:35:00: bd:c5:bb:de:03:92:be:e2:9d:a0:f4:8e:b8:a3:ec: 88:c8:b3:00:70:19:66:91:db:d8:26:c1:a6:5b:7e: a7:aa:3f:b4:1e:9f:98:62:db:8f:57:f5:e0:c0:10: a2:7f:ce:c4:4c:a7:b2:b5:ca:7c:00:ff:a2:f5:d2: 9e:ce:46:a8:37:b7:0f:78:86:bb:35:d8:21:ee:3d: 7d:6b:93:3e:1e:18:7b:ef:89:b8:54:bc:10:70:70: c4:3e:a3:42:52:6e:60:14:6f:76:c2:07:77:9d:27: fa:52:f6:f6:56:8b:15:2b:cf:8d:68:42:53:ed:5c: 05:c1:06:18:97:09:18:90:61:aa:13:29:5c:17:4a: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:74:6B:E2:C2:91:18:9F:61:A1:43:9E:B0:E6:F7:75:2C:F6:C0 X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ae:0d:89:e8:b6:08:2a:fb:6b:a1:09:74:cb:ed:d3:b1:2a: 5f:e7:8b:b3:85:de:d8:b7:6e:fb:a9:0e:5b:da:79:49:16:d3: 31:ae:0b:88:e7:f6:b5:9e:21:cb:aa:bb:b9:5f:46:56:8f:94: 2a:4a:81:59:76:fb:61:de:1d:74:a0:a8:e8:28:7a:a3:e5:c9: a6:38:59:7a:4c:80:74:05:8e:bd:7b:1a:a8:e6:4d:2c:4e:7a: cb:0d:c6:19:9a:f2:f9:33:b6:b2:18:3f:75:46:fa:86:b6:7f: 79:dd:f6:74:fd:48:e1:a7:6d:20:24:55:5c:02:f3:c6:01:2e: 73:95:bd:97:50:6e:36:54:d8:00:1b:c5:fe:3d:1e:84:c7:ad: f3:57:0f:b9:4f:90:68:aa:95:96:20:5d:4d:bc:9a:2b:74:5e: 0c:81:18:77:f2:46:12:a2:b5:b9:84:fd:54:66:0a:e9:48:61: 77:a2:94:4b:72:8a:ee:a4:82:5b:4f:06:29:1d:1b:2c:80:ad: da:39:4a:4d:c4:43:37:d8:a5:9f:39:34:0a:77:03:8b:42:15: df:bf:65:1e:05:0b:74:38:86:d2:05:05:6f:96:77:32:23:08: 71:6a:89:3b:51:ff:f5:e6:a3:7c:f5:1e:54:9e:d7:35:77:87: b1:09:5b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjQxMTI1MDQ0MDA3WhcNMjQxMjAyMDQ0MDA3WjAYMRYwFAYD VQQDEw02NzQzZmZhOC00MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUx8+BUnFiOovCWLPAzR+yn9aD4iYwTVjM0U0QFMWPViXcYVntFfeizkkhhl ZqJijwRWvCeS+tftXrUXMjQcLcRvV6UeR48HKG7lqzX8eEzYnM44RH0y7NvA1hHt dRFvRWRvgE3Szzq7lYmhPFszg6PI/2uRNQC9xbveA5K+4p2g9I64o+yIyLMAcBlm kdvYJsGmW36nqj+0Hp+YYtuPV/XgwBCif87ETKeytcp8AP+i9dKezkaoN7cPeIa7 Ndgh7j19a5M+Hhh774m4VLwQcHDEPqNCUm5gFG92wgd3nSf6Uvb2VosVK8+NaEJT 7VwFwQYYlwkYkGGqEylcF0qojQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoxdGvi wpEYn2GhQ56w5vd1LPbAMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJrg2J6LYIKvtroQl0y+3TsSpf54uzhd7Yt277qQ5b2nlJFtMxrguI 5/a1niHLqru5X0ZWj5QqSoFZdvth3h10oKjoKHqj5cmmOFl6TIB0BY69exqo5k0s TnrLDcYZmvL5M7ayGD91RvqGtn953fZ0/Ujhp20gJFVcAvPGAS5zlb2XUG42VNgA G8X+PR6Ex63zVw+5T5BoqpWWIF1NvJordF4MgRh38kYSorW5hP1UZgrpSGF3opRL corupIJbTwYpHRssgK3aOUpNxEM32KWfOTQKdwOLQhXfv2UeBQt0OIbSBQVvlncy Iwhxaok7Uf/15qN89R5Untc1d4exCVuE -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:12 2024 by rpki-client on console-ams.rpki-client.org