$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: 23s+sN70IptvTOLKUpmXdc9bTBhnXUHmjE/vXLYR9Ig= Subject key identifier: 2D:1B:96:A6:7A:73:FD:37:AB:E3:7D:42:6E:72:77:AB:EA:78:AD:14 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0706 Signing time: Fri 22 Nov 2024 21:31:30 +0000 Manifest this update: Fri 22 Nov 2024 21:31:29 +0000 Manifest next update: Fri 29 Nov 2024 21:31:29 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: +J5f4LfZG3nspIBMVCmu/mM1o2/O9ba4ed5irjo8qJo=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY=) 3: A987B8BEDB0B11ECB433A842C4F9AE02.roa (hash: 5XhmwjgG2fg0OurZJyTDw4ayeN3jOAUvOPnSAPOcLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Nov 22 21:31:29 2024 GMT Not After : Nov 29 21:31:29 2024 GMT Subject: CN=6740f831-9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:2a:7f:28:d1:f1:b5:c6:ab:06:78:6b:99: 12:d5:42:a5:dc:98:08:6d:c8:87:00:4b:95:a9:eb: ed:6b:ba:dc:34:df:8e:30:f6:0c:1c:9e:a6:fc:21: a7:4b:4c:7d:48:61:2f:01:f4:47:44:78:6e:ce:96: da:aa:7e:62:e8:7a:59:54:50:49:40:a3:69:0a:cb: a0:a6:b1:31:04:0b:e2:70:5f:f9:aa:71:ea:ea:c9: d1:d4:12:00:fe:48:c4:61:cd:f8:70:90:02:b1:ab: 34:0b:2e:19:08:0f:be:11:f2:82:e5:61:64:67:15: f6:7c:9f:7e:e0:5c:7e:db:62:84:de:ae:9f:b6:f6: 21:9f:79:89:6d:0c:0d:62:a6:46:3c:07:80:af:1e: 27:6c:16:7a:08:32:51:78:ed:e2:9d:b7:e5:e8:61: 1e:70:75:4a:e4:e3:ef:24:32:25:00:bd:cb:bb:fa: 74:d8:f6:f0:22:62:6a:ed:ca:de:18:b1:0f:4f:0a: a6:b1:5d:85:4f:f2:29:51:e2:8b:d8:42:2f:05:4e: 2b:86:88:4a:15:74:ad:3e:fc:c0:1c:83:0a:12:3c: 5a:ce:1d:38:80:36:99:c1:d6:21:84:c1:4d:b2:ba: a4:de:56:6f:03:9b:f1:61:96:48:3b:93:73:cc:6c: d0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:96:A6:7A:73:FD:37:AB:E3:7D:42:6E:72:77:AB:EA:78:AD:14 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:0c:35:e1:10:38:8e:4f:97:32:d6:76:c1:b2:39:be:1f: 89:f2:3f:97:5f:8e:41:53:e5:f7:f1:b2:28:a4:10:e8:ac:7f: 2e:b2:70:e7:7a:7b:c7:7b:3a:3f:8f:02:a1:32:eb:6c:c7:2b: 5c:2b:77:ee:bf:ae:bb:bd:eb:65:ea:39:a1:ee:76:92:09:79: f9:6a:96:d7:c0:a9:f7:c0:d7:c3:0b:e7:52:0c:59:0c:1e:08: f9:21:2e:31:da:d9:e6:db:22:c9:ee:36:e7:a2:aa:74:9a:57: 6b:50:7f:fb:18:80:ad:64:c0:d4:e2:93:74:0d:f6:2e:f4:fd: 28:8f:87:39:1e:ed:d7:a9:88:96:11:6d:df:a9:12:80:7f:e1: f6:73:10:92:aa:cd:a9:99:56:4b:db:53:2b:13:f2:ac:49:33: 5b:18:cd:72:0c:10:4a:d5:09:d7:27:e5:b9:10:f8:28:8d:6b: 15:24:a4:19:e6:e0:e0:e6:d4:65:de:9c:10:76:e8:e9:f6:3e: 1c:8d:36:c1:64:89:76:4c:ea:0b:c4:de:54:18:56:d4:e2:5e: 6a:a4:5d:0f:a6:b4:97:0b:3d:63:97:44:af:92:ad:1d:79:b5: fc:01:7f:03:45:24:65:95:70:57:af:d4:c3:d2:e3:a2:87:2c: 25:ac:b7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjQxMTIyMjEzMTI5WhcNMjQxMTI5MjEzMTI5WjAYMRYwFAYD VQQDEw02NzQwZjgzMS05MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WMqfyjR8bXGqwZ4a5kS1UKl3JgIbciHAEuVqevta7rcNN+OMPYMHJ6m/CGn S0x9SGEvAfRHRHhuzpbaqn5i6HpZVFBJQKNpCsugprExBAvicF/5qnHq6snR1BIA /kjEYc34cJACsas0Cy4ZCA++EfKC5WFkZxX2fJ9+4Fx+22KE3q6ftvYhn3mJbQwN YqZGPAeArx4nbBZ6CDJReO3inbfl6GEecHVK5OPvJDIlAL3Lu/p02PbwImJq7cre GLEPTwqmsV2FT/IpUeKL2EIvBU4rhohKFXStPvzAHIMKEjxazh04gDaZwdYhhMFN srqk3lZvA5vxYZZIO5NzzGzQ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0blqZ6 c/03q+N9Qm5yd6vqeK0UMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeSgw14RA4jk+XMtZ2wbI5vh+J8j+XX45BU+X38bIopBDorH8usnDn envHezo/jwKhMutsxytcK3fuv667vetl6jmh7naSCXn5apbXwKn3wNfDC+dSDFkM Hgj5IS4x2tnm2yLJ7jbnoqp0mldrUH/7GICtZMDU4pN0DfYu9P0oj4c5Hu3XqYiW EW3fqRKAf+H2cxCSqs2pmVZL21MrE/KsSTNbGM1yDBBK1QnXJ+W5EPgojWsVJKQZ 5uDg5tRl3pwQdujp9j4cjTbBZIl2TOoLxN5UGFbU4l5qpF0PprSXCz1jl0Svkq0d ebX8AX8DRSRllXBXr9TD0uOihywlrLee -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org