$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: 8UE1t8pd7tZJsvI/J+/K8kFB7H7P4WKwOLSeGj5BrD4= Subject key identifier: 73:52:5A:31:86:30:E6:5E:F6:F5:EE:7E:6E:59:B5:5F:07:F1:7B:03 Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 021E Signing time: Sat 23 Nov 2024 01:29:13 +0000 Manifest this update: Sat 23 Nov 2024 01:29:12 +0000 Manifest next update: Sat 30 Nov 2024 01:29:12 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: WrboaWGX/crl1nhGU/WueHppFolTmxmJWDBLz0zGO/A=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: mdNnumQ5YiPoV1OJ4uam9G3UP6D/angADBcavXL7QI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: Nov 23 01:29:12 2024 GMT Not After : Nov 30 01:29:12 2024 GMT Subject: CN=67412fe9-b796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:5f:f5:b1:83:ca:cc:9d:8e:1b:65:87:0d: bb:7c:e5:4b:a0:03:97:93:09:2c:d3:2e:ab:48:74: b4:1d:82:bb:e2:f1:1b:09:4d:6a:d2:99:f8:2d:6d: 64:67:34:64:83:1f:2d:df:02:6d:d5:50:12:d3:6f: 59:c9:03:3e:fb:ac:00:2d:7e:08:89:ae:74:20:f5: 4e:ba:31:f2:38:33:bc:41:62:99:be:13:ce:7e:3a: 26:92:3b:3e:cb:8d:dd:4c:5d:a1:b3:d3:1c:8e:0f: d0:5f:f6:ea:94:7d:db:b6:56:5c:b7:60:ea:8a:03: 23:b3:43:5e:71:c5:4d:31:60:02:13:d2:c0:e6:f9: 8a:79:09:91:77:2c:dc:09:16:00:85:88:e3:62:7e: b1:23:71:2f:86:46:b0:e1:8b:37:e2:1a:53:33:8b: 33:9b:f9:59:e4:f3:77:d4:df:86:6a:16:d8:90:1d: 84:87:79:45:7c:05:a8:97:00:1e:34:bb:50:30:e0: 19:6e:c4:98:85:9e:91:9d:a9:31:b3:80:1f:ea:97: e9:a2:0c:78:47:65:9b:e9:02:97:01:58:5f:59:89: 8c:6a:16:08:01:e7:2e:fd:73:18:71:05:0f:02:ba: aa:76:95:aa:9d:c8:00:f4:17:e7:2b:7c:50:6d:46: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:5A:31:86:30:E6:5E:F6:F5:EE:7E:6E:59:B5:5F:07:F1:7B:03 X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:9c:3f:84:d6:44:3d:4d:5d:7d:a6:80:f7:c0:c4:2c:d1:70: 5b:03:7b:88:a1:b9:cd:04:0e:b8:b2:fd:20:b6:21:28:60:a5: b9:df:9a:14:bf:d6:03:02:98:52:fb:25:4a:35:41:cc:8a:07: b1:61:ec:79:0c:2a:60:5a:73:bd:60:62:fa:6f:fc:12:c9:bb: 58:98:e4:d3:19:48:2c:ce:b2:ec:00:97:c5:b7:a0:3b:c6:65: 00:4f:04:e0:66:8b:69:1d:09:a3:6d:48:a2:8a:19:f2:1c:1f: 95:93:87:69:bf:91:d0:7f:42:07:80:37:87:96:38:a1:51:fd: 07:2b:86:3e:30:b9:2c:49:d1:81:94:8b:70:65:31:c1:9f:05: 44:9d:31:32:c6:a3:13:e6:da:a5:95:ab:82:86:85:93:59:24: 97:94:74:c3:76:87:b3:ba:62:7f:b4:a4:75:5e:da:a8:42:b0: 69:cf:4d:c8:e2:42:29:cf:96:82:16:c4:f0:95:ef:f5:ce:f5: 90:4c:de:c2:6e:7d:3a:ec:71:45:14:bd:e0:58:5a:8e:e7:1b: 1e:44:ce:d6:a9:ea:03:2d:43:c7:9a:20:e3:09:e3:b4:38:4e: 3b:0c:c3:9d:53:aa:6b:37:2f:86:f5:34:8b:09:c0:c1:35:fe: ad:44:c8:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjQxMTIzMDEyOTEyWhcNMjQxMTMwMDEyOTEyWjAYMRYwFAYD VQQDEw02NzQxMmZlOS1iNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8Jf9bGDysydjhtlhw27fOVLoAOXkwks0y6rSHS0HYK74vEbCU1q0pn4LW1k ZzRkgx8t3wJt1VAS029ZyQM++6wALX4Iia50IPVOujHyODO8QWKZvhPOfjomkjs+ y43dTF2hs9Mcjg/QX/bqlH3btlZct2DqigMjs0NeccVNMWACE9LA5vmKeQmRdyzc CRYAhYjjYn6xI3Evhkaw4Ys34hpTM4szm/lZ5PN31N+GahbYkB2Eh3lFfAWolwAe NLtQMOAZbsSYhZ6Rnakxs4Af6pfpogx4R2Wb6QKXAVhfWYmMahYIAecu/XMYcQUP ArqqdpWqncgA9BfnK3xQbUbibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNSWjGG MOZe9vXufm5ZtV8H8XsDMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBnD+E1kQ9TV19poD3wMQs0XBbA3uIobnNBA64sv0gtiEoYKW535oU v9YDAphS+yVKNUHMigexYex5DCpgWnO9YGL6b/wSybtYmOTTGUgszrLsAJfFt6A7 xmUATwTgZotpHQmjbUiiihnyHB+Vk4dpv5HQf0IHgDeHljihUf0HK4Y+MLksSdGB lItwZTHBnwVEnTEyxqMT5tqllauChoWTWSSXlHTDdoezumJ/tKR1XtqoQrBpz03I 4kIpz5aCFsTwle/1zvWQTN7Cbn067HFFFL3gWFqO5xseRM7WqeoDLUPHmiDjCeO0 OE47DMOdU6prNy+G9TSLCcDBNf6tRMje -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org