$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: jGuvcYZl770h6gP6oOdMOjIoYS6GNorFDsCYuroCEgU= Subject key identifier: 91:EC:65:F3:BD:CD:B3:A6:E2:CA:D0:90:8D:84:41:60:E7:56:AA:D6 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 0215 Signing time: Sat 23 Nov 2024 01:32:57 +0000 Manifest this update: Sat 23 Nov 2024 01:32:57 +0000 Manifest next update: Sat 30 Nov 2024 01:32:57 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: 8a4EmGFItfOe7JbAyujchACxwWD9lOA1nYnVod2WbJg=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Nov 23 01:32:57 2024 GMT Not After : Nov 30 01:32:57 2024 GMT Subject: CN=674130c9-a0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:bd:91:91:f0:fd:e7:94:03:00:07:47:d7: 9b:7b:60:d6:9d:55:ea:64:5e:f6:b5:ba:1c:f9:e2: 2c:2a:b3:d0:dd:2d:b5:6e:be:8a:c5:9d:5e:63:73: 2c:99:79:60:5d:5c:23:af:29:6a:55:30:62:c2:54: 67:72:d5:13:36:b3:67:f8:ae:95:4e:39:a3:7a:a8: 20:9e:00:35:dc:61:5f:8a:f3:20:73:61:33:f3:31: e0:58:df:5a:f2:46:7e:d4:3f:7c:4f:d5:37:96:6b: e8:a8:39:42:37:d0:34:55:c6:76:76:79:57:af:02: 17:f5:60:f0:ee:0e:9d:18:a0:17:70:de:70:ca:5c: 1d:d4:e3:6d:6b:da:8a:08:07:b3:3e:70:6f:51:84: 18:93:4a:28:97:b7:81:1d:46:d4:41:5b:d1:28:98: 0d:6e:9b:7c:ca:8e:a0:97:47:55:e7:a1:4d:a9:df: ea:cb:2c:18:d9:bd:df:6d:b0:6b:c5:fd:ed:78:2b: eb:31:69:1c:6c:86:a2:23:2c:6f:d5:1e:40:90:92: 70:13:88:71:52:86:54:da:03:c1:5e:22:a0:93:18: 8e:6c:f4:6c:e3:de:d5:d4:c9:4c:06:be:df:6f:f9: 27:cd:e7:d1:4e:f1:a0:a2:a0:cc:d2:dc:cb:d8:82: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:65:F3:BD:CD:B3:A6:E2:CA:D0:90:8D:84:41:60:E7:56:AA:D6 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:0f:23:db:da:90:fb:6b:0c:db:b7:c5:d1:69:d6:6f:a8: 1d:6e:35:73:4c:3b:e4:8f:b0:c1:ac:e3:0a:43:55:97:6d:23: 98:97:0e:5a:fa:be:05:de:6b:0c:c7:0e:b0:8e:28:9e:44:45: bf:3c:c6:98:a8:a6:64:34:64:ae:d3:ac:04:36:fc:6a:24:ad: b9:2c:9c:a3:45:35:78:45:6e:2d:c6:b9:e7:f7:c1:d3:91:7a: c5:61:da:b9:a9:cf:19:df:6e:3d:6d:d4:95:75:c7:0e:a7:cc: a1:21:05:dc:fa:7d:17:6b:19:94:c7:0a:b0:8c:18:7a:90:54: 99:e5:f4:92:98:8d:a5:1d:84:c0:63:e3:9c:2f:1e:96:22:e9: 32:91:28:87:35:d2:3a:b5:f9:8f:07:f4:a7:94:36:15:6b:e3: 09:f1:aa:d0:71:ba:8a:c0:11:18:28:c3:e2:d1:70:5b:54:a0: 70:71:94:f6:1c:bb:a0:1e:1b:9e:89:d3:bf:4d:5d:57:ab:bf: da:28:4e:cf:ff:33:e5:33:6c:2e:3c:05:85:8a:01:3c:41:cb: 05:ba:dd:37:90:95:15:92:71:11:65:b4:89:01:ef:45:ca:e7: 4b:63:78:06:cc:3a:b0:8a:1e:8a:c3:17:5b:0a:b6:7f:f7:54: 34:eb:0b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjQxMTIzMDEzMjU3WhcNMjQxMTMwMDEzMjU3WjAYMRYwFAYD VQQDEw02NzQxMzBjOS1hMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12G9kZHw/eeUAwAHR9ebe2DWnVXqZF72tboc+eIsKrPQ3S21br6KxZ1eY3Ms mXlgXVwjrylqVTBiwlRnctUTNrNn+K6VTjmjeqggngA13GFfivMgc2Ez8zHgWN9a 8kZ+1D98T9U3lmvoqDlCN9A0VcZ2dnlXrwIX9WDw7g6dGKAXcN5wylwd1ONta9qK CAezPnBvUYQYk0ool7eBHUbUQVvRKJgNbpt8yo6gl0dV56FNqd/qyywY2b3fbbBr xf3teCvrMWkcbIaiIyxv1R5AkJJwE4hxUoZU2gPBXiKgkxiObPRs497V1MlMBr7f b/knzefRTvGgoqDM0tzL2ILqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHsZfO9 zbOm4srQkI2EQWDnVqrWMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNFA8j29qQ+2sM27fF0WnWb6gdbjVzTDvkj7DBrOMKQ1WXbSOYlw5a +r4F3msMxw6wjiieREW/PMaYqKZkNGSu06wENvxqJK25LJyjRTV4RW4txrnn98HT kXrFYdq5qc8Z3249bdSVdccOp8yhIQXc+n0XaxmUxwqwjBh6kFSZ5fSSmI2lHYTA Y+OcLx6WIukykSiHNdI6tfmPB/SnlDYVa+MJ8arQcbqKwBEYKMPi0XBbVKBwcZT2 HLugHhueidO/TV1Xq7/aKE7P/zPlM2wuPAWFigE8QcsFut03kJUVknERZbSJAe9F yudLY3gGzDqwih6KwxdbCrZ/91Q06ws8 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org