$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: /6dTriA9m1R30f1bClTTeakj7yxDtJZ7geCnAWM1t8Y= Subject key identifier: 8D:EE:FC:71:4E:96:CA:DD:50:4C:4B:F0:11:37:6D:56:C6:75:2D:82 Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 0155 Signing time: Sat 23 Nov 2024 02:28:09 +0000 Manifest this update: Sat 23 Nov 2024 02:28:08 +0000 Manifest next update: Sat 30 Nov 2024 02:28:08 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: 94gseg871wY5CbOmJwJ/jw6HaroK0WsaL+IjurWxOR0=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: 9FynllD8H+NI8HSEXg9Jjmq002CiTaGo7ZssucPUw/c=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: Nov 23 02:28:08 2024 GMT Not After : Nov 30 02:28:08 2024 GMT Subject: CN=67413db8-b9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:58:23:f9:5c:06:c5:5c:0c:0a:0b:15:77: 50:42:55:8e:ad:b9:fe:08:4e:83:65:e6:a7:8e:80: 03:b8:1c:bd:5d:95:4b:01:84:51:d3:b4:f8:b6:24: de:90:24:9f:5b:90:12:45:2f:e6:56:38:52:94:7c: 2c:18:e6:07:9d:c7:29:b6:5b:6f:95:1f:7f:e5:38: a9:20:0c:46:d9:5c:17:05:65:b6:10:ed:50:87:a9: 4d:14:20:53:4d:b1:33:bb:bc:d2:fc:82:69:35:aa: 65:a7:21:8c:d9:72:cd:29:ed:2d:3e:b6:6c:d7:90: e5:1f:dc:3b:be:ea:7a:b5:11:e1:85:46:a1:5d:4a: 47:10:81:0f:3b:99:09:4c:c8:df:4f:8a:d5:01:56: cb:5a:a1:ae:9b:47:bf:00:6a:84:f7:2a:2c:03:3f: 5c:35:1a:81:3b:66:c3:25:7c:36:db:d8:d5:89:e2: 90:9a:6a:f6:49:74:a8:a6:83:75:1c:f3:51:77:7c: 69:18:2a:51:f1:8a:31:2c:78:73:cb:b0:fa:da:16: 9d:51:0b:b9:3d:e1:ac:ae:3a:1b:ef:ca:2a:08:72: c9:32:a3:6b:9e:c1:54:d8:87:58:00:22:dd:6d:03: a3:f1:1f:65:8c:ea:5b:8d:1c:e4:b9:66:6e:e3:70: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:FC:71:4E:96:CA:DD:50:4C:4B:F0:11:37:6D:56:C6:75:2D:82 X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0e:a1:81:34:76:b8:35:e2:6a:a3:7a:e6:71:76:f8:fd:52: 50:dd:db:2c:a0:ec:64:70:89:49:bf:4e:4a:0f:21:7d:7a:f0: 8c:51:06:1f:0e:eb:45:96:7d:1f:29:07:09:a1:a3:60:d3:41: ec:a6:d8:c8:80:70:99:20:36:83:df:bb:71:d1:c2:dd:08:c6: 00:6c:e7:e3:43:fd:ae:62:42:3d:62:8b:f4:fd:1a:15:0d:35: 49:9d:52:c1:f6:58:22:3b:b1:85:8b:fc:3a:47:84:a5:19:bf: 47:5a:77:07:7f:21:9c:aa:2b:18:0b:24:4e:e5:c6:31:9f:b7: 8a:80:40:73:f1:5a:61:64:d6:f3:63:a9:f1:f3:e9:14:39:d1: 55:87:de:ef:74:4b:5d:78:a9:7d:ee:94:2e:7b:01:f9:c4:dc: 6b:85:8b:6a:e9:c6:20:78:2a:76:02:76:4a:8a:1e:d4:75:e4: 8f:a8:79:30:2f:75:10:22:45:a3:7d:6a:ec:02:86:c3:b1:2d: 1f:65:d0:69:83:da:c6:6a:f8:50:96:2e:22:d1:c2:70:19:ab: 50:4c:7f:c8:4f:b2:b9:0b:f8:c1:d8:d8:7e:b4:ea:2d:0e:cd: eb:02:4c:f1:74:7d:15:4d:2d:ea:81:97:38:fe:41:3f:79:0c: 04:3c:bc:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjQxMTIzMDIyODA4WhcNMjQxMTMwMDIyODA4WjAYMRYwFAYD VQQDEw02NzQxM2RiOC1iOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArftYI/lcBsVcDAoLFXdQQlWOrbn+CE6DZeanjoADuBy9XZVLAYRR07T4tiTe kCSfW5ASRS/mVjhSlHwsGOYHnccptltvlR9/5TipIAxG2VwXBWW2EO1Qh6lNFCBT TbEzu7zS/IJpNaplpyGM2XLNKe0tPrZs15DlH9w7vup6tRHhhUahXUpHEIEPO5kJ TMjfT4rVAVbLWqGum0e/AGqE9yosAz9cNRqBO2bDJXw229jVieKQmmr2SXSopoN1 HPNRd3xpGCpR8YoxLHhzy7D62hadUQu5PeGsrjob78oqCHLJMqNrnsFU2IdYACLd bQOj8R9ljOpbjRzkuWZu43DnvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3u/HFO lsrdUExL8BE3bVbGdS2CMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxDqGBNHa4NeJqo3rmcXb4/VJQ3dssoOxkcIlJv05KDyF9evCMUQYf DutFln0fKQcJoaNg00HsptjIgHCZIDaD37tx0cLdCMYAbOfjQ/2uYkI9Yov0/RoV DTVJnVLB9lgiO7GFi/w6R4SlGb9HWncHfyGcqisYCyRO5cYxn7eKgEBz8VphZNbz Y6nx8+kUOdFVh97vdEtdeKl97pQuewH5xNxrhYtq6cYgeCp2AnZKih7UdeSPqHkw L3UQIkWjfWrsAobDsS0fZdBpg9rGavhQli4i0cJwGatQTH/IT7K5C/jB2Nh+tOot Ds3rAkzxdH0VTS3qgZc4/kE/eQwEPLyK -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org