$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: nPnhoOD2lGcjXGjCzTEl+kFUwnTm4Nl4Ko2kiRp3AIU= Subject key identifier: 87:6E:E3:DA:A8:97:06:81:2D:D5:32:A6:DC:3F:CB:8D:1F:D0:83:E4 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0AE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0AD6 Signing time: Wed 20 Nov 2024 19:06:13 +0000 Manifest this update: Wed 20 Nov 2024 19:06:12 +0000 Manifest next update: Wed 27 Nov 2024 19:06:12 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: vok/ojDEcy/uaI8By7smZjVge3rZQ+q198M/YLGclPg=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: jt3q3eu5PH5pGOuIsdjdUutobUCzp2vYtDeECsWMzEc=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: rs0VbwQOx7elbsUZDFIThAHCStbl8j3g8d0JAoWIucc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2787 (0xae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Nov 20 19:06:12 2024 GMT Not After : Nov 27 19:06:12 2024 GMT Subject: CN=673e3324-b3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:f6:ea:01:a9:12:12:f7:1a:6d:ad:67:d5: 5d:a2:7a:e0:a5:c3:2d:74:f3:9c:81:64:6d:82:43: cf:cc:79:46:60:35:36:86:e7:79:fe:c4:6c:f4:61: 39:4e:0b:92:c1:b7:0f:93:7a:5e:e8:c4:4d:24:bd: 74:d0:23:97:b8:b4:d7:dd:df:4c:04:48:43:46:de: 27:00:fd:f7:87:91:2e:66:2a:3a:27:fc:64:64:2a: 72:ac:86:ce:e3:c8:06:04:ee:4e:7e:aa:a6:23:a4: ba:61:ab:8e:aa:63:53:c6:7c:e6:66:54:39:b3:f3: ff:17:c4:86:36:6c:96:89:57:2a:e1:f1:c1:b2:b8: f4:cb:88:ce:98:c0:17:f8:74:bd:dc:7a:93:b1:a0: a4:d3:c1:99:9a:5f:02:45:c1:08:0b:a8:e6:a5:dc: ef:e5:02:f4:d6:1f:36:b8:da:df:68:3b:47:0d:72: 96:11:a4:cf:93:ff:c1:9f:e7:df:9f:fb:2f:46:0d: 9c:b1:ac:75:dd:ec:88:36:14:e7:fd:e4:9f:f5:e5: eb:0b:bb:0f:3e:f9:18:8e:ed:da:3e:5d:f2:03:e2: 93:39:6a:a1:cd:51:ac:a1:6b:e7:cb:72:12:95:1c: 19:c9:e0:a5:74:3b:69:a3:84:e0:4a:cb:09:a6:c9: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6E:E3:DA:A8:97:06:81:2D:D5:32:A6:DC:3F:CB:8D:1F:D0:83:E4 X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7e:e8:39:ce:9c:1c:14:7a:9e:c4:d7:87:19:60:bf:7b:6a: 86:89:bf:08:52:32:59:ae:93:99:fb:d2:f3:14:f0:1e:9a:dd: 3c:92:87:6f:d3:77:6e:6e:38:a9:1b:c0:04:f3:d6:68:74:98: 91:47:d4:95:20:09:50:a5:53:98:c2:44:e7:f1:6d:af:30:45: 2e:43:0e:61:17:26:fd:da:ef:53:c9:74:af:79:99:95:a0:e2: cf:b3:4b:dd:8b:7c:23:98:22:d6:9f:01:52:f3:0e:33:77:b9: 2b:41:21:03:36:a1:57:0d:06:a7:32:13:e0:fd:b6:02:f4:25: a8:80:99:7f:bc:16:ff:7a:65:32:98:ba:52:ba:e0:b6:3d:cf: c9:72:12:d3:70:69:48:12:54:62:22:e4:56:44:1f:02:66:6c: d5:7a:49:97:36:7d:37:5b:24:5e:2d:bd:7e:59:7d:c9:50:ba: 61:6b:e7:b7:eb:64:1d:26:37:70:56:95:a8:3d:60:35:46:3a: 34:59:de:a9:d7:9e:fd:c2:d4:a1:ea:21:c5:08:c4:18:2e:61: ea:35:6e:5b:7c:e1:d2:cf:8c:4e:ce:5a:04:ea:3b:9b:61:39: 99:0e:0e:ba:2f:d7:29:cd:d4:47:2c:66:62:c1:13:3f:69:05: 9e:69:03:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjQxMTIwMTkwNjEyWhcNMjQxMTI3MTkwNjEyWjAYMRYwFAYD VQQDEw02NzNlMzMyNC1iM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyX26gGpEhL3Gm2tZ9VdonrgpcMtdPOcgWRtgkPPzHlGYDU2hud5/sRs9GE5 TguSwbcPk3pe6MRNJL100COXuLTX3d9MBEhDRt4nAP33h5EuZio6J/xkZCpyrIbO 48gGBO5OfqqmI6S6YauOqmNTxnzmZlQ5s/P/F8SGNmyWiVcq4fHBsrj0y4jOmMAX +HS93HqTsaCk08GZml8CRcEIC6jmpdzv5QL01h82uNrfaDtHDXKWEaTPk//Bn+ff n/svRg2csax13eyINhTn/eSf9eXrC7sPPvkYju3aPl3yA+KTOWqhzVGsoWvny3IS lRwZyeCldDtpo4TgSssJpsnlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdu49qo lwaBLdUyptw/y40f0IPkMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByfug5zpwcFHqexNeHGWC/e2qGib8IUjJZrpOZ+9LzFPAemt08kodv 03dubjipG8AE89ZodJiRR9SVIAlQpVOYwkTn8W2vMEUuQw5hFyb92u9TyXSveZmV oOLPs0vdi3wjmCLWnwFS8w4zd7krQSEDNqFXDQanMhPg/bYC9CWogJl/vBb/emUy mLpSuuC2Pc/JchLTcGlIElRiIuRWRB8CZmzVekmXNn03WyReLb1+WX3JULpha+e3 62QdJjdwVpWoPWA1Rjo0Wd6p1579wtSh6iHFCMQYLmHqNW5bfOHSz4xOzloE6jub YTmZDg66L9cpzdRHLGZiwRM/aQWeaQNl -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org