$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: kxZhh7bLOnUpSxcOBoNdoDIKzAKwevQjUybdVGntnHo= Subject key identifier: 46:08:5F:F1:B5:41:EA:B3:12:88:C5:9E:AF:11:FB:43:02:35:7A:14 Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 0170 Signing time: Sat 23 Nov 2024 02:14:37 +0000 Manifest this update: Sat 23 Nov 2024 02:14:36 +0000 Manifest next update: Sat 30 Nov 2024 02:14:36 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: L6NLrrI+xj+F+SwMYeNhFFxBH9ksQUm6xvoR1RtgnYQ=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: D+ZBoH/kxvwl0yhSEiA/JuHXr30WdbcxwTdZ2gIxI9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: Nov 23 02:14:36 2024 GMT Not After : Nov 30 02:14:36 2024 GMT Subject: CN=67413a8d-0564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:e0:82:99:e7:4e:de:a2:e6:61:3f:3a:ca: 2e:10:18:a2:90:06:0a:9c:44:27:83:26:6c:01:45: 6b:ed:57:6b:8b:8b:07:28:fd:c8:48:b1:0e:47:c3: b5:73:b9:7b:c8:57:dd:8e:d5:07:44:89:cc:8c:20: f1:df:a9:2c:e5:64:64:a9:5b:bc:78:17:e5:82:42: 17:8b:6d:c7:ca:2c:1d:aa:b3:de:b5:0f:5b:c6:1a: e9:06:cf:81:d5:43:7f:0b:bb:9f:3a:66:0c:13:b4: b8:f2:92:30:c5:51:f4:43:c0:5b:26:61:af:8d:d8: 45:66:5a:7a:07:f2:23:dd:53:01:9c:6f:d4:34:15: f6:50:71:98:9f:ac:ba:65:1d:65:76:de:73:43:06: 35:e4:c7:1d:7c:84:d1:18:5c:cf:94:46:ab:83:84: a6:c0:8f:53:b3:f6:0a:80:01:81:90:e0:20:3c:40: 92:55:62:a4:6f:d6:e1:f4:68:7f:91:63:a5:1f:0c: 5e:74:77:06:ad:eb:4d:13:6b:e3:53:ad:2d:7e:2b: 5e:8c:b3:30:94:84:d1:00:39:ee:fc:5b:d3:17:73: 83:96:d7:3d:d9:f6:4a:e6:0d:f6:e3:00:a1:b3:b8: 40:d3:a5:d0:14:8c:d5:05:5e:07:7d:1e:3e:37:f5: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:5F:F1:B5:41:EA:B3:12:88:C5:9E:AF:11:FB:43:02:35:7A:14 X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:df:a4:00:e2:75:f4:01:cd:d5:2a:09:3e:fb:01:47:17:3d: 87:5d:31:9d:fa:ab:7c:0c:ae:83:28:4c:f9:b2:c4:5f:fd:22: c0:3c:a7:e9:f5:4b:26:42:26:fa:8e:7d:73:58:86:a4:e6:0c: 25:41:71:ba:1b:e2:e5:25:f5:00:d4:28:8a:1a:a0:67:6d:a8: 75:02:c5:93:b4:eb:d5:21:d1:b4:c0:64:bb:2b:9a:ec:b1:be: 30:05:c3:4b:ba:ed:7b:d3:b9:13:00:5a:f2:00:35:f7:6a:ea: 95:28:d4:ab:c0:00:05:46:c2:ad:7c:af:ce:8a:06:3f:48:6e: e8:d6:51:28:db:96:6f:22:e6:1d:be:10:27:34:38:6f:13:68: 18:36:68:4f:22:46:34:c4:65:13:ce:98:61:d6:24:02:24:ff: 01:10:78:a3:30:9a:85:bb:54:fb:07:15:3b:7e:0e:21:f4:b4: 45:ce:87:d0:21:ba:6b:0f:95:a0:ca:71:e1:cf:d9:14:6c:37: 35:f6:90:b1:a9:70:02:5a:2f:a0:2e:f7:64:67:ef:72:f4:5b: e6:82:21:ec:f8:5b:87:14:91:9a:32:fe:80:a9:18:4f:48:ac: cf:15:b8:65:57:cf:9b:f6:f7:7b:6f:34:06:1c:48:a2:23:25: 04:92:9f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjQxMTIzMDIxNDM2WhcNMjQxMTMwMDIxNDM2WjAYMRYwFAYD VQQDEw02NzQxM2E4ZC0wNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgrggpnnTt6i5mE/OsouEBiikAYKnEQngyZsAUVr7Vdri4sHKP3ISLEOR8O1 c7l7yFfdjtUHRInMjCDx36ks5WRkqVu8eBflgkIXi23HyiwdqrPetQ9bxhrpBs+B 1UN/C7ufOmYME7S48pIwxVH0Q8BbJmGvjdhFZlp6B/Ij3VMBnG/UNBX2UHGYn6y6 ZR1ldt5zQwY15McdfITRGFzPlEarg4SmwI9Ts/YKgAGBkOAgPECSVWKkb9bh9Gh/ kWOlHwxedHcGretNE2vjU60tfitejLMwlITRADnu/FvTF3ODltc92fZK5g324wCh s7hA06XQFIzVBV4HfR4+N/UMGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYIX/G1 QeqzEojFnq8R+0MCNXoUMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV36QA4nX0Ac3VKgk++wFHFz2HXTGd+qt8DK6DKEz5ssRf/SLAPKfp 9UsmQib6jn1zWIak5gwlQXG6G+LlJfUA1CiKGqBnbah1AsWTtOvVIdG0wGS7K5rs sb4wBcNLuu1707kTAFryADX3auqVKNSrwAAFRsKtfK/OigY/SG7o1lEo25ZvIuYd vhAnNDhvE2gYNmhPIkY0xGUTzphh1iQCJP8BEHijMJqFu1T7BxU7fg4h9LRFzofQ IbprD5WgynHhz9kUbDc19pCxqXACWi+gLvdkZ+9y9FvmgiHs+FuHFJGaMv6AqRhP SKzPFbhlV8+b9vd7bzQGHEiiIyUEkp8O -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org