$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: q+YyjXX7Y36cPOEj+6+HVeyHe2tEzF+xPNbGlIwB0l0= Subject key identifier: 2A:C6:2D:CB:9A:7F:BD:1E:78:C2:D4:01:65:41:9D:38:9C:95:E2:02 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0C6E Signing time: Fri 22 Nov 2024 18:10:12 +0000 Manifest this update: Fri 22 Nov 2024 18:10:11 +0000 Manifest next update: Fri 29 Nov 2024 18:10:11 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: 0IV+rGFa7ne0iLCKkbd+kViTXOWXjoFO0okiyC9mEPc=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: wKDEdStmrZZfi1N+sozcMYpUpj9M6UZTKjL7qa1uJ/0=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: gaKPScXkAxsuY8VAZ/bdwS1+gAnXATdqGjlvtSNl84I=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU=) 5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: xeUpWNUNLA8fh/iFVd4DlW4QNuNEKTEttUxV7rOypic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Nov 22 18:10:11 2024 GMT Not After : Nov 29 18:10:11 2024 GMT Subject: CN=6740c904-c9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:33:eb:b0:8c:36:55:06:07:5a:03:26:86: ab:36:3a:3a:9f:ed:a7:23:58:f5:8b:61:a4:1f:a9: a8:70:d8:4e:00:fe:e5:22:da:ea:45:01:13:2d:8b: dd:4e:07:cd:3b:97:a0:30:f1:6d:51:ca:98:20:35: 83:00:78:16:d2:04:4e:cb:2d:0e:99:e9:3a:8a:6a: 6e:47:38:3e:6e:61:18:17:89:b8:de:30:ff:6f:0b: 5f:eb:a9:d0:8d:c6:f2:6f:03:d8:98:8d:d0:d1:02: 41:b3:18:a0:0c:28:e5:78:5b:a8:8c:38:a8:df:4d: be:81:bf:db:a6:fc:eb:74:fd:54:b0:10:b8:5f:eb: f4:6b:db:0a:6c:cc:38:19:b2:42:e3:c6:1a:1e:52: 28:08:69:ef:2e:fc:d1:26:9a:dd:42:1b:0d:a8:25: 59:57:68:92:58:84:27:e9:52:89:1e:23:1d:74:e6: 33:1f:0a:4c:b0:0a:61:40:8d:d4:80:76:1f:40:d2: 85:ee:be:8e:a8:82:fc:65:f3:ff:5d:35:ec:13:95: 68:f3:fd:f0:d4:dc:33:47:c3:c0:4a:d2:dd:78:88: 67:74:5e:73:cb:5c:ce:1e:ae:57:74:4d:88:d2:04: 93:5c:70:11:79:3f:bf:f2:36:ef:64:56:7e:ec:db: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:2D:CB:9A:7F:BD:1E:78:C2:D4:01:65:41:9D:38:9C:95:E2:02 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d9:91:ea:a5:bd:f9:6a:3b:b4:53:04:2f:70:27:e5:54:d4: 41:e1:2b:a3:83:84:6f:23:0c:6c:f3:5a:71:31:0f:50:06:5a: d8:9d:57:ce:d5:5c:04:65:e3:18:7b:c0:73:61:31:9b:f9:f5: 70:9f:bd:ab:8a:04:53:b3:6c:68:8a:4c:13:2d:3c:90:b3:36: 3a:a3:8a:59:6a:b3:e1:83:01:c0:34:cf:20:19:dd:4b:51:06: 4e:9b:b9:93:ae:ef:b2:b3:38:ff:16:77:05:47:56:ea:a4:9b: 72:38:45:c5:93:9c:67:aa:79:51:b4:ee:0b:04:c9:1e:51:03: 5b:23:4d:3d:f7:08:fd:27:3d:51:a3:9a:95:e1:0a:d9:be:59: 4d:b1:77:43:db:f5:0a:32:5d:8d:a0:bc:b0:56:b0:22:ea:78: ec:24:b6:50:d0:72:72:80:37:dd:3f:da:f8:fb:13:8a:af:7d: 53:08:9a:7a:b0:e5:51:6b:a9:c2:8c:0c:de:59:5d:4c:25:69: b1:4f:db:01:90:e5:5e:51:db:70:ba:3f:7b:3b:ed:43:87:b7: ad:fe:32:8d:60:68:2a:dd:76:0a:03:a8:92:28:b3:c6:f2:71: ca:2e:57:2e:f6:78:04:c9:b2:98:fe:af:41:7e:09:55:64:20: d2:8e:d8:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjQxMTIyMTgxMDExWhcNMjQxMTI5MTgxMDExWjAYMRYwFAYD VQQDEw02NzQwYzkwNC1jOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Zwz67CMNlUGB1oDJoarNjo6n+2nI1j1i2GkH6mocNhOAP7lItrqRQETLYvd TgfNO5egMPFtUcqYIDWDAHgW0gROyy0Omek6impuRzg+bmEYF4m43jD/bwtf66nQ jcbybwPYmI3Q0QJBsxigDCjleFuojDio302+gb/bpvzrdP1UsBC4X+v0a9sKbMw4 GbJC48YaHlIoCGnvLvzRJprdQhsNqCVZV2iSWIQn6VKJHiMddOYzHwpMsAphQI3U gHYfQNKF7r6OqIL8ZfP/XTXsE5Vo8/3w1NwzR8PAStLdeIhndF5zy1zOHq5XdE2I 0gSTXHAReT+/8jbvZFZ+7NtP5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrGLcua f70eeMLUAWVBnTicleICMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA82ZHqpb35aju0UwQvcCflVNRB4Sujg4RvIwxs81pxMQ9QBlrYnVfO 1VwEZeMYe8BzYTGb+fVwn72rigRTs2xoikwTLTyQszY6o4pZarPhgwHANM8gGd1L UQZOm7mTru+yszj/FncFR1bqpJtyOEXFk5xnqnlRtO4LBMkeUQNbI0099wj9Jz1R o5qV4QrZvllNsXdD2/UKMl2NoLywVrAi6njsJLZQ0HJygDfdP9r4+xOKr31TCJp6 sOVRa6nCjAzeWV1MJWmxT9sBkOVeUdtwuj97O+1Dh7et/jKNYGgq3XYKA6iSKLPG 8nHKLlcu9ngEybKY/q9BfglVZCDSjtiq -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org