$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: 43DwC3YTuO4/qAJDfhrY5FegV9u8vTSOIfySNlfFT4s= Subject key identifier: AB:91:C7:74:10:52:35:06:E2:77:0B:A0:01:3F:AE:55:3F:91:07:5E Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0A81 Signing time: Fri 22 Nov 2024 19:23:07 +0000 Manifest this update: Fri 22 Nov 2024 19:23:06 +0000 Manifest next update: Fri 29 Nov 2024 19:23:06 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: N77htTxbFMdWb6QmOl573xRhG+LGEyZzUAGVnpQk49Y=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: hxpdqiJcuo669SSUUPg0Lc1pfzm9vN1gIm7p4lkjs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: Nov 22 19:23:06 2024 GMT Not After : Nov 29 19:23:06 2024 GMT Subject: CN=6740da1b-4ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:42:0a:2d:b0:c2:99:d9:4f:85:58:53:f4: 1c:cc:7e:60:30:6e:89:ef:f1:73:4a:16:f1:60:f7: 22:0f:b0:b4:bb:f6:06:c2:ed:f6:a2:f7:da:51:0a: 12:c1:fa:e3:7f:a4:5b:5a:f6:fc:88:af:d8:34:35: e7:41:9d:52:90:c9:0a:10:ab:31:dd:c0:2d:9b:2c: fc:88:be:bf:03:a9:25:85:fa:3f:c5:c9:74:63:ec: 0a:81:7c:9c:90:99:aa:cc:6b:17:f9:de:0f:c2:da: 9c:b4:17:15:17:af:d2:56:0a:c1:73:fd:a4:bb:ac: ce:fe:fa:67:b4:9a:d4:cf:fc:af:be:7b:12:a4:34: 56:b0:84:fc:7f:d4:35:f8:c5:65:82:d3:37:e9:e6: 59:e7:f0:27:8b:c9:41:a1:e9:16:e0:5a:d9:d1:f9: b6:c4:1d:c0:a6:a8:2a:41:8d:58:e9:c5:0d:32:e6: 6c:c6:86:61:7e:5e:5d:4d:a0:a3:9f:7f:32:16:1e: 0c:6c:54:66:da:70:9c:44:01:a9:e9:40:ab:e8:09: a0:95:3d:67:d4:d7:e7:d4:08:07:73:ae:30:d7:af: 13:6a:5d:45:d9:db:b8:0f:96:f7:ad:17:86:be:1d: 7c:19:4c:2a:09:20:da:ef:28:a7:1b:fc:64:91:d6: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:C7:74:10:52:35:06:E2:77:0B:A0:01:3F:AE:55:3F:91:07:5E X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:38:6b:0b:07:fb:5a:2b:dd:49:78:21:45:a5:68:2a:e8:25: 5b:b6:b1:7f:d9:82:d2:c7:3d:63:80:df:77:ea:57:f1:bc:01: a7:4c:78:6c:1f:01:9d:a2:62:f8:14:7e:66:38:4b:51:68:a6: 0f:30:de:47:50:e6:1b:ee:7e:b8:f9:4c:14:52:ea:15:55:7d: 92:20:72:fe:e9:91:88:17:c5:e4:ae:1f:0d:03:91:4b:0d:6a: 50:e1:99:72:b6:3d:b7:44:5e:0d:b6:43:66:76:01:1a:cb:aa: 23:83:b4:44:c6:6c:0e:31:f6:7d:71:cc:0e:b4:f1:f4:23:45: 62:18:22:d6:c7:e9:cb:5e:4b:f7:82:e7:2f:e2:2d:e4:89:20: ad:d3:d5:23:e4:1c:55:82:ee:10:a8:bf:ef:5c:a3:04:50:17: f5:50:45:73:4f:df:44:7a:00:f9:f6:31:2b:d0:d1:82:57:ae: 9d:a4:49:c3:9a:c3:34:8a:a5:08:70:ae:be:67:b1:83:37:d9: 6a:ab:0d:b9:a5:d5:12:1b:70:39:bb:5e:97:5d:54:92:95:51: 9b:93:fa:1b:74:cd:d8:5a:53:d7:31:a2:a7:8f:1c:d3:e2:7d: 2d:35:c1:18:df:5f:cf:3e:b4:19:94:11:16:47:85:42:b3:7d: 34:e1:5d:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjQxMTIyMTkyMzA2WhcNMjQxMTI5MTkyMzA2WjAYMRYwFAYD VQQDEw02NzQwZGExYi00YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYtCCi2wwpnZT4VYU/QczH5gMG6J7/FzShbxYPciD7C0u/YGwu32ovfaUQoS wfrjf6RbWvb8iK/YNDXnQZ1SkMkKEKsx3cAtmyz8iL6/A6klhfo/xcl0Y+wKgXyc kJmqzGsX+d4PwtqctBcVF6/SVgrBc/2ku6zO/vpntJrUz/yvvnsSpDRWsIT8f9Q1 +MVlgtM36eZZ5/Ani8lBoekW4FrZ0fm2xB3ApqgqQY1Y6cUNMuZsxoZhfl5dTaCj n38yFh4MbFRm2nCcRAGp6UCr6AmglT1n1Nfn1AgHc64w168Tal1F2du4D5b3rReG vh18GUwqCSDa7yinG/xkkdaKAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuRx3QQ UjUG4ncLoAE/rlU/kQdeMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJOGsLB/taK91JeCFFpWgq6CVbtrF/2YLSxz1jgN936lfxvAGnTHhs HwGdomL4FH5mOEtRaKYPMN5HUOYb7n64+UwUUuoVVX2SIHL+6ZGIF8Xkrh8NA5FL DWpQ4Zlytj23RF4NtkNmdgEay6ojg7RExmwOMfZ9ccwOtPH0I0ViGCLWx+nLXkv3 gucv4i3kiSCt09Uj5BxVgu4QqL/vXKMEUBf1UEVzT99EegD59jEr0NGCV66dpEnD msM0iqUIcK6+Z7GDN9lqqw25pdUSG3A5u16XXVSSlVGbk/obdM3YWlPXMaKnjxzT 4n0tNcEY31/PPrQZlBEWR4VCs3004V05 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org