$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: OKSdlLX+tKraj46A51uW03BpTaxjoBR3cTAkMU2ln1s= Subject key identifier: FA:91:7E:27:59:AC:68:66:EE:82:0C:12:B2:52:F3:51:E1:25:4B:D1 Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 10 Signing time: Wed 23 Oct 2024 06:43:40 +0000 Manifest this update: Wed 23 Oct 2024 06:43:39 +0000 Manifest next update: Wed 30 Oct 2024 06:43:39 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: 2XvrbpswjcaPpalar+qfnSIWoGiMxbrgj/kuEeIOVg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Oct 23 06:43:39 2024 GMT Not After : Oct 30 06:43:39 2024 GMT Subject: CN=67189b1c-1d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:0b:0b:42:3e:44:f4:fe:34:9b:9f:51:b4: 51:58:9f:57:f2:b5:44:8f:c5:df:26:dd:97:3b:80: 5f:64:d7:9f:97:4b:e3:21:1f:39:88:bc:ec:01:a6: bc:2f:4b:77:6f:a6:db:3b:e4:4c:a0:06:4c:90:52: 2f:40:1c:ff:a4:15:71:27:6e:48:92:c0:f4:2d:27: 9f:f0:80:a2:57:12:37:7e:e3:da:cf:28:4d:3c:73: f4:48:46:14:17:9c:4a:d8:ca:2b:d1:15:22:3b:78: b7:f7:c7:32:5b:c0:a5:18:61:fb:bf:bd:4e:58:01: 2f:96:e8:58:f1:f8:c6:bb:f7:3d:40:5c:2e:af:df: 75:bd:9e:76:bb:8d:b6:3e:b0:4f:90:f2:be:f6:d4: 4f:31:c0:75:e0:6c:1d:f9:ed:89:f7:c0:1a:47:32: 3d:97:17:b4:02:d1:2f:a3:ab:88:ac:aa:5b:e9:b7: 5e:67:2d:4c:ff:3a:c0:1c:fa:c1:45:0a:ba:fd:6d: 43:20:fa:6f:fb:07:71:ef:81:8d:53:22:06:7b:ff: 23:c6:e4:07:01:58:a9:e9:11:99:c0:66:49:2e:57: 7c:53:ed:ba:ce:00:b3:09:68:8f:f6:19:27:4c:60: 1f:e4:24:ed:ed:39:d3:cd:af:f4:c3:c7:ed:c3:2a: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:7E:27:59:AC:68:66:EE:82:0C:12:B2:52:F3:51:E1:25:4B:D1 X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:13:57:eb:35:ee:82:8d:a9:7d:59:59:f6:99:be:8e:bc:16: d5:57:67:5e:81:79:3e:28:5e:c5:c6:d8:78:ef:42:66:87:b7: 45:90:0f:66:4b:4e:82:87:a5:b6:21:88:49:06:45:3e:d7:05: da:37:bc:00:86:38:40:75:c3:ab:25:75:4a:5f:a4:9a:e1:1a: 5e:ce:ad:a4:60:3b:1c:e5:b9:7f:5e:e1:6b:06:aa:7a:f7:18: 2e:e4:39:6e:f7:9f:3b:88:2e:ea:3c:35:67:f1:1f:3d:7f:fe: cd:92:a7:15:24:a5:6d:3d:68:90:86:d9:12:bd:00:b9:32:0c: d5:20:ea:e6:60:2d:a4:d6:e5:56:9f:86:f7:cf:0d:d3:0e:2d: 38:7e:0e:28:b1:e9:76:b4:a4:7a:8b:f9:c8:10:ae:36:1d:2e: 23:8b:e4:15:a9:48:9f:c3:23:1a:ee:42:2b:61:90:3d:5e:ae: 64:5a:d8:7b:35:a9:14:07:e9:af:45:08:a4:e3:6c:44:51:15: a1:18:c6:52:79:86:f2:3e:ce:59:e7:2b:5e:da:19:8c:55:85: 20:87:78:64:55:23:eb:fc:c2:e1:03:32:2d:d7:04:7e:fb:c1: d2:2c:61:9f:ab:67:6c:41:d4:ae:d8:e2:c2:7e:a4:47:b8:aa: d5:e6:6c:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoNUU5NjBENTE4OEYwMzZGNzlFQUE3OTQxNTUyQ0NGNDZC ODdBQkYwNzAeFw0yNDEwMjMwNjQzMzlaFw0yNDEwMzAwNjQzMzlaMBgxFjAUBgNV BAMTDTY3MTg5YjFjLTFkMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9zAsLQj5E9P40m59RtFFYn1fytUSPxd8m3Zc7gF9k15+XS+MhHzmIvOwBprwv S3dvpts75EygBkyQUi9AHP+kFXEnbkiSwPQtJ5/wgKJXEjd+49rPKE08c/RIRhQX nErYyivRFSI7eLf3xzJbwKUYYfu/vU5YAS+W6Fjx+Ma79z1AXC6v33W9nna7jbY+ sE+Q8r721E8xwHXgbB357Yn3wBpHMj2XF7QC0S+jq4isqlvpt15nLUz/OsAc+sFF Crr9bUMg+m/7B3HvgY1TIgZ7/yPG5AcBWKnpEZnAZkkuV3xT7brOALMJaI/2GSdM YB/kJO3tOdPNr/TDx+3DKqCZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+pF+J1ms aGbuggwSslLzUeElS9EwHwYDVR0jBBgwFoAUXpYNUYjwNveeqnlBVSzPRrh6vwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0M4NUJBMTJDN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHBZTlVZandOdmVlcW5sQlZTelBScmg2dndjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0M4NUJBMTJDN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZl ZXFubEJWU3pQUnJoNnZ3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIATV+s17oKNqX1ZWfaZvo68FtVXZ16BeT4oXsXG2HjvQmaHt0WQD2ZL ToKHpbYhiEkGRT7XBdo3vACGOEB1w6sldUpfpJrhGl7OraRgOxzluX9e4WsGqnr3 GC7kOW73nzuILuo8NWfxHz1//s2SpxUkpW09aJCG2RK9ALkyDNUg6uZgLaTW5Vaf hvfPDdMOLTh+Diix6Xa0pHqL+cgQrjYdLiOL5BWpSJ/DIxruQithkD1ermRa2Hs1 qRQH6a9FCKTjbERRFaEYxlJ5hvI+zlnnK17aGYxVhSCHeGRVI+v8wuEDMi3XBH77 wdIsYZ+rZ2xB1K7Y4sJ+pEe4qtXmbOM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org