$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: LRsMWecxMEAg4uvxZPN/I+qnVoVSmp/DejanwLMFZEM= Subject key identifier: 9F:AC:26:87:36:14:D3:8B:56:DC:44:8E:AC:22:E0:90:57:42:34:FE Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 0163 Signing time: Sat 23 Nov 2024 02:19:36 +0000 Manifest this update: Sat 23 Nov 2024 02:19:36 +0000 Manifest next update: Sat 30 Nov 2024 02:19:36 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: +bLv/BJqStyihCewo2Z/LeoV53hgc2zK4UjGY9xmC/k=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: fk3GNutu1Xl8jf9hzH4EWHosYGuy+JY1n5pgsTabR1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Nov 23 02:19:36 2024 GMT Not After : Nov 30 02:19:36 2024 GMT Subject: CN=67413bb8-0b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1d:4c:88:51:f7:ae:f0:67:56:91:92:47:d4: 34:d2:07:41:38:b5:c3:d2:7c:a6:37:24:8d:ac:fa: db:87:f2:7b:4f:7f:b2:80:f5:ec:a2:b3:3d:1c:be: 6c:da:8e:0d:da:84:b7:98:e3:42:ad:75:a9:a1:e4: 1a:23:c5:eb:aa:e2:7f:c7:96:6f:d0:1a:53:32:02: f3:a5:5b:c0:5f:3b:c2:14:74:36:2e:a2:13:25:15: de:4d:db:41:d9:dc:fa:9d:6e:e4:76:1c:03:e4:99: 3b:87:d2:f9:9a:16:66:30:d7:2d:93:ba:0f:e4:bf: d0:c5:a8:6c:3e:d6:78:ff:d4:e6:1c:e9:d6:b5:a4: dd:d6:8d:98:45:8b:4c:d7:a9:af:08:19:f5:03:cd: 25:f9:d1:79:30:75:22:91:c7:21:8d:31:32:d2:21: 06:24:3b:76:88:1b:bf:60:93:43:fa:9a:7d:f7:9a: c1:e3:8e:bc:44:d9:92:13:89:82:b0:3b:18:98:c3: 2a:ac:19:31:5b:79:6d:65:3d:5d:00:82:eb:32:e3: 18:b5:56:63:63:bd:ab:a9:fd:ed:c8:a6:eb:2a:30: b3:3a:8e:45:22:98:5b:c6:7f:bc:12:3e:14:4a:67: 84:61:79:8d:87:38:27:20:d3:ad:f1:f4:c4:9a:48: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AC:26:87:36:14:D3:8B:56:DC:44:8E:AC:22:E0:90:57:42:34:FE X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e2:40:da:38:1d:8e:fe:f1:22:11:9a:0b:c8:ab:27:1c:89: 77:95:f9:c1:69:69:60:36:64:85:7e:6a:f3:a0:dd:62:f6:21: 5b:c3:1e:93:c2:82:66:9e:ac:31:cc:ea:f0:65:c0:3d:fa:7c: 0e:07:47:cd:e6:ed:db:c0:0b:c3:60:23:89:c5:76:95:03:e0: d6:57:37:c1:2d:cb:cc:7f:c0:7d:b5:67:5a:f1:7b:8e:bb:7e: 61:fc:dd:35:c8:f6:cb:37:a6:a0:c8:61:4a:1b:e7:9e:a4:a2: f4:f6:dc:ad:cf:f7:cb:54:46:04:13:2b:83:aa:d6:8d:da:cd: de:ed:dc:92:3d:d9:54:55:7e:a1:a2:17:a3:ea:15:99:d6:46: d1:13:b7:8b:98:91:b3:01:78:6e:bc:a4:55:46:6e:b1:76:c5: a9:93:a9:87:54:1d:9a:cd:8a:39:59:ee:4a:7c:9e:2e:2d:63: 0f:7c:d0:63:ed:1a:37:70:86:3e:67:09:e3:e4:89:39:ca:b8: d5:48:20:87:7a:b4:15:df:0e:69:3f:93:ac:40:12:7b:60:24: 9e:14:fe:09:76:5b:7a:cd:82:67:1b:d2:11:21:3f:59:ac:c3: 25:7f:99:30:4c:35:19:e1:13:b1:f0:89:e9:47:2b:d6:4c:f9: 6d:bc:e8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjQxMTIzMDIxOTM2WhcNMjQxMTMwMDIxOTM2WjAYMRYwFAYD VQQDEw02NzQxM2JiOC0wYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR1MiFH3rvBnVpGSR9Q00gdBOLXD0nymNySNrPrbh/J7T3+ygPXsorM9HL5s 2o4N2oS3mONCrXWpoeQaI8XrquJ/x5Zv0BpTMgLzpVvAXzvCFHQ2LqITJRXeTdtB 2dz6nW7kdhwD5Jk7h9L5mhZmMNctk7oP5L/QxahsPtZ4/9TmHOnWtaTd1o2YRYtM 16mvCBn1A80l+dF5MHUikcchjTEy0iEGJDt2iBu/YJND+pp995rB4468RNmSE4mC sDsYmMMqrBkxW3ltZT1dAILrMuMYtVZjY72rqf3tyKbrKjCzOo5FIphbxn+8Ej4U SmeEYXmNhzgnINOt8fTEmkiM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+sJoc2 FNOLVtxEjqwi4JBXQjT+MB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG4kDaOB2O/vEiEZoLyKsnHIl3lfnBaWlgNmSFfmrzoN1i9iFbwx6T woJmnqwxzOrwZcA9+nwOB0fN5u3bwAvDYCOJxXaVA+DWVzfBLcvMf8B9tWda8XuO u35h/N01yPbLN6agyGFKG+eepKL09tytz/fLVEYEEyuDqtaN2s3e7dySPdlUVX6h ohej6hWZ1kbRE7eLmJGzAXhuvKRVRm6xdsWpk6mHVB2azYo5We5KfJ4uLWMPfNBj 7Ro3cIY+Zwnj5Ik5yrjVSCCHerQV3w5pP5OsQBJ7YCSeFP4Jdlt6zYJnG9IRIT9Z rMMlf5kwTDUZ4ROx8InpRyvWTPltvOh4 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org