$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: ZkARKU1nE168IQXgyXWZV4RbRXM1pau6f7k1iPNrshU= Subject key identifier: 1C:70:A3:26:F8:2C:A6:59:5E:B4:BD:17:C0:73:99:7E:AE:31:91:23 Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: 1F Signing time: Thu 21 Nov 2024 05:55:10 +0000 Manifest this update: Thu 21 Nov 2024 05:55:10 +0000 Manifest next update: Thu 28 Nov 2024 05:55:10 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: snC9W7hAr1F90lDPBWx9Qt88z+ctX+OevFM6FJUPufE=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: aGiRG+xUGgWwAx/G6pVvTX9ourgHUuGhOXJQLlTyA9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Nov 21 05:55:10 2024 GMT Not After : Nov 28 05:55:10 2024 GMT Subject: CN=673ecb3e-b7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:6d:bb:75:59:79:1d:8e:1b:9c:b1:70:16: 9b:fd:8e:be:e4:33:1d:86:6e:a0:95:b7:4c:8f:47: fa:0b:be:71:dd:03:aa:ea:88:8f:14:ce:db:72:55: bd:31:94:1a:66:1a:ad:e7:97:84:2d:c8:3e:80:d0: ac:e0:0d:70:e9:09:f4:bf:4b:44:f3:72:3f:b1:4b: ed:ba:de:50:23:76:b7:19:a4:3f:61:f9:ff:2a:9c: da:d8:81:3b:4d:da:46:c9:90:ee:3d:b9:5c:a8:60: 30:f4:67:3f:36:70:c8:af:80:90:c3:ba:e6:0c:7a: 82:64:45:07:88:6f:ce:d6:4b:16:18:45:55:c9:99: 1a:5c:ff:b7:8f:45:a9:7b:2c:11:af:21:e6:6f:0f: d9:1d:ad:f0:19:c6:cf:d2:6c:a8:ab:2e:d5:3c:82: f1:e6:5d:94:cc:58:e4:8e:16:ff:47:e8:b3:2e:84: 36:f5:ca:a9:fb:ed:cc:93:43:b8:06:7e:24:53:dd: e6:6e:43:81:73:a3:f4:50:0f:d3:fc:0c:e8:1d:10: 5e:40:6f:9a:d7:7d:5d:e0:20:d4:a4:c2:c4:31:24: ce:90:73:41:eb:5b:6e:2c:3d:c7:9f:1a:9b:b8:d6: 7b:a0:26:8b:c5:28:3e:50:18:b7:50:1a:76:8c:44: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:A3:26:F8:2C:A6:59:5E:B4:BD:17:C0:73:99:7E:AE:31:91:23 X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:45:93:51:65:96:7e:90:28:4f:a6:f7:9e:03:2d:0c:07: c9:f3:0b:f1:d9:bc:8b:3f:3d:6d:50:49:71:ac:a4:f7:c5:35: 31:8b:d9:c8:7c:de:bb:dc:c0:29:8e:59:36:79:ef:e0:57:d0: 87:d7:21:9e:f7:12:1d:7c:d6:9b:8d:e3:87:fc:10:d7:26:84: b5:6c:c4:c3:e2:98:aa:52:a3:97:84:c9:38:50:a7:47:4b:76: 2a:f2:ec:7e:b4:93:bc:51:eb:ae:63:e3:c4:f8:15:44:75:d3: 30:a8:2c:d7:2f:9f:71:28:83:7c:32:17:55:0d:5b:e7:f3:41: 46:58:47:41:10:95:1c:f3:2f:65:ae:2e:3a:af:6f:61:fe:34: ea:05:42:e4:25:d9:44:62:1a:43:8d:77:fb:03:2a:15:a5:b2: ee:9b:a2:f2:8d:13:a1:36:20:75:7a:73:5b:6a:76:6a:8d:1f: 48:8f:e6:7e:7c:89:b4:c7:f4:48:f1:f5:58:b3:9c:e9:11:19: 82:9c:52:6d:2e:d2:01:7d:1e:6c:47:3f:74:a5:72:22:9c:77: c9:ae:5f:eb:e6:5f:73:34:75:e0:de:11:e8:f4:70:35:74:f4: e8:c1:ae:1c:bb:29:9f:68:1b:f8:97:30:5e:b3:20:93:eb:22: 0e:2b:7e:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU0RTExMC8GA1UEBRMoQzcyMDAyNzY3QTEwRUMyRkYxNDUxNUEyQUFCODZFNjE0 MDk3QTc1QzAeFw0yNDExMjEwNTU1MTBaFw0yNDExMjgwNTU1MTBaMBgxFjAUBgNV BAMTDTY3M2VjYjNlLWI3ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXeW27dVl5HY4bnLFwFpv9jr7kMx2GbqCVt0yPR/oLvnHdA6rqiI8UzttyVb0x lBpmGq3nl4QtyD6A0KzgDXDpCfS/S0Tzcj+xS+263lAjdrcZpD9h+f8qnNrYgTtN 2kbJkO49uVyoYDD0Zz82cMivgJDDuuYMeoJkRQeIb87WSxYYRVXJmRpc/7ePRal7 LBGvIeZvD9kdrfAZxs/SbKirLtU8gvHmXZTMWOSOFv9H6LMuhDb1yqn77cyTQ7gG fiRT3eZuQ4Fzo/RQD9P8DOgdEF5Ab5rXfV3gINSkwsQxJM6Qc0HrW24sPcefGpu4 1nugJovFKD5QGLdQGnaMRDE5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHHCjJvgs plletL0XwHOZfq4xkSMwHwYDVR0jBBgwFoAUxyACdnoQ7C/xRRWiqrhuYUCXp1ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTRFL0QxNjVFNEEyN0JF MzExRUY4OEQ5Qzc1M0M0RjlBRTAyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveHlBQ2Rub1E3Q194UlJXaXFyaHVZVUNYcDF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTRFL0QxNjVFNEEyN0JFMzExRUY4OEQ5Qzc1M0M0RjlBRTAyL3h5QUNkbm9RN0Nf eFJSV2lxcmh1WVVDWHAxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzpRZNRZZZ+kChPpveeAy0MB8nzC/HZvIs/PW1QSXGspPfFNTGL2ch8 3rvcwCmOWTZ57+BX0IfXIZ73Eh181puN44f8ENcmhLVsxMPimKpSo5eEyThQp0dL diry7H60k7xR665j48T4FUR10zCoLNcvn3Eog3wyF1UNW+fzQUZYR0EQlRzzL2Wu Ljqvb2H+NOoFQuQl2URiGkONd/sDKhWlsu6bovKNE6E2IHV6c1tqdmqNH0iP5n58 ibTH9Ejx9ViznOkRGYKcUm0u0gF9HmxHP3SlciKcd8muX+vmX3M0deDeEej0cDV0 9OjBrhy7KZ9oG/iXMF6zIJPrIg4rfv0= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org