$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: vHxxOsHPMw+8mj1boQhBvJY7QveB3snwCiOhiDYzkyI= Subject key identifier: F6:E0:D2:2D:DB:AC:AA:24:19:64:D4:EE:6A:69:24:A1:38:06:FD:F7 Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: 10 Signing time: Wed 23 Oct 2024 06:43:31 +0000 Manifest this update: Wed 23 Oct 2024 06:43:30 +0000 Manifest next update: Wed 30 Oct 2024 06:43:30 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: ttI08NmL6Dk4QOXNifE/mWmdcg5xSzGZ+ZTSZJ2ZPZY=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: aGiRG+xUGgWwAx/G6pVvTX9ourgHUuGhOXJQLlTyA9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Oct 23 06:43:30 2024 GMT Not After : Oct 30 06:43:30 2024 GMT Subject: CN=67189b13-f681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:d9:0d:26:39:2e:79:be:54:1b:76:c3:17: ec:37:87:03:e3:43:92:37:ad:da:55:ef:b3:18:c3: e1:22:4e:98:9e:1a:d9:9e:05:3b:51:1a:d1:70:c5: 5f:43:0d:c6:a8:dc:91:93:e9:fb:4e:1f:06:22:f3: 89:22:cf:ca:d9:90:7f:ad:74:92:1f:9e:cb:7d:fd: 49:36:13:de:5c:2d:22:dc:ee:7b:04:88:0a:dc:4b: 87:0d:be:9f:0e:73:21:aa:63:a6:13:f0:b8:5d:db: b8:71:be:5f:61:3f:07:09:1c:c4:a0:e8:e9:e0:1a: 12:6c:2c:81:ef:cb:d3:e8:63:63:d4:9a:21:66:0a: 1f:99:0d:75:12:27:00:c5:aa:5e:75:9d:49:f4:9e: 9b:41:05:2a:5b:ae:99:7a:32:37:de:99:31:1b:77: 79:a1:d7:94:42:c7:d5:e1:ed:6d:0f:85:5c:02:0e: 7f:4d:78:85:80:b4:dc:26:00:3c:97:5e:d2:25:03: d7:a2:39:53:02:ec:40:cf:94:e3:05:d1:58:0e:4d: ae:88:77:bf:40:65:06:2a:e9:a1:51:ac:f9:0b:7a: 7a:d8:56:b1:71:56:92:b7:9b:e5:5e:5f:1c:a0:85: dc:da:2c:bc:9a:e5:28:30:6b:03:b5:14:7d:ab:97: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E0:D2:2D:DB:AC:AA:24:19:64:D4:EE:6A:69:24:A1:38:06:FD:F7 X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:b7:1c:b7:09:21:d8:d4:b0:10:ed:fc:9b:67:41:ed:ee: 2c:b5:17:3e:32:15:f1:89:3b:bf:fa:c0:ed:e0:58:89:d6:7c: 6d:db:e9:08:dc:2a:c2:06:2a:67:cf:92:5d:85:dd:c6:e3:af: 37:24:7d:79:c5:e6:1b:3b:60:ac:c0:e0:ef:ca:d0:fb:67:3b: 66:f3:13:22:12:a6:38:78:8c:12:ef:b0:17:be:d7:da:5e:61: dd:f9:7d:8b:34:44:11:d5:5b:ad:18:d9:5c:23:05:b5:e3:3b: ce:76:90:cd:0d:e5:d0:47:91:cf:65:a0:f7:ba:5d:a3:de:a7: 43:f2:4d:24:db:4d:fa:dc:d6:44:8d:a6:96:7b:0c:8d:d2:1f: d4:7e:aa:3f:ed:b7:ca:8d:ff:be:20:e3:49:d2:1c:41:cd:28: 4a:8d:33:5c:b2:86:6b:43:20:1a:9d:29:01:c4:c4:b8:41:94: 6f:a8:71:6a:0f:12:a9:ca:f9:b6:64:54:9a:0a:82:2a:b1:7a: 4a:28:53:c7:ba:73:eb:bd:5e:fa:79:78:b8:17:25:8d:0d:6c: e2:a0:b5:7d:e8:69:5e:76:72:e9:d8:fa:16:b6:ad:d5:93:7e: 45:53:ec:ef:01:51:c1:1f:30:cf:cf:a7:0f:a8:12:5a:1f:9c: 9c:d5:29:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU0RTExMC8GA1UEBRMoQzcyMDAyNzY3QTEwRUMyRkYxNDUxNUEyQUFCODZFNjE0 MDk3QTc1QzAeFw0yNDEwMjMwNjQzMzBaFw0yNDEwMzAwNjQzMzBaMBgxFjAUBgNV BAMTDTY3MTg5YjEzLWY2ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuFtkNJjkueb5UG3bDF+w3hwPjQ5I3rdpV77MYw+EiTpieGtmeBTtRGtFwxV9D Dcao3JGT6ftOHwYi84kiz8rZkH+tdJIfnst9/Uk2E95cLSLc7nsEiArcS4cNvp8O cyGqY6YT8Lhd27hxvl9hPwcJHMSg6OngGhJsLIHvy9PoY2PUmiFmCh+ZDXUSJwDF ql51nUn0nptBBSpbrpl6MjfemTEbd3mh15RCx9Xh7W0PhVwCDn9NeIWAtNwmADyX XtIlA9eiOVMC7EDPlOMF0VgOTa6Id79AZQYq6aFRrPkLenrYVrFxVpK3m+VeXxyg hdzaLLya5SgwawO1FH2rl3W/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9uDSLdus qiQZZNTuamkkoTgG/fcwHwYDVR0jBBgwFoAUxyACdnoQ7C/xRRWiqrhuYUCXp1ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTRFL0QxNjVFNEEyN0JF MzExRUY4OEQ5Qzc1M0M0RjlBRTAyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveHlBQ2Rub1E3Q194UlJXaXFyaHVZVUNYcDF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTRFL0QxNjVFNEEyN0JFMzExRUY4OEQ5Qzc1M0M0RjlBRTAyL3h5QUNkbm9RN0Nf eFJSV2lxcmh1WVVDWHAxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG25txy3CSHY1LAQ7fybZ0Ht7iy1Fz4yFfGJO7/6wO3gWInWfG3b6Qjc KsIGKmfPkl2F3cbjrzckfXnF5hs7YKzA4O/K0PtnO2bzEyISpjh4jBLvsBe+19pe Yd35fYs0RBHVW60Y2VwjBbXjO852kM0N5dBHkc9loPe6XaPep0PyTSTbTfrc1kSN ppZ7DI3SH9R+qj/tt8qN/74g40nSHEHNKEqNM1yyhmtDIBqdKQHExLhBlG+ocWoP EqnK+bZkVJoKgiqxekooU8e6c+u9Xvp5eLgXJY0NbOKgtX3oaV52cunY+ha2rdWT fkVT7O8BUcEfMM/Ppw+oElofnJzVKWE= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org