$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: Uk4fFQ9IVIYIdGOwAb3uUXrwr4whCO2Los0y2AiaPww= Subject key identifier: A9:55:05:EA:D7:4D:06:63:73:F6:E9:11:0D:24:20:48:1C:6A:EA:9D Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 0D Signing time: Sat 23 Nov 2024 06:04:43 +0000 Manifest this update: Sat 23 Nov 2024 06:04:43 +0000 Manifest next update: Sat 30 Nov 2024 06:04:42 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: V+K+udWUmXz8Jvxe9EbL5iTW6xNfavDcVBJwhjoe0ew=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: G7IWl5XTyAgfWE48sRsXaPS6r+SeXaYM6TeXGgT/8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Nov 23 06:04:43 2024 GMT Not After : Nov 30 06:04:42 2024 GMT Subject: CN=6741707b-12d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:7a:4c:57:7d:75:b8:5f:3d:b6:d1:50:17: 4f:30:93:45:32:f8:35:94:e6:0b:80:53:e5:c5:5e: 51:f4:97:68:69:af:ed:cf:3a:05:a0:60:01:f5:9a: 6d:a4:a4:d7:36:94:9b:66:29:1f:87:7e:5b:c7:2c: 7c:44:f2:32:b7:4a:2e:bb:4b:91:fb:a9:1a:78:7d: d7:24:5f:71:e9:0d:fe:f3:fe:54:6e:33:03:06:73: 5b:60:cc:b7:de:c4:95:98:a4:a7:76:30:af:03:fa: de:e0:11:8d:f1:12:95:6d:fa:7c:3d:cc:51:da:96: fe:34:af:31:73:04:50:19:02:f9:58:94:c8:07:26: 59:09:31:ea:0d:20:8a:99:07:c4:85:4c:d9:76:c5: 23:5f:d5:a9:99:56:26:8e:cf:57:57:5e:f5:34:6d: 23:12:72:9a:31:bc:21:35:ce:00:7e:33:05:fd:42: 49:3d:6e:ee:0f:87:ac:cc:fb:a5:e3:e4:80:48:73: 71:41:b6:91:ee:75:79:29:6f:0b:bb:8d:d1:f9:b6: b8:73:ee:4f:94:fc:59:53:50:60:56:96:42:ba:de: 8c:31:3d:49:a8:8d:e8:d5:92:a4:c1:cd:7d:04:0f: 0e:43:a2:32:57:4c:5e:6a:db:c6:8e:15:11:94:27: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:55:05:EA:D7:4D:06:63:73:F6:E9:11:0D:24:20:48:1C:6A:EA:9D X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0a:49:1d:a0:7c:f9:c5:cc:92:74:c9:42:f1:8c:e7:d6:91: c4:52:1b:21:76:38:bd:83:74:6b:ec:50:e1:2d:0d:cb:b1:09: 6f:e1:37:79:17:f6:fe:4f:5c:8c:66:61:07:bd:8a:97:d9:3b: e3:46:c7:c1:99:cf:71:4f:d7:d4:6a:fc:7c:a8:62:4d:de:a5: e8:30:ec:20:48:4d:8a:46:e7:c9:ab:21:ff:42:86:7c:d3:d3: 96:8c:e1:62:5a:2f:63:fc:b3:0f:ad:42:68:15:a1:39:52:40: 6f:50:cd:90:49:24:9c:f5:43:b4:91:64:cc:5f:dd:81:2d:c0: dc:8e:21:c0:44:38:e7:52:c0:83:24:4b:ce:98:50:62:9f:bd: 2a:1d:3c:3c:6d:90:9f:9f:97:c5:9e:79:fb:2f:0f:f6:3a:93: a9:d9:94:f0:f9:0a:f9:ea:b8:c4:37:8a:b5:f1:fd:f2:26:ae: 70:61:ab:65:c0:82:08:f5:31:4d:dc:13:10:93:de:d8:41:ab: 41:2f:7f:13:a2:fe:7b:1f:5d:b3:c4:92:d2:cf:57:6e:31:3c: c6:e9:a9:82:9e:71:da:14:dd:7f:0f:9f:b9:ea:18:c5:bd:5a: 94:b5:c4:fe:54:18:44:49:40:c7:fd:40:e5:f8:44:4c:96:b1: c9:dd:2a:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTAyNTExMC8GA1UEBRMoNUYwMDRENTdFQjM2RjQyNjcyRTY2RjMwMDVGNjQ2OUI2 Mjg5MTcxQjAeFw0yNDExMjMwNjA0NDNaFw0yNDExMzAwNjA0NDJaMBgxFjAUBgNV BAMTDTY3NDE3MDdiLTEyZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxFHpMV311uF89ttFQF08wk0Uy+DWU5guAU+XFXlH0l2hpr+3POgWgYAH1mm2k pNc2lJtmKR+HflvHLHxE8jK3Si67S5H7qRp4fdckX3HpDf7z/lRuMwMGc1tgzLfe xJWYpKd2MK8D+t7gEY3xEpVt+nw9zFHalv40rzFzBFAZAvlYlMgHJlkJMeoNIIqZ B8SFTNl2xSNf1amZViaOz1dXXvU0bSMScpoxvCE1zgB+MwX9Qkk9bu4Ph6zM+6Xj 5IBIc3FBtpHudXkpbwu7jdH5trhz7k+U/FlTUGBWlkK63owxPUmojejVkqTBzX0E Dw5DojJXTF5q28aOFRGUJ3x9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqVUF6tdN BmNz9ukRDSQgSBxq6p0wHwYDVR0jBBgwFoAUXwBNV+s29CZy5m8wBfZGm2KJFxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxMDI1Lzk1NkY2NjJDOUQ4 NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHdCTlYtczI5Q1p5NW04d0JmWkdtMktKRnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx MDI1Lzk1NkY2NjJDOUQ4NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNa eTVtOHdCZlpHbTJLSkZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEKSR2gfPnFzJJ0yULxjOfWkcRSGyF2OL2DdGvsUOEtDcuxCW/hN3kX 9v5PXIxmYQe9ipfZO+NGx8GZz3FP19Rq/HyoYk3epegw7CBITYpG58mrIf9ChnzT 05aM4WJaL2P8sw+tQmgVoTlSQG9QzZBJJJz1Q7SRZMxf3YEtwNyOIcBEOOdSwIMk S86YUGKfvSodPDxtkJ+fl8WeefsvD/Y6k6nZlPD5CvnquMQ3irXx/fImrnBhq2XA ggj1MU3cExCT3thBq0EvfxOi/nsfXbPEktLPV24xPMbpqYKecdoU3X8Pn7nqGMW9 WpS1xP5UGERJQMf9QOX4REyWscndKuo= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org