$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: 8W+vbfHvTxaBW3UeWIKDBjhIS04wX2EGSVLzsmYAMIM= Subject key identifier: 53:73:18:52:84:B5:EE:78:CB:42:4E:FB:B1:7D:8C:E4:5D:C8:01:C4 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: A5 Signing time: Sat 23 Nov 2024 04:26:13 +0000 Manifest this update: Sat 23 Nov 2024 04:26:12 +0000 Manifest next update: Sat 30 Nov 2024 04:26:12 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: c8FFn/yyPYdCPgqeBdzFyzvI576IOqcGGdlRKDyNhxo=) 2: F2E15D04EB2011EEA69D7D3CC4F9AE02.roa (hash: BnKipIhiv2yThIAvehIAiN0OUr8N16t+fYO2QuqR4kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Nov 23 04:26:12 2024 GMT Not After : Nov 30 04:26:12 2024 GMT Subject: CN=67415964-6ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a9:7f:38:17:95:e2:d1:7a:a4:c6:90:e2:d0: af:bf:5f:cf:c8:72:99:50:5f:8c:51:7d:0a:c3:52: 61:9d:8a:39:87:f7:5e:90:c3:2b:9e:30:e5:1f:c1: 40:0c:d2:05:1c:be:52:98:36:b2:a4:ab:81:22:ea: 32:cb:a2:11:ed:19:ea:0b:1c:5e:f2:28:08:29:97: fe:0d:ed:88:27:d6:84:0b:38:c9:73:bb:67:16:a7: 45:fc:bd:3f:f2:0d:61:46:11:6f:c6:4a:61:a4:dd: 7b:c8:df:0a:99:92:b4:41:46:d7:34:65:8f:30:a9: ca:84:cb:89:54:f6:ed:88:86:24:31:ad:50:9b:f2: 30:e0:92:df:7a:9f:cf:c4:3d:d8:bb:63:34:e7:b7: a7:e5:48:2e:8d:13:18:70:c4:3b:ac:74:4f:7c:69: d3:91:7a:95:d7:d3:4b:a6:c2:6e:c8:10:90:fb:9b: 94:5b:65:20:0d:e0:3a:3d:3a:46:05:8c:4c:39:54: 01:eb:74:4c:ce:9f:25:77:f3:07:1b:b6:85:45:7e: 48:4c:4a:78:68:8f:24:5b:ee:8e:ae:b0:fd:a5:90: 1b:7c:d9:70:20:07:e2:b8:70:55:45:53:f9:48:78: 2d:ea:bd:25:7a:7d:23:74:76:4f:79:5d:22:4e:69: d4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:73:18:52:84:B5:EE:78:CB:42:4E:FB:B1:7D:8C:E4:5D:C8:01:C4 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7c:59:1f:f9:e5:d9:42:59:67:0a:06:60:01:7a:be:d0:37: 40:b2:b7:af:fd:a0:34:07:25:72:c8:e0:ad:76:bc:c2:6b:36: 1b:31:7f:7a:c1:f9:15:7e:95:cd:a2:1a:4f:c3:01:27:ec:e6: 32:93:ff:0f:58:40:04:11:a3:3c:fe:7c:b3:8c:f9:75:a4:95: db:d1:68:04:e3:46:08:27:50:c2:0e:c4:20:ee:39:fc:a4:b7: 45:8e:e1:60:42:47:31:bd:c4:b8:0a:da:fd:60:ce:c8:68:f9: aa:88:4a:27:ff:c4:83:fb:2b:4f:d9:b5:12:ec:e4:41:1b:4f: 7d:37:39:ce:73:76:35:f7:1d:dc:c6:05:96:5f:49:47:59:c9: 76:49:81:15:30:24:e4:7c:27:43:96:90:16:aa:e3:a3:a2:48: 1f:74:25:04:93:20:ba:61:f9:bb:3f:8f:f0:de:29:5b:aa:79: 2d:4b:92:26:7d:c4:f8:8d:25:b9:72:14:27:82:6f:0d:91:74: ce:16:f4:33:8f:e4:7e:cf:0e:34:91:3a:75:a7:c8:83:7f:ff: 05:5c:2c:34:80:45:f0:04:4d:10:09:43:8f:2e:97:b3:e5:95: 44:ff:1f:3f:67:5b:da:1b:b7:d9:8b:53:c1:9d:79:ca:f7:4c: a3:73:87:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjQxMTIzMDQyNjEyWhcNMjQxMTMwMDQyNjEyWjAYMRYwFAYD VQQDEw02NzQxNTk2NC02YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ql/OBeV4tF6pMaQ4tCvv1/PyHKZUF+MUX0Kw1JhnYo5h/dekMMrnjDlH8FA DNIFHL5SmDaypKuBIuoyy6IR7RnqCxxe8igIKZf+De2IJ9aECzjJc7tnFqdF/L0/ 8g1hRhFvxkphpN17yN8KmZK0QUbXNGWPMKnKhMuJVPbtiIYkMa1Qm/Iw4JLfep/P xD3Yu2M057en5UgujRMYcMQ7rHRPfGnTkXqV19NLpsJuyBCQ+5uUW2UgDeA6PTpG BYxMOVQB63RMzp8ld/MHG7aFRX5ITEp4aI8kW+6OrrD9pZAbfNlwIAfiuHBVRVP5 SHgt6r0len0jdHZPeV0iTmnU4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNzGFKE te54y0JO+7F9jORdyAHEMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCefFkf+eXZQllnCgZgAXq+0DdAsrev/aA0ByVyyOCtdrzCazYbMX96 wfkVfpXNohpPwwEn7OYyk/8PWEAEEaM8/nyzjPl1pJXb0WgE40YIJ1DCDsQg7jn8 pLdFjuFgQkcxvcS4Ctr9YM7IaPmqiEon/8SD+ytP2bUS7ORBG099NznOc3Y19x3c xgWWX0lHWcl2SYEVMCTkfCdDlpAWquOjokgfdCUEkyC6Yfm7P4/w3ilbqnktS5Im fcT4jSW5chQngm8NkXTOFvQzj+R+zw40kTp1p8iDf/8FXCw0gEXwBE0QCUOPLpez 5ZVE/x8/Z1vaG7fZi1PBnXnK90yjc4dd -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org