$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: aFrKFpaS+i6Zin11Z8Ng1vaCIKqgi8zRSRFlBmOqDWk= Subject key identifier: 6F:D2:7D:3B:C5:2C:B9:5D:92:28:68:C1:B0:6E:BC:3E:FB:0E:DF:C1 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: D3 Signing time: Sat 23 Nov 2024 03:45:53 +0000 Manifest this update: Sat 23 Nov 2024 03:45:53 +0000 Manifest next update: Sat 30 Nov 2024 03:45:53 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: tWTrPP62vHdhy0IICYaVrVhaTXM2lJmk6IrvlmqZAP8=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: YxGxJeshNnV3Vuuq1mbiFcEZbIJHwrpzAcTYwU5uciY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Nov 23 03:45:53 2024 GMT Not After : Nov 30 03:45:53 2024 GMT Subject: CN=67414ff1-ddee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:7d:4e:d9:17:9d:df:34:4d:f7:d8:0f:2a: 1c:73:f0:24:c1:87:39:ac:c8:d0:93:f0:ff:8a:26: 7c:d3:9b:8c:42:aa:8d:db:96:25:76:a8:7b:96:33: b2:f3:f2:a7:b0:72:4c:8a:62:f5:92:c1:55:c3:3f: a2:11:fa:17:a5:64:f5:ae:a8:da:b0:89:6e:b4:eb: fe:d1:17:02:8e:f8:c6:cc:c8:ab:0a:db:53:b3:49: 9c:79:11:ff:e8:5c:8a:7d:fa:d7:c5:05:ef:a9:5b: b6:e8:c9:07:41:bb:b7:f9:eb:75:1c:7e:03:c9:21: f4:57:4a:9c:d7:2e:0b:0f:0e:eb:22:c1:a3:fc:fe: fb:cf:98:59:ee:5e:90:26:bb:9e:b4:5d:c1:4c:cb: f6:01:f9:a0:6c:d9:b8:70:64:dd:48:22:a1:f0:9a: fe:45:f5:f5:79:84:37:e3:7f:a5:94:5f:39:b9:d3: 41:b3:f7:50:7d:25:b4:53:2d:1f:d1:fa:8d:be:58: b7:a2:2e:95:00:aa:25:f2:e6:0b:27:26:b3:d5:18: e5:e1:21:02:a2:be:9b:43:04:6c:3c:2a:48:14:73: bf:24:97:03:5d:72:0c:e6:ff:86:a1:92:87:4b:6b: 9b:1b:70:aa:8a:50:d6:7a:a3:03:74:64:76:49:3c: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D2:7D:3B:C5:2C:B9:5D:92:28:68:C1:B0:6E:BC:3E:FB:0E:DF:C1 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ee:2e:00:ae:41:72:3a:36:b4:ad:c0:7e:fa:e0:fb:06:01: 65:0d:fc:4a:62:8c:c2:19:d4:d4:d5:c4:fe:76:dd:65:ec:b9: 9f:93:a6:45:42:a2:a7:6c:cb:60:fd:8f:41:de:28:f5:78:44: 4d:ae:5f:e2:fd:78:f8:ae:ee:55:d2:45:99:b5:60:1d:df:f5: e3:e9:5d:96:de:64:03:3a:90:6b:6f:fa:07:d3:5c:7e:d3:a9: 0a:92:88:4f:80:22:88:72:84:69:1f:9d:db:55:ba:29:87:c6: 2d:bc:16:00:3c:5f:fa:46:aa:7f:7a:3a:fb:1a:17:e5:bc:4b: 50:40:c7:6f:fc:36:a3:55:77:50:6e:0b:8f:c5:99:ee:7d:51: 48:1e:b4:bb:5f:d2:49:47:f0:35:39:df:12:22:d9:58:d5:d8: 9a:98:55:a3:c7:4a:c6:05:d3:55:59:a8:a1:b6:56:ab:2e:49: 97:59:15:78:37:cc:69:3e:79:14:29:35:66:d4:b9:3b:a7:64: 7a:b5:79:40:a4:9a:a1:3a:27:d5:ae:1c:64:6a:3a:f5:16:e1: 9a:69:5a:03:14:39:ba:65:b8:e3:5e:61:36:5b:d1:8f:34:19: cd:4f:09:cd:f8:a5:2d:2d:d4:24:1c:8a:08:ab:75:cc:46:cd: a2:ce:2d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjQxMTIzMDM0NTUzWhcNMjQxMTMwMDM0NTUzWjAYMRYwFAYD VQQDEw02NzQxNGZmMS1kZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWB9TtkXnd80TffYDyocc/AkwYc5rMjQk/D/iiZ805uMQqqN25Yldqh7ljOy 8/KnsHJMimL1ksFVwz+iEfoXpWT1rqjasIlutOv+0RcCjvjGzMirCttTs0mceRH/ 6FyKffrXxQXvqVu26MkHQbu3+et1HH4DySH0V0qc1y4LDw7rIsGj/P77z5hZ7l6Q JruetF3BTMv2AfmgbNm4cGTdSCKh8Jr+RfX1eYQ343+llF85udNBs/dQfSW0Uy0f 0fqNvli3oi6VAKol8uYLJyaz1Rjl4SECor6bQwRsPCpIFHO/JJcDXXIM5v+GoZKH S2ubG3CqilDWeqMDdGR2STzTRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/SfTvF LLldkihowbBuvD77Dt/BMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj7i4ArkFyOja0rcB++uD7BgFlDfxKYozCGdTU1cT+dt1l7Lmfk6ZF QqKnbMtg/Y9B3ij1eERNrl/i/Xj4ru5V0kWZtWAd3/Xj6V2W3mQDOpBrb/oH01x+ 06kKkohPgCKIcoRpH53bVboph8YtvBYAPF/6Rqp/ejr7GhflvEtQQMdv/DajVXdQ bguPxZnufVFIHrS7X9JJR/A1Od8SItlY1diamFWjx0rGBdNVWaihtlarLkmXWRV4 N8xpPnkUKTVm1Lk7p2R6tXlApJqhOifVrhxkajr1FuGaaVoDFDm6ZbjjXmE2W9GP NBnNTwnN+KUtLdQkHIoIq3XMRs2izi0T -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org