$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: /PAeJ8UZz+O4axCaVr+43yk1lWvn27UpAUpNdaH4DR4= Subject key identifier: 42:28:A2:4F:68:69:67:CB:DF:4D:C3:4F:58:27:6D:F4:33:79:36:46 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 08D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 08CE Signing time: Fri 22 Nov 2024 20:12:34 +0000 Manifest this update: Fri 22 Nov 2024 20:12:33 +0000 Manifest next update: Fri 29 Nov 2024 20:12:33 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: GzGNal/0K36BOS+i5aJn1X6jlYA43QIsy6ujTfeeuSQ=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Nov 22 20:12:33 2024 GMT Not After : Nov 29 20:12:33 2024 GMT Subject: CN=6740e5b1-d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:df:db:eb:2a:a5:4a:c0:08:bc:72:3f:5a: 73:4c:44:9a:b0:79:0c:d2:0e:8e:75:ec:91:bc:ed: 28:93:cb:aa:6f:71:64:8c:1a:63:b9:6d:ed:82:c7: 76:c8:76:83:28:e8:2a:ed:6b:bc:2e:49:37:8d:e8: 07:8b:23:0f:2e:53:8a:ca:ea:83:03:5c:64:7a:01: fb:79:47:15:02:2c:b3:8d:99:ea:84:77:52:37:32: 5c:9d:4f:55:a6:30:eb:56:5c:56:f4:fb:3d:85:87: 62:79:82:cf:93:82:7a:95:84:e4:e9:60:a3:6b:c7: 00:ec:4b:5b:bc:c7:82:87:1f:4e:00:f0:12:14:8d: db:23:91:45:ca:3b:bf:54:46:f6:a3:ea:8b:c9:6a: 65:79:d8:7e:32:a6:60:46:4e:56:a3:20:4e:7e:61: 0c:7a:57:97:66:36:2f:9a:8e:e5:da:14:10:e7:39: 3e:cd:45:c4:09:f7:e8:ea:a5:a5:a0:ba:73:1d:95: 54:94:5e:df:84:3e:a1:e8:17:76:75:36:ab:aa:87: 50:2e:eb:7e:56:b2:a2:e7:5e:90:2d:b3:e6:52:29: 7d:91:17:71:74:1d:5b:cc:a1:68:e2:b4:d4:25:55: 05:76:0a:4e:13:b9:dd:50:0c:d3:af:55:cd:9d:82: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:A2:4F:68:69:67:CB:DF:4D:C3:4F:58:27:6D:F4:33:79:36:46 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:30:93:a0:6e:42:8b:83:7b:3d:f7:3d:ed:3d:62:9d:b9:86: 90:d0:d5:3a:65:5b:4f:07:ef:fd:16:f9:ad:d4:07:0f:c5:8e: 56:ef:66:8f:4c:26:69:a7:85:ee:58:27:e1:77:3a:79:4c:e7: b7:3e:b1:7d:26:64:60:0b:86:40:e7:84:67:ac:20:43:21:1f: cf:8e:38:2c:82:b0:36:89:23:b6:78:cc:12:c8:22:f1:de:dd: 03:ab:68:70:5e:d7:66:22:9b:54:6d:4c:e9:f6:b3:6d:c5:e2: 5e:6e:34:cf:57:30:8f:53:e2:69:64:d1:49:64:12:49:57:fb: ca:2b:45:a0:2a:ab:68:25:99:b2:3a:31:9c:e4:94:fe:23:06: 2e:8b:84:97:fb:a4:f9:2b:41:20:c8:a8:50:59:26:ab:50:b2: 2d:0b:23:78:0e:5f:26:91:2c:bd:7c:7a:2b:40:95:e4:87:e9: 89:1b:e0:45:2e:12:67:bb:92:1b:11:5c:a8:64:ad:93:6e:87: 59:45:bf:f5:c0:a0:87:d0:66:b5:54:3a:ec:50:4b:b6:74:34: e6:6f:79:09:af:0d:4f:09:f4:3a:00:9d:7f:40:92:85:ea:79: c0:b6:38:e9:cf:cb:74:d6:aa:1b:46:1e:41:4c:f1:33:5b:2a: 65:5e:b1:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjQxMTIyMjAxMjMzWhcNMjQxMTI5MjAxMjMzWjAYMRYwFAYD VQQDEw02NzQwZTViMS1kOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaLf2+sqpUrACLxyP1pzTESasHkM0g6OdeyRvO0ok8uqb3FkjBpjuW3tgsd2 yHaDKOgq7Wu8Lkk3jegHiyMPLlOKyuqDA1xkegH7eUcVAiyzjZnqhHdSNzJcnU9V pjDrVlxW9Ps9hYdieYLPk4J6lYTk6WCja8cA7EtbvMeChx9OAPASFI3bI5FFyju/ VEb2o+qLyWpledh+MqZgRk5WoyBOfmEMeleXZjYvmo7l2hQQ5zk+zUXECffo6qWl oLpzHZVUlF7fhD6h6Bd2dTarqodQLut+VrKi516QLbPmUil9kRdxdB1bzKFo4rTU JVUFdgpOE7ndUAzTr1XNnYJDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIook9o aWfL303DT1gnbfQzeTZGMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdMJOgbkKLg3s99z3tPWKduYaQ0NU6ZVtPB+/9Fvmt1AcPxY5W72aP TCZpp4XuWCfhdzp5TOe3PrF9JmRgC4ZA54RnrCBDIR/PjjgsgrA2iSO2eMwSyCLx 3t0Dq2hwXtdmIptUbUzp9rNtxeJebjTPVzCPU+JpZNFJZBJJV/vKK0WgKqtoJZmy OjGc5JT+IwYui4SX+6T5K0EgyKhQWSarULItCyN4Dl8mkSy9fHorQJXkh+mJG+BF LhJnu5IbEVyoZK2TbodZRb/1wKCH0Ga1VDrsUEu2dDTmb3kJrw1PCfQ6AJ1/QJKF 6nnAtjjpz8t01qobRh5BTPEzWyplXrFu -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org