$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: hUDArT2xZomjM5U65kFt7flFgt2tm8c26g7wCsKCbDg= Subject key identifier: 27:DA:49:AB:83:FB:17:07:81:C9:55:2D:7C:BD:A9:7D:E9:B5:0C:43 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 0C Signing time: Wed 25 Dec 2024 05:14:15 +0000 Manifest this update: Wed 25 Dec 2024 05:14:14 +0000 Manifest next update: Wed 01 Jan 2025 05:14:14 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: //lLrWmCP4aHud6mtvhUJQA4cLpqRmkXNqdZ4F0CSjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Dec 25 05:14:14 2024 GMT Not After : Jan 1 05:14:14 2025 GMT Subject: CN=676b94a6-5711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:c4:8a:2e:e2:5d:17:a5:15:b9:c7:7b:2c: 04:f1:1f:b7:11:a0:9f:ec:f2:85:ea:d7:fb:a7:de: e5:01:1a:c6:cd:0d:6a:67:51:67:68:29:e9:05:8d: 6f:39:7f:50:de:d4:6f:53:cb:bb:dc:bd:a5:59:8f: 81:37:e0:bf:af:f0:70:00:47:f4:63:a5:17:b4:5c: 6b:90:57:82:19:bd:07:99:34:23:f8:a3:f4:1b:59: de:a8:de:33:2c:56:db:24:4e:02:f1:38:f9:f6:e3: e1:1c:f6:09:51:ab:73:2d:c3:8b:0d:68:aa:18:32: 00:3a:46:ee:16:05:95:42:77:82:ce:ac:f0:8a:42: 34:71:9f:d7:ad:68:9d:60:8d:6f:29:88:fa:7d:77: 5d:36:d2:77:38:7c:f5:52:62:a0:28:32:e1:52:8c: 2c:5a:d4:1c:de:50:1d:9d:b4:d5:de:88:6a:14:27: 05:29:a3:5d:7f:85:d2:e2:fd:e3:2e:5a:54:cb:90: 95:18:1a:6f:5a:9a:dc:42:66:10:18:0a:57:1c:38: 34:c0:08:5a:d8:19:39:3a:6a:1c:2e:af:1e:8f:57: 9a:45:99:c9:b7:02:cf:0f:2c:9d:24:1e:8c:60:10: 64:a4:47:5b:c5:c8:01:f6:54:d2:6d:e2:8b:e1:25: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:49:AB:83:FB:17:07:81:C9:55:2D:7C:BD:A9:7D:E9:B5:0C:43 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e2:88:cd:a0:8f:61:4d:c0:d8:08:b5:cb:02:fe:6b:86:68: a5:11:97:62:32:47:f1:fe:78:07:08:ef:55:a5:cf:c1:5a:e0: 84:92:9f:e5:d5:48:13:05:44:3d:0e:bd:8c:13:31:bd:08:92: eb:8c:5b:85:f9:b0:42:22:38:9d:9c:b0:17:24:b8:13:1f:33: cd:0a:f6:51:c6:3f:4c:83:1d:44:16:c8:be:4c:61:c5:9c:bf: db:b3:a5:da:33:21:95:d7:38:7e:72:6e:f6:da:20:b7:de:07: 63:da:e8:0f:ff:e4:15:b5:a1:f3:2d:63:45:a6:a3:06:be:bf: d8:fe:86:a1:49:e9:62:18:4b:b7:ac:ba:ec:4d:20:d5:ee:a6: 07:94:91:b1:93:32:52:b0:3e:82:55:2c:b5:0c:7f:d8:0c:52: a5:53:5c:1d:64:34:e4:a5:f6:c6:08:de:e1:a1:c6:f0:98:a9: 86:b4:e7:cf:b9:e9:74:2d:61:1d:4c:bd:1b:af:c7:0d:48:b2: 46:a6:bd:2b:be:4f:e8:3f:b7:8b:c9:ee:57:9e:f1:3e:c6:25: 82:32:c3:07:f0:7f:e9:66:c9:b7:bf:b7:d7:90:7c:d0:f6:b1: 13:96:07:fa:c9:52:9c:55:d6:b4:29:a7:04:48:3c:db:e7:e8: 74:79:25:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNDEyMjUwNTE0MTRaFw0yNTAxMDEwNTE0MTRaMBgxFjAUBgNV BAMTDTY3NmI5NGE2LTU3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNEcSKLuJdF6UVucd7LATxH7cRoJ/s8oXq1/un3uUBGsbNDWpnUWdoKekFjW85 f1De1G9Ty7vcvaVZj4E34L+v8HAAR/RjpRe0XGuQV4IZvQeZNCP4o/QbWd6o3jMs VtskTgLxOPn24+Ec9glRq3Mtw4sNaKoYMgA6Ru4WBZVCd4LOrPCKQjRxn9etaJ1g jW8piPp9d1020nc4fPVSYqAoMuFSjCxa1BzeUB2dtNXeiGoUJwUpo11/hdLi/eMu WlTLkJUYGm9amtxCZhAYClccODTACFrYGTk6ahwurx6PV5pFmcm3As8PLJ0kHoxg EGSkR1vFyAH2VNJt4ovhJVtdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ9pJq4P7 FweByVUtfL2pfem1DEMwHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC7iiM2gj2FNwNgItcsC/muGaKURl2IyR/H+eAcI71Wlz8Fa4ISSn+XV SBMFRD0OvYwTMb0IkuuMW4X5sEIiOJ2csBckuBMfM80K9lHGP0yDHUQWyL5MYcWc v9uzpdozIZXXOH5ybvbaILfeB2Pa6A//5BW1ofMtY0Wmowa+v9j+hqFJ6WIYS7es uuxNINXupgeUkbGTMlKwPoJVLLUMf9gMUqVTXB1kNOSl9sYI3uGhxvCYqYa058+5 6XQtYR1MvRuvxw1IskamvSu+T+g/t4vJ7lee8T7GJYIywwfwf+lmybe/t9eQfND2 sROWB/rJUpxV1rQppwRIPNvn6HR5Jbo= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:27 2024 by rpki-client on console-fra.rpki-client.org