$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: xfJusJe+40xQ9p1tdn+iK3WkT4tRbnIdT0KO40woO0M= Subject key identifier: C1:8C:E6:4E:8D:27:CC:F9:DB:30:5C:64:D8:E7:54:74:2B:4B:5C:A5 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 02B6 Signing time: Thu 21 Nov 2024 01:04:00 +0000 Manifest this update: Thu 21 Nov 2024 01:04:00 +0000 Manifest next update: Thu 28 Nov 2024 01:04:00 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: kJWuRGVMGTsqOoJCGkHkqf4/gBB1MGD/9S+dX6IUM84=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Nov 21 01:04:00 2024 GMT Not After : Nov 28 01:04:00 2024 GMT Subject: CN=673e8700-bec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:37:0e:e6:6a:0e:b4:45:af:5e:51:9d:6a: e8:35:30:8f:74:79:b1:1b:18:0c:86:32:f1:83:cf: a6:02:a6:ed:75:f5:89:7a:a2:73:f1:9d:16:02:48: ba:4a:c2:1d:54:42:af:9f:b0:55:b9:87:f6:6a:de: a2:51:5c:d1:a0:fa:28:ca:d3:02:43:9e:5c:bd:1a: e9:9b:23:06:62:a5:ee:e2:5b:58:86:b2:48:23:af: 68:b4:46:bb:dc:9f:13:03:c7:40:25:fc:3c:2b:d9: d3:89:3a:53:68:6c:8b:03:78:61:5a:f5:4d:d5:34: b0:3b:84:cb:2b:70:5a:8f:cd:b4:13:5f:d8:8f:79: 74:13:4d:f1:4b:56:15:c1:15:de:b2:1d:8c:7c:c7: c4:0f:13:d4:4a:50:1d:09:33:97:03:0b:f4:27:0a: 8c:50:c4:65:dd:3f:86:c7:10:b0:ab:f7:18:8d:31: cd:7c:e7:0a:95:14:06:b4:85:ee:4e:fd:1d:a1:49: c7:58:db:62:ad:78:c5:9c:09:59:37:68:05:9c:ac: 81:ee:3c:14:a5:1b:ab:0f:d3:0f:a0:df:c0:ac:cf: 56:cf:30:89:a7:e4:cc:f7:53:85:eb:50:22:cf:b3: 7f:8d:7d:7f:f5:14:2c:4d:31:7e:4f:cc:48:9c:3c: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:E6:4E:8D:27:CC:F9:DB:30:5C:64:D8:E7:54:74:2B:4B:5C:A5 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bc:4e:7c:df:45:a6:c0:9b:ad:3d:87:78:50:77:96:6b:77: ec:43:69:62:1d:20:41:00:f0:e5:cd:50:0c:6c:83:f0:0e:c2: 72:ac:d5:bc:89:4d:02:60:33:a4:47:a4:80:fa:1c:c3:6f:46: 3e:a0:e9:56:f1:89:5b:94:60:de:b9:3b:0d:58:bb:c9:90:8d: b9:26:ac:19:62:95:29:1e:d7:c7:9a:7f:e3:00:8d:d7:8f:49: d6:f8:99:8d:a3:11:82:57:63:99:b9:62:d9:f1:d1:22:a6:15: b3:41:e8:ce:f2:bb:b1:5b:d3:3a:9c:35:b5:44:d9:c7:72:41: 40:ea:5e:eb:23:82:f1:b4:c7:71:92:81:cc:57:00:d5:c7:86: 8c:af:96:79:25:b2:9c:15:54:49:4a:f8:97:cb:77:e5:5c:bd: ea:8d:84:a3:35:1c:f6:f1:cd:37:6d:50:15:04:27:ba:d7:5b: 38:66:35:be:2a:ad:fe:dd:c3:f0:a6:77:89:35:cc:6b:07:16: 05:4c:26:e0:9a:37:71:7b:d5:26:4d:c1:f0:b3:22:6d:04:2d: 50:f9:a5:b2:41:a8:47:e7:29:b6:59:52:74:1a:b4:75:73:29: 43:2d:5d:b9:9e:71:0d:79:3e:75:9b:0c:91:3f:44:ce:79:4e: 04:8a:58:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjQxMTIxMDEwNDAwWhcNMjQxMTI4MDEwNDAwWjAYMRYwFAYD VQQDEw02NzNlODcwMC1iZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0C43DuZqDrRFr15RnWroNTCPdHmxGxgMhjLxg8+mAqbtdfWJeqJz8Z0WAki6 SsIdVEKvn7BVuYf2at6iUVzRoPooytMCQ55cvRrpmyMGYqXu4ltYhrJII69otEa7 3J8TA8dAJfw8K9nTiTpTaGyLA3hhWvVN1TSwO4TLK3Baj820E1/Yj3l0E03xS1YV wRXesh2MfMfEDxPUSlAdCTOXAwv0JwqMUMRl3T+GxxCwq/cYjTHNfOcKlRQGtIXu Tv0doUnHWNtirXjFnAlZN2gFnKyB7jwUpRurD9MPoN/ArM9WzzCJp+TM91OF61Ai z7N/jX1/9RQsTTF+T8xInDxBiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGM5k6N J8z52zBcZNjnVHQrS1ylMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vE5830WmwJutPYd4UHeWa3fsQ2liHSBBAPDlzVAMbIPwDsJyrNW8 iU0CYDOkR6SA+hzDb0Y+oOlW8YlblGDeuTsNWLvJkI25JqwZYpUpHtfHmn/jAI3X j0nW+JmNoxGCV2OZuWLZ8dEiphWzQejO8ruxW9M6nDW1RNnHckFA6l7rI4LxtMdx koHMVwDVx4aMr5Z5JbKcFVRJSviXy3flXL3qjYSjNRz28c03bVAVBCe611s4ZjW+ Kq3+3cPwpneJNcxrBxYFTCbgmjdxe9UmTcHwsyJtBC1Q+aWyQahH5ym2WVJ0GrR1 cylDLV25nnENeT51mwyRP0TOeU4Eili6 -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:08 2024 by rpki-client on console-fra.rpki-client.org