$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: GySJYkc8xNFALd+E5SwW8WxL0buSqXK/fVXs5jeeKk0= Subject key identifier: 1C:8E:38:5A:8C:63:FB:01:7F:08:B5:BE:75:BD:DA:25:AF:DB:9D:3D Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 49 Signing time: Thu 21 Nov 2024 05:25:16 +0000 Manifest this update: Thu 21 Nov 2024 05:25:15 +0000 Manifest next update: Thu 28 Nov 2024 05:25:15 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: 7OtglM9VPaNMLSVTWhW1m+HksmacD3EkfkoWS0G7Cn4=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: tpxknLltESXlXvrC8XRzEEbUw6cbAqdQTGW1X5phwoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: Nov 21 05:25:15 2024 GMT Not After : Nov 28 05:25:15 2024 GMT Subject: CN=673ec43c-3873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:26:63:2e:46:89:2c:ef:d2:56:f4:e1:69: ae:ed:9b:59:02:68:f6:37:ed:1f:51:e5:cc:4c:84: a6:f6:47:ee:40:0e:4d:73:cb:eb:99:c6:a3:b8:3d: 41:59:fc:10:90:af:e0:ce:fd:00:2d:e2:0e:f2:f3: e0:cd:d0:8a:a8:cd:c0:b9:53:b3:b9:f5:0a:2c:47: 56:04:91:10:e9:b4:12:a8:91:a7:d6:55:3b:72:85: 7c:b3:bf:1c:58:b2:a1:69:14:6b:68:9a:d3:d7:61: 44:90:f8:a4:3a:9f:0f:5f:6e:fa:fc:ec:52:69:6b: 6f:53:46:65:b9:44:de:b4:ef:8b:59:a2:5b:81:4e: 5c:53:92:1d:94:fd:7f:a4:1e:d9:77:fb:3c:da:66: 94:f3:60:c4:49:99:a1:f4:05:48:a6:ac:71:d7:f8: 16:22:9b:98:0f:38:1b:1c:78:dc:91:5a:15:7e:b3: df:08:ec:34:57:60:97:e0:fc:a1:17:e7:13:0c:6d: 75:19:61:cd:9b:4a:d6:78:50:6f:ef:d9:d6:e8:69: 17:c7:6d:76:71:fa:09:3f:52:aa:ec:64:4a:e3:15: 69:bb:26:a5:49:8b:fd:fc:af:8e:12:af:71:d0:47: 1e:bd:8f:e6:4f:62:31:2c:8f:2e:62:10:59:2e:6a: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:38:5A:8C:63:FB:01:7F:08:B5:BE:75:BD:DA:25:AF:DB:9D:3D X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:80:25:e3:f1:eb:9a:d5:0c:c4:3f:32:4f:b0:44:ab:8e:cc: 36:0e:bb:bb:73:f8:d3:39:51:5f:73:d9:90:38:e7:c5:73:2e: 75:0d:5c:5d:83:8d:8c:c5:f8:18:1f:95:60:17:13:b1:0c:68: 76:89:70:c1:bc:6f:90:e5:e6:02:9d:0b:2d:19:9a:20:a2:70: a8:22:6e:2d:50:2c:98:01:a9:81:1e:95:5a:39:ae:71:a4:a3: fb:a9:fe:78:d7:6c:d0:a2:59:d4:24:63:2e:ee:dd:7e:4d:87: 4c:9d:62:c2:7f:47:f0:96:2f:e8:2a:0c:82:50:16:60:5c:68: f6:6c:ca:2c:38:1e:b1:75:fb:a9:97:8c:a0:5b:40:3d:19:aa: 83:61:3a:53:ea:e3:c0:6c:37:9c:2a:06:ce:22:32:34:ec:f2: b9:e5:26:84:8b:73:14:ae:4c:25:40:25:fc:71:80:02:97:a8: 5e:50:73:ff:ef:e0:66:19:fe:d7:c6:6a:36:34:a5:a3:d4:4f: d5:d3:e4:6a:a4:9e:a5:f3:e7:32:47:68:33:fa:8a:0f:43:06: 74:e9:e6:46:8d:a7:83:20:0d:cb:c8:98:9a:1c:5c:79:de:0b: 08:8a:d9:6e:a7:7d:24:0d:35:11:a5:a5:d3:a9:ed:af:38:9c: c5:c2:ea:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUUwQTExMC8GA1UEBRMoNUYxRUU4MkJGNzA5QTI2Q0MwMDA5OTVCNDc0ODFFNTRG NkYzODA2RTAeFw0yNDExMjEwNTI1MTVaFw0yNDExMjgwNTI1MTVaMBgxFjAUBgNV BAMTDTY3M2VjNDNjLTM4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC51SZjLkaJLO/SVvThaa7tm1kCaPY37R9R5cxMhKb2R+5ADk1zy+uZxqO4PUFZ /BCQr+DO/QAt4g7y8+DN0IqozcC5U7O59QosR1YEkRDptBKokafWVTtyhXyzvxxY sqFpFGtomtPXYUSQ+KQ6nw9fbvr87FJpa29TRmW5RN6074tZoluBTlxTkh2U/X+k Htl3+zzaZpTzYMRJmaH0BUimrHHX+BYim5gPOBsceNyRWhV+s98I7DRXYJfg/KEX 5xMMbXUZYc2bStZ4UG/v2dboaRfHbXZx+gk/UqrsZErjFWm7JqVJi/38r44Sr3HQ Rx69j+ZPYjEsjy5iEFkuau85AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHI44Woxj +wF/CLW+db3aJa/bnT0wHwYDVR0jBBgwFoAUXx7oK/cJomzAAJlbR0geVPbzgG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RTBBLzAzQjA1MkQ0M0U2 OTExRUZBMkNFNjc2QUM0RjlBRTAyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHg3b0tfY0pvbXpBQUpsYlIwZ2VWUGJ6Z0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 RTBBLzAzQjA1MkQ0M0U2OTExRUZBMkNFNjc2QUM0RjlBRTAyL1h4N29LX2NKb216 QUFKbGJSMGdlVlBiemdHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeAJePx65rVDMQ/Mk+wRKuOzDYOu7tz+NM5UV9z2ZA458VzLnUNXF2D jYzF+BgflWAXE7EMaHaJcMG8b5Dl5gKdCy0ZmiCicKgibi1QLJgBqYEelVo5rnGk o/up/njXbNCiWdQkYy7u3X5Nh0ydYsJ/R/CWL+gqDIJQFmBcaPZsyiw4HrF1+6mX jKBbQD0ZqoNhOlPq48BsN5wqBs4iMjTs8rnlJoSLcxSuTCVAJfxxgAKXqF5Qc//v 4GYZ/tfGajY0paPUT9XT5GqknqXz5zJHaDP6ig9DBnTp5kaNp4MgDcvImJocXHne CwiK2W6nfSQNNRGlpdOp7a84nMXC6uM= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org