$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: wFFIo+BMMLkkLKpMejfassiL/cycFrdjab9LNcc3BxI= Subject key identifier: 1F:41:11:47:CE:2A:96:16:4A:9A:1F:5F:4A:22:BD:6C:4B:97:95:77 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 09A3 Signing time: Fri 22 Nov 2024 19:47:44 +0000 Manifest this update: Fri 22 Nov 2024 19:47:44 +0000 Manifest next update: Fri 29 Nov 2024 19:47:44 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: 2dbjD0qnF/AJWaJYbP0hDssbltYKr49SB/l4m3U6TQw=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Nov 22 19:47:44 2024 GMT Not After : Nov 29 19:47:44 2024 GMT Subject: CN=6740dfe0-40ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:03:31:11:71:fa:61:b2:88:17:51:ee:0d: 16:39:0e:6d:f5:d7:e5:85:ce:eb:b8:1a:5e:d3:c9: ec:83:d5:78:da:53:69:7b:72:ac:8a:0c:20:55:2c: cc:a0:2e:53:15:22:3b:c4:f7:69:4f:b8:b3:e8:6e: ae:48:ac:63:e3:94:6a:3e:c9:90:ee:e2:66:83:f7: 04:b5:6c:bb:20:c5:68:64:60:b2:e9:14:06:25:10: 59:e7:c6:48:78:bb:e3:a5:7f:bb:e2:49:f2:b7:ab: 49:54:5c:fe:1a:87:96:94:ac:7d:45:2e:ad:c6:fe: ba:b4:f8:0c:16:2e:b2:20:18:16:fb:1d:e0:7b:6c: 4e:ac:b7:c2:50:dc:de:d0:06:a2:a3:6a:64:cc:39: 36:6e:47:74:ce:ed:df:cb:0c:27:d5:09:7e:e4:e2: e8:57:6c:ff:64:84:3e:44:48:fc:39:4b:2a:04:fd: ea:10:8d:50:bc:ac:88:af:db:e2:bd:ac:1f:e0:f8: 27:a0:72:4d:bd:57:98:24:d9:d2:e4:87:94:9c:d2: 87:65:d3:62:7b:b0:b3:0f:6e:00:ec:60:80:56:95: 26:c9:be:a9:74:2c:2f:7f:b3:3d:05:c1:44:8f:0b: c1:f1:23:cf:3b:76:0d:d4:09:e7:ac:7f:c7:f4:02: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:11:47:CE:2A:96:16:4A:9A:1F:5F:4A:22:BD:6C:4B:97:95:77 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f8:65:f0:1b:ba:ae:82:9b:da:73:73:ec:06:d5:db:19:41: 8f:69:38:1c:07:3e:3a:1b:3d:a8:f0:58:05:cf:bc:d9:80:de: f5:10:15:48:fb:81:bd:07:c9:dc:45:af:d5:98:67:ab:92:30: ed:34:25:d9:70:1c:4e:09:98:17:8e:51:60:fd:4b:82:3d:a8: 0d:ca:12:16:e4:e2:cf:55:86:71:ea:16:c8:3c:16:46:b1:c4: af:30:44:f0:34:97:41:f3:d8:7e:89:bb:d1:95:c4:07:94:ac: b8:d8:91:25:4e:f1:03:b1:85:20:b4:f2:94:03:b7:f8:10:5e: 37:b4:46:f2:f5:1c:04:8e:26:4a:d4:0a:ae:ae:d9:f6:3b:19: 85:f7:bb:3d:47:29:91:fa:b7:22:09:06:af:3c:d2:69:63:a5: a4:9b:56:6f:24:a9:8b:2f:d6:d1:1e:da:05:82:b3:ed:d7:89: f1:09:d0:e0:67:27:ae:24:04:a6:7a:a2:a7:fc:b9:45:ee:06: 5f:82:5a:18:2d:31:ae:bb:05:19:39:84:db:59:ae:6b:b9:96: b2:4a:f6:1e:69:32:08:49:cb:2d:bc:d5:21:96:68:e1:59:13: 20:3f:3a:4b:b6:e1:40:26:cf:28:9c:ea:77:1d:bf:92:ed:b0: a3:53:34:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjQxMTIyMTk0NzQ0WhcNMjQxMTI5MTk0NzQ0WjAYMRYwFAYD VQQDEw02NzQwZGZlMC00MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DIDMRFx+mGyiBdR7g0WOQ5t9dflhc7ruBpe08nsg9V42lNpe3KsigwgVSzM oC5TFSI7xPdpT7iz6G6uSKxj45RqPsmQ7uJmg/cEtWy7IMVoZGCy6RQGJRBZ58ZI eLvjpX+74knyt6tJVFz+GoeWlKx9RS6txv66tPgMFi6yIBgW+x3ge2xOrLfCUNze 0Aaio2pkzDk2bkd0zu3fywwn1Ql+5OLoV2z/ZIQ+REj8OUsqBP3qEI1QvKyIr9vi vawf4PgnoHJNvVeYJNnS5IeUnNKHZdNie7CzD24A7GCAVpUmyb6pdCwvf7M9BcFE jwvB8SPPO3YN1AnnrH/H9AJznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9BEUfO KpYWSpofX0oivWxLl5V3MB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD+GXwG7qugpvac3PsBtXbGUGPaTgcBz46Gz2o8FgFz7zZgN71EBVI +4G9B8ncRa/VmGerkjDtNCXZcBxOCZgXjlFg/UuCPagNyhIW5OLPVYZx6hbIPBZG scSvMETwNJdB89h+ibvRlcQHlKy42JElTvEDsYUgtPKUA7f4EF43tEby9RwEjiZK 1Aqurtn2OxmF97s9RymR+rciCQavPNJpY6Wkm1ZvJKmLL9bRHtoFgrPt14nxCdDg ZyeuJASmeqKn/LlF7gZfgloYLTGuuwUZOYTbWa5ruZaySvYeaTIIScstvNUhlmjh WRMgPzpLtuFAJs8onOp3Hb+S7bCjUzS5 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org