$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: Y/9R4SuMvoe3zkW4JXmAtzrFzkmX+wZYuxwiLnf9gHI= Subject key identifier: 43:78:D7:1F:89:37:3A:A8:1F:E4:E3:D6:BB:AD:AC:55:50:DB:99:F7 Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: 28 Signing time: Sat 23 Nov 2024 05:41:51 +0000 Manifest this update: Sat 23 Nov 2024 05:41:51 +0000 Manifest next update: Sat 30 Nov 2024 05:41:51 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: 15fV4ha8e6W0pHB3Kn5nbwAF+Kw0nHt4GMbPKOVbfnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Nov 23 05:41:51 2024 GMT Not After : Nov 30 05:41:51 2024 GMT Subject: CN=67416b1f-3ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:3b:42:ab:95:c1:61:2d:ed:e3:31:dc:90: 8b:91:e6:5e:36:bf:f6:0f:dc:c4:a4:99:45:b0:a6: f3:38:b8:16:fc:65:59:ed:51:0c:19:2d:f3:59:08: c3:a4:68:89:6b:6e:99:12:7c:85:7d:a0:6e:eb:66: fe:6a:be:87:90:b5:09:dd:c7:5b:67:7c:84:9f:21: 52:2a:30:79:fa:41:83:7b:3e:54:b9:ea:c2:64:d7: 88:d5:2c:bd:05:23:c1:27:47:49:44:c7:a4:cb:4b: 86:ca:74:60:09:4b:3d:bf:e7:32:2f:bf:66:2e:1e: 1f:b8:2a:e4:ef:ce:4f:28:f9:33:64:ca:8c:a0:af: b3:cf:f9:f1:94:c7:e0:5d:02:89:0f:cf:72:3c:8b: 2a:d1:a1:fe:f9:0a:dc:25:90:1f:f1:a7:6a:52:31: 75:56:e3:f4:3f:c4:69:0e:16:5d:4d:4b:44:c3:8c: 2a:c6:47:d5:25:2e:82:bd:02:5f:0c:cc:f2:ad:1f: 3f:b9:ed:c9:1c:71:69:91:dc:d9:e9:d9:aa:52:d4: 58:3c:da:01:d5:2d:23:2e:28:17:13:e1:4c:c8:df: df:48:1e:ce:55:3e:e7:0c:15:98:a6:a4:94:92:75: 4d:84:79:1d:f3:48:8d:71:e4:4c:27:d8:8e:4c:9f: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:D7:1F:89:37:3A:A8:1F:E4:E3:D6:BB:AD:AC:55:50:DB:99:F7 X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1d:c3:a6:30:79:60:80:32:51:c7:35:4d:9d:3c:56:7a:e0: 22:db:dc:3b:55:bd:00:4e:37:0e:19:70:04:54:53:85:61:1c: b8:f8:85:be:df:7c:ae:e3:0a:70:75:db:c5:e6:e8:ad:e1:d4: fe:38:71:05:d8:09:a9:2f:fa:63:80:e4:b9:3e:1b:32:76:1a: 00:4a:0a:e1:35:5d:cb:60:d9:f3:4d:47:b3:99:81:60:d1:7c: 81:f5:30:de:e6:28:42:41:4c:d3:46:28:35:e6:b3:e9:12:a7: d5:74:54:71:08:49:96:1f:1c:fc:31:40:18:3e:5c:88:e9:1b: 54:13:53:9f:6e:5b:7c:b1:2d:a2:c0:34:21:ab:0c:77:03:af: d5:b3:f6:58:46:b2:95:09:87:af:e4:09:b4:7b:48:b1:db:9a: be:98:4c:c4:7b:11:5a:9a:fe:98:89:6c:4b:ee:7d:99:31:13: df:85:1c:02:dc:c5:a0:4d:1a:22:95:55:0c:1d:72:f0:1e:a2: 34:0f:11:da:95:09:e4:59:ea:50:39:f3:c4:42:fb:3d:95:fe: 4d:07:af:ce:b7:89:23:e5:2e:3e:25:46:ea:d7:f3:30:b6:4a: a1:79:39:ff:cb:18:e8:2c:0f:24:61:7c:db:52:a7:fb:e8:d3: a5:ab:2f:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgwNjExMC8GA1UEBRMoOTE0NkI3ODJFQjgyNDY3QjE5RDhCNDFEMUNDNDBFQkYw NDg5OTA2NjAeFw0yNDExMjMwNTQxNTFaFw0yNDExMzAwNTQxNTFaMBgxFjAUBgNV BAMTDTY3NDE2YjFmLTNlZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCisjtCq5XBYS3t4zHckIuR5l42v/YP3MSkmUWwpvM4uBb8ZVntUQwZLfNZCMOk aIlrbpkSfIV9oG7rZv5qvoeQtQndx1tnfISfIVIqMHn6QYN7PlS56sJk14jVLL0F I8EnR0lEx6TLS4bKdGAJSz2/5zIvv2YuHh+4KuTvzk8o+TNkyoygr7PP+fGUx+Bd AokPz3I8iyrRof75CtwlkB/xp2pSMXVW4/Q/xGkOFl1NS0TDjCrGR9UlLoK9Al8M zPKtHz+57ckccWmR3Nnp2apS1Fg82gHVLSMuKBcT4UzI399IHs5VPucMFZimpJSS dU2EeR3zSI1x5Ewn2I5Mn6A9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ3jXH4k3 Oqgf5OPWu62sVVDbmfcwHwYDVR0jBBgwFoAUkUa3guuCRnsZ2LQdHMQOvwSJkGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODA2L0QwQzVGNEUyNkU5 MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1VhM2d1dUNSbnNaMkxRZEhNUU92d1NKa0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODA2L0QwQzVGNEUyNkU5MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5z WjJMUWRITVFPdndTSmtHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUdw6YweWCAMlHHNU2dPFZ64CLb3DtVvQBONw4ZcARUU4VhHLj4hb7f fK7jCnB128Xm6K3h1P44cQXYCakv+mOA5Lk+GzJ2GgBKCuE1Xctg2fNNR7OZgWDR fIH1MN7mKEJBTNNGKDXms+kSp9V0VHEISZYfHPwxQBg+XIjpG1QTU59uW3yxLaLA NCGrDHcDr9Wz9lhGspUJh6/kCbR7SLHbmr6YTMR7EVqa/piJbEvufZkxE9+FHALc xaBNGiKVVQwdcvAeojQPEdqVCeRZ6lA588RC+z2V/k0Hr863iSPlLj4lRurX8zC2 SqF5Of/LGOgsDyRhfNtSp/vo06WrLyE= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org