$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: hva6rMqOaGEVtJag+sV/sxboKj75AAEXmHZDC50fC/8= Subject key identifier: 90:01:57:83:C4:27:61:68:34:22:9A:58:F7:C2:ED:1B:C1:68:2E:25 Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: B8 Signing time: Sat 23 Nov 2024 04:06:07 +0000 Manifest this update: Sat 23 Nov 2024 04:06:07 +0000 Manifest next update: Sat 30 Nov 2024 04:06:07 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: YeU2w1U0rxhAbZEWtGPZn2t5qMj5CXcmfcAEyZipLxE=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: 3QR/UvKzS+sKKfIIK9uHF2so+MGpUcPtji7e/5xzyuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Nov 23 04:06:07 2024 GMT Not After : Nov 30 04:06:07 2024 GMT Subject: CN=674154af-29e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:32:8f:16:7a:cf:2d:5b:1a:a9:60:ba:31: 00:5f:7f:80:99:3e:ea:63:f9:e5:32:9e:c7:d5:e9: 89:9d:0b:64:28:06:05:40:da:0d:54:7d:28:46:8d: 6a:bb:d2:a1:e9:84:40:28:36:ce:57:10:90:2c:a2: 5e:7f:67:57:59:a7:fb:07:e0:3c:95:ca:bf:c6:b8: 48:ed:80:ee:98:f8:f5:5b:91:1e:7e:c9:97:61:c4: d0:d8:01:1b:fe:a9:b3:11:7f:b6:45:9f:ab:51:65: 5b:62:72:0c:7e:ce:9f:20:47:da:81:ae:fe:ec:8a: 2c:d3:d9:e4:50:1f:bd:21:b5:67:03:ee:23:c0:0b: ee:3f:5f:eb:b9:72:bf:f7:7a:70:ba:c7:03:61:ed: 7c:13:04:5d:4e:d9:a6:ce:50:a0:b6:03:8f:de:1e: bf:d3:bb:0f:73:fb:e6:90:40:92:c3:6c:83:a4:6c: 4a:10:a5:3e:a6:b1:df:f9:20:5e:8e:c6:1e:db:ae: 19:1a:d7:a4:22:96:d8:2c:11:59:17:5c:77:e5:3b: 04:5d:0f:0d:06:b8:b9:22:76:27:61:33:3a:fd:e6: ee:c5:0f:ed:c9:3a:c1:b1:a8:a4:17:ab:ba:e9:7d: 78:39:46:54:57:26:3a:d0:84:6b:ac:2d:4b:a5:04: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:57:83:C4:27:61:68:34:22:9A:58:F7:C2:ED:1B:C1:68:2E:25 X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:ef:86:f1:8e:ec:69:d4:e5:06:99:19:01:a4:e6:a2:ff: 70:3d:fc:87:0f:8f:6a:7b:b2:03:9c:a6:54:3b:8b:32:6c:31: d6:cf:6e:0b:28:81:f3:bb:8c:20:24:c1:55:1e:b7:00:06:c8: 1e:09:70:3d:31:20:1c:6f:58:17:50:56:35:8e:01:de:b3:04: 98:c4:01:d7:c0:a1:76:e7:b9:8c:68:28:ef:9f:bd:25:af:87: 21:9c:5f:25:f0:6c:7a:8a:04:4f:a9:ce:b1:fc:8d:cb:a5:19: 5f:f7:a4:5a:db:8a:3a:16:73:1b:5a:a2:1e:31:32:13:34:53: 3c:93:03:06:b9:a8:88:7f:9e:d0:3c:fe:f5:85:78:8d:31:bb: 06:fc:46:91:67:02:ad:b1:e6:8e:db:de:cf:ad:82:93:40:5f: 7d:2d:ca:b4:4b:51:4d:f2:7e:b3:01:5e:48:9e:3d:b6:76:01: 77:42:49:cd:95:2a:30:70:d9:d6:a8:d3:d9:8e:9f:36:bb:11: 2f:79:0d:03:e8:ad:46:1a:68:f2:83:d7:3b:07:65:3c:d3:72: ce:ee:ca:6f:e7:cf:a0:4f:cf:3b:08:04:3a:98:53:5a:76:cd: dc:56:b8:c2:0e:f3:84:7b:4a:6d:97:42:64:6b:6c:3e:ab:cd: 6d:80:1a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjQxMTIzMDQwNjA3WhcNMjQxMTMwMDQwNjA3WjAYMRYwFAYD VQQDEw02NzQxNTRhZi0yOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJMyjxZ6zy1bGqlgujEAX3+AmT7qY/nlMp7H1emJnQtkKAYFQNoNVH0oRo1q u9Kh6YRAKDbOVxCQLKJef2dXWaf7B+A8lcq/xrhI7YDumPj1W5EefsmXYcTQ2AEb /qmzEX+2RZ+rUWVbYnIMfs6fIEfaga7+7Ios09nkUB+9IbVnA+4jwAvuP1/ruXK/ 93pwuscDYe18EwRdTtmmzlCgtgOP3h6/07sPc/vmkECSw2yDpGxKEKU+prHf+SBe jsYe264ZGtekIpbYLBFZF1x35TsEXQ8NBri5InYnYTM6/ebuxQ/tyTrBsaikF6u6 6X14OUZUVyY60IRrrC1LpQTwAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJABV4PE J2FoNCKaWPfC7RvBaC4lMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJO+G8Y7sadTlBpkZAaTmov9wPfyHD49qe7IDnKZUO4sybDHWz24L KIHzu4wgJMFVHrcABsgeCXA9MSAcb1gXUFY1jgHeswSYxAHXwKF257mMaCjvn70l r4chnF8l8Gx6igRPqc6x/I3LpRlf96Ra24o6FnMbWqIeMTITNFM8kwMGuaiIf57Q PP71hXiNMbsG/EaRZwKtseaO297PrYKTQF99Lcq0S1FN8n6zAV5Inj22dgF3QknN lSowcNnWqNPZjp82uxEveQ0D6K1GGmjyg9c7B2U803LO7spv58+gT887CAQ6mFNa ds3cVrjCDvOEe0ptl0Jka2w+q81tgBpJ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org