$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: lFQN83DHXEI/iTYioeDtuWqeSwXACb85wM/Xuv2NScY= Subject key identifier: 0B:E9:5F:DD:32:B0:88:39:15:4C:E6:5D:14:56:9B:17:15:E5:0C:37 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 0144 Signing time: Sat 23 Nov 2024 02:37:49 +0000 Manifest this update: Sat 23 Nov 2024 02:37:48 +0000 Manifest next update: Sat 30 Nov 2024 02:37:48 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: jn7kUfeFvofytEVmV81b3DFizcFLYWElEfni21bVp8k=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Nov 23 02:37:48 2024 GMT Not After : Nov 30 02:37:48 2024 GMT Subject: CN=67413ffd-9013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:72:3f:ee:ac:97:19:28:c2:11:a0:d4:e4: 6e:79:2e:b7:5e:c2:d9:a1:f1:ee:98:3a:2e:51:fb: 51:f9:e3:62:b1:ab:c4:df:c7:05:69:de:18:0b:7e: 07:22:32:bb:a9:7f:da:1f:40:d5:e2:70:41:ad:2f: 6f:bf:58:31:43:5e:ec:56:04:64:b1:74:6a:9f:b7: e6:45:b5:cd:ce:16:b2:23:0a:9d:c1:bb:e4:4d:e3: 00:b3:5f:ba:e7:d6:03:67:b7:44:14:ce:e2:0f:47: 56:12:34:83:f8:50:26:52:73:15:ce:ec:1b:a6:8b: e5:1d:69:07:e6:61:c7:58:28:80:d3:7e:04:a3:e2: 5a:01:97:40:0b:85:1f:00:e9:be:0d:f9:a6:fb:cb: a7:d0:0f:37:4e:40:6f:9e:69:62:1a:99:f0:d2:0b: 1b:6d:42:1f:51:4f:e3:9c:f0:ff:ee:e6:13:55:fb: 13:3c:4c:99:cd:fe:0d:2d:80:33:ca:5d:66:8d:c6: d3:9e:ee:1d:a8:ba:50:14:c7:26:3f:d5:43:19:cd: 9e:8f:c8:ca:be:90:ac:6a:16:55:f0:56:82:d8:f6: 03:09:36:65:a3:65:69:ce:54:74:80:3c:c0:be:5a: 2d:47:b1:17:ea:00:68:80:d9:93:a6:88:7e:74:04: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E9:5F:DD:32:B0:88:39:15:4C:E6:5D:14:56:9B:17:15:E5:0C:37 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e8:10:6f:3a:df:1e:01:88:b1:fb:b9:60:ee:4e:a6:3c:f6: 79:5e:06:47:31:c2:8c:29:64:e0:0f:ed:53:a7:ee:2f:58:64: 0e:e8:73:74:f3:f8:95:46:70:e5:2a:35:f2:db:b5:6a:bd:6d: 90:ab:4c:7e:cd:49:07:f6:16:04:c9:94:b9:aa:60:ea:48:27: ef:d3:a6:20:b3:d4:28:00:06:8b:5e:6a:b4:2e:3a:7e:5f:93: 5b:18:13:53:67:18:93:df:c1:23:a9:4a:4c:25:97:f4:a2:29: 40:65:50:77:5e:2e:de:13:fe:ee:af:82:64:e0:9e:09:fa:a9: 62:79:39:63:68:f9:d8:33:0b:54:e6:9f:06:44:ab:35:c1:1f: e6:37:5b:81:e3:3d:f8:8f:7a:b3:24:d3:ce:51:6c:4b:41:9c: 71:11:f2:af:5a:89:f7:50:cb:9c:74:f2:b7:7a:a1:7c:f6:96: d5:ef:4c:c8:2c:ef:3e:6e:16:39:07:e6:7c:37:b1:fe:33:e6: f4:46:da:30:72:94:cb:ac:88:4c:16:4d:ca:c9:33:25:cc:3f: c1:a3:9a:98:2d:d4:bb:d1:4a:28:81:db:18:b6:ac:a1:a2:8e: 61:15:eb:aa:d2:ca:af:42:ed:c1:3e:e1:89:64:83:7e:e2:c6: ad:85:df:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjQxMTIzMDIzNzQ4WhcNMjQxMTMwMDIzNzQ4WjAYMRYwFAYD VQQDEw02NzQxM2ZmZC05MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9hyP+6slxkowhGg1ORueS63XsLZofHumDouUftR+eNisavE38cFad4YC34H IjK7qX/aH0DV4nBBrS9vv1gxQ17sVgRksXRqn7fmRbXNzhayIwqdwbvkTeMAs1+6 59YDZ7dEFM7iD0dWEjSD+FAmUnMVzuwbpovlHWkH5mHHWCiA034Eo+JaAZdAC4Uf AOm+Dfmm+8un0A83TkBvnmliGpnw0gsbbUIfUU/jnPD/7uYTVfsTPEyZzf4NLYAz yl1mjcbTnu4dqLpQFMcmP9VDGc2ej8jKvpCsahZV8FaC2PYDCTZlo2VpzlR0gDzA vlotR7EX6gBogNmTpoh+dASp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvpX90y sIg5FUzmXRRWmxcV5Qw3MB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw6BBvOt8eAYix+7lg7k6mPPZ5XgZHMcKMKWTgD+1Tp+4vWGQO6HN0 8/iVRnDlKjXy27VqvW2Qq0x+zUkH9hYEyZS5qmDqSCfv06Ygs9QoAAaLXmq0Ljp+ X5NbGBNTZxiT38EjqUpMJZf0oilAZVB3Xi7eE/7ur4Jk4J4J+qlieTljaPnYMwtU 5p8GRKs1wR/mN1uB4z34j3qzJNPOUWxLQZxxEfKvWon3UMucdPK3eqF89pbV70zI LO8+bhY5B+Z8N7H+M+b0RtowcpTLrIhMFk3KyTMlzD/Bo5qYLdS70UoogdsYtqyh oo5hFeuq0sqvQu3BPuGJZIN+4sathd+v -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org