$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: O0NgtczDrdTiDhFxAyet0h8VxAXo6GNFIvmg6MmpTKM= Subject key identifier: EF:BD:D9:73:12:E2:1D:84:68:06:D4:BD:6B:4A:07:C5:4D:C1:FA:C6 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 03D5 Signing time: Sat 23 Nov 2024 00:12:27 +0000 Manifest this update: Sat 23 Nov 2024 00:12:27 +0000 Manifest next update: Sat 30 Nov 2024 00:12:27 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: W+sXkf1ch+Wo3u/sMqabO9Zs6Qdl1beQCtdhLyTotkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Nov 23 00:12:27 2024 GMT Not After : Nov 30 00:12:27 2024 GMT Subject: CN=67411deb-7e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:7c:82:71:c2:18:be:9f:36:da:21:e1:ca: e2:e7:12:5a:0d:1e:e8:30:a7:cd:e4:18:b5:8f:cf: 2c:df:41:66:55:06:95:95:ad:97:82:7d:81:f7:43: cc:6e:84:24:42:f8:52:af:cb:a3:89:6e:93:5b:01: ba:1a:3e:cb:99:6b:7b:e1:ed:c6:40:2b:1a:3c:47: fb:e2:f9:9f:6a:ae:60:a0:93:31:db:34:30:de:0d: 11:33:8d:88:8b:c0:36:94:70:96:2b:68:17:71:62: 56:b2:df:5f:ca:8f:cc:1e:2d:5f:7f:30:f5:c4:39: fe:a0:b6:91:78:a9:0f:ec:bf:27:3a:6c:fa:7b:3d: 5e:36:92:f5:23:ba:92:21:01:05:49:cf:8b:c1:f5: 8f:d3:98:3f:fd:10:76:b7:8c:47:6d:37:22:37:4e: 10:98:ab:b5:4c:0b:f8:e9:c4:57:bd:81:70:2a:f9: 11:93:35:a0:65:7d:0b:81:ec:16:5d:97:96:75:e2: 93:cf:93:03:53:e6:b4:2f:cb:2e:5f:7b:2b:71:4b: 3c:18:29:8d:29:aa:6a:19:24:11:20:a3:b7:4e:90: 9f:ad:48:95:5d:d0:84:1e:e3:3f:f6:b4:61:a5:35: 5a:c9:22:ae:0f:ef:76:6b:7f:83:83:e1:16:53:06: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:D9:73:12:E2:1D:84:68:06:D4:BD:6B:4A:07:C5:4D:C1:FA:C6 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4b:63:8b:00:27:14:42:1d:7e:dd:40:09:90:f2:91:e2:f5: 8c:c9:05:1e:69:5f:32:2b:d4:e7:35:21:cc:6c:b9:9a:96:01: 16:90:63:a9:c0:40:32:5b:7b:fa:b3:58:6c:aa:fd:b2:d1:40: ba:27:49:a5:2d:2c:c0:d7:89:07:7c:fc:87:2c:13:0b:ba:02: ce:85:18:10:bf:66:18:a7:96:cb:48:f1:78:e8:55:d9:c7:fd: 8e:38:f0:59:ea:b6:d8:f6:65:df:82:07:ad:b1:fa:30:31:01: 03:49:8d:67:44:a6:6f:68:e9:09:17:98:25:56:ee:70:f6:50: a7:ba:f3:fc:59:2e:fc:b6:f7:40:a8:30:0a:83:94:b1:b1:12: b0:86:43:e7:f5:a5:c7:b3:31:3d:a8:fe:3e:a0:3a:fc:a9:60: c7:b9:95:ef:3a:b0:3a:b0:50:10:75:2e:8c:ed:a3:b4:fc:83: 4f:bb:7e:cb:39:9a:e1:38:a4:5f:6f:37:be:53:38:40:74:73: 08:56:fc:5b:c4:87:14:e1:45:24:a9:d0:bd:cb:82:1f:1e:ae: 32:5c:87:dd:48:c7:1e:5f:75:65:c0:4a:f8:f0:a1:f9:8a:55: 4d:7c:ca:04:4b:14:0b:90:f2:e0:85:c0:f0:b6:cb:35:0d:19: 2e:19:29:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjQxMTIzMDAxMjI3WhcNMjQxMTMwMDAxMjI3WjAYMRYwFAYD VQQDEw02NzQxMWRlYi03ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqJ8gnHCGL6fNtoh4cri5xJaDR7oMKfN5Bi1j88s30FmVQaVla2Xgn2B90PM boQkQvhSr8ujiW6TWwG6Gj7LmWt74e3GQCsaPEf74vmfaq5goJMx2zQw3g0RM42I i8A2lHCWK2gXcWJWst9fyo/MHi1ffzD1xDn+oLaReKkP7L8nOmz6ez1eNpL1I7qS IQEFSc+LwfWP05g//RB2t4xHbTciN04QmKu1TAv46cRXvYFwKvkRkzWgZX0LgewW XZeWdeKTz5MDU+a0L8suX3srcUs8GCmNKapqGSQRIKO3TpCfrUiVXdCEHuM/9rRh pTVaySKuD+92a3+Dg+EWUwaRPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+92XMS 4h2EaAbUvWtKB8VNwfrGMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJS2OLACcUQh1+3UAJkPKR4vWMyQUeaV8yK9TnNSHMbLmalgEWkGOp wEAyW3v6s1hsqv2y0UC6J0mlLSzA14kHfPyHLBMLugLOhRgQv2YYp5bLSPF46FXZ x/2OOPBZ6rbY9mXfggetsfowMQEDSY1nRKZvaOkJF5glVu5w9lCnuvP8WS78tvdA qDAKg5SxsRKwhkPn9aXHszE9qP4+oDr8qWDHuZXvOrA6sFAQdS6M7aO0/INPu37L OZrhOKRfbze+UzhAdHMIVvxbxIcU4UUkqdC9y4IfHq4yXIfdSMceX3VlwEr48KH5 ilVNfMoESxQLkPLghcDwtss1DRkuGSnv -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org