$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: t7z10dnBpOdaH7uJoYpYPYnYQWgs+6lh8iofkFYpMSw= Subject key identifier: 41:78:98:7E:D8:8B:F5:CF:6D:39:5D:A4:69:99:CF:2F:E9:7C:04:1B Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 3420 Signing time: Fri 22 Nov 2024 15:20:14 +0000 Manifest this update: Fri 22 Nov 2024 15:20:14 +0000 Manifest next update: Fri 29 Nov 2024 15:20:14 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: 4RGeI7EeCGUyvge7by9aNWxTTQCsgKxmTMYl5h4jWCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Nov 22 15:20:14 2024 GMT Not After : Nov 29 15:20:14 2024 GMT Subject: CN=6740a12e-0b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:4c:0e:90:71:9e:11:b1:1a:4b:dd:b8:ac: 9f:99:fd:e1:58:bf:ff:0b:97:da:8b:fa:8c:4b:13: 08:31:5f:5f:16:0f:62:f8:a2:81:25:0a:d2:2c:23: a0:d7:88:80:ff:fe:23:80:cb:8a:32:9a:8f:74:86: 58:f6:44:38:34:6e:00:5b:cf:14:18:89:16:7e:90: 87:6b:c1:36:9c:48:99:5a:95:e5:a1:a5:77:6e:07: 2b:a0:31:93:a0:00:c3:3f:1a:cc:23:24:aa:4f:3a: a1:13:38:f7:26:d6:99:8d:99:41:81:84:e9:62:d8: 74:ae:5a:4f:7e:b2:01:67:f4:df:b1:b0:d6:69:a1: f1:5a:0b:3a:48:c6:19:cf:85:82:57:5c:ad:d6:bf: 74:fb:bb:b2:6d:0a:d6:57:98:74:29:5b:04:35:00: 79:f6:f6:7f:be:49:c0:5c:cc:34:76:01:3a:49:d4: b0:aa:eb:4b:c3:f6:b7:d7:f9:7d:34:f0:7a:ec:2e: e0:09:4b:7b:55:bd:43:42:7a:e4:47:eb:cf:d6:07: d6:34:95:ff:f5:a8:78:94:a9:61:1b:bb:5e:dd:ac: 09:6f:72:13:42:28:46:b0:ed:01:90:f3:80:6f:4b: f3:cc:3b:30:44:48:3d:dd:af:3d:85:04:be:a0:78: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:98:7E:D8:8B:F5:CF:6D:39:5D:A4:69:99:CF:2F:E9:7C:04:1B X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:26:72:af:47:bf:bb:d6:d7:fd:f0:73:03:a4:d4:ae:5a:ce: 12:ab:81:8a:80:0d:55:a2:99:af:c9:12:f1:ba:0a:54:ae:08: aa:2a:de:c4:c4:25:5c:a8:f2:98:0a:12:1a:df:56:00:73:f5: c4:68:a4:52:52:87:71:36:d5:b2:b6:63:76:82:5f:ed:6a:bf: c4:d3:22:5d:44:13:fc:10:3c:8e:24:c7:56:5d:f7:e2:fa:38: 9e:fe:d4:46:6c:17:49:1c:6f:4b:7f:ec:bf:10:c7:dd:c1:08: 22:85:57:28:c8:15:13:8a:97:82:0d:9c:f2:37:6c:7e:d1:9a: 9c:d4:20:f9:b4:e1:86:6f:a3:c6:c8:bc:ff:3d:32:8c:ab:db: fa:a3:a0:a2:c4:20:f4:b1:0f:ee:26:1d:23:69:e0:e0:7f:4d: 7d:be:7a:26:7d:52:fe:68:d9:d0:2c:c8:2f:13:89:3d:27:02: 04:bb:de:e1:13:5d:5f:30:2f:9e:42:8a:98:da:e5:3a:63:ce: 39:72:e8:20:1b:c3:90:25:46:cb:b5:3d:e3:c8:de:45:6d:2d: d4:83:88:46:54:d4:04:2c:64:37:34:d4:76:bc:01:da:06:0d: a6:c5:84:f0:cc:c1:46:7d:22:c2:cc:33:5c:52:00:7d:77:e3: b9:78:59:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjQxMTIyMTUyMDE0WhcNMjQxMTI5MTUyMDE0WjAYMRYwFAYD VQQDEw02NzQwYTEyZS0wYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyhMDpBxnhGxGkvduKyfmf3hWL//C5fai/qMSxMIMV9fFg9i+KKBJQrSLCOg 14iA//4jgMuKMpqPdIZY9kQ4NG4AW88UGIkWfpCHa8E2nEiZWpXloaV3bgcroDGT oADDPxrMIySqTzqhEzj3JtaZjZlBgYTpYth0rlpPfrIBZ/TfsbDWaaHxWgs6SMYZ z4WCV1yt1r90+7uybQrWV5h0KVsENQB59vZ/vknAXMw0dgE6SdSwqutLw/a31/l9 NPB67C7gCUt7Vb1DQnrkR+vP1gfWNJX/9ah4lKlhG7te3awJb3ITQihGsO0BkPOA b0vzzDswREg93a89hQS+oHie2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF4mH7Y i/XPbTldpGmZzy/pfAQbMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeJnKvR7+71tf98HMDpNSuWs4Sq4GKgA1VopmvyRLxugpUrgiqKt7E xCVcqPKYChIa31YAc/XEaKRSUodxNtWytmN2gl/tar/E0yJdRBP8EDyOJMdWXffi +jie/tRGbBdJHG9Lf+y/EMfdwQgihVcoyBUTipeCDZzyN2x+0Zqc1CD5tOGGb6PG yLz/PTKMq9v6o6CixCD0sQ/uJh0jaeDgf019vnomfVL+aNnQLMgvE4k9JwIEu97h E11fMC+eQoqY2uU6Y845cuggG8OQJUbLtT3jyN5FbS3Ug4hGVNQELGQ3NNR2vAHa Bg2mxYTwzMFGfSLCzDNcUgB9d+O5eFkj -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org