$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: vtH/QYGu3DXcPqI8u94iBePFEhQ0xWi67Nt1pYKqz9s= Subject key identifier: 58:7B:5C:6D:11:FA:A4:96:B2:E8:B6:69:0F:00:B6:6D:FD:34:98:21 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 343C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 3432 Signing time: Fri 22 Nov 2024 14:58:26 +0000 Manifest this update: Fri 22 Nov 2024 14:58:25 +0000 Manifest next update: Fri 29 Nov 2024 14:58:25 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: x7Ua9JCYsYUYWAGdJD1UsPAH2ZCMMO3Fx/2OP7eUEuU=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: zJHVvC3pRK1yUOEuPWeLlF93Wf3H36BKsW2Vj7FyRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13372 (0x343c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Nov 22 14:58:25 2024 GMT Not After : Nov 29 14:58:25 2024 GMT Subject: CN=67409c11-a102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:a7:b5:31:1f:8e:93:d7:a0:b0:49:eb:d0: bd:57:3d:bd:91:4e:65:40:14:de:fc:46:ba:f5:51: 1e:1b:56:b4:b5:cc:c6:87:ce:6c:3c:4b:07:8c:ba: 5c:2b:2d:f7:9f:08:c2:fd:50:0c:89:b1:9d:70:b9: 93:4c:89:20:36:cb:0e:29:69:c9:cc:67:1d:03:60: fe:5a:5b:82:56:90:ff:2d:78:22:1c:c5:4e:1b:62: 21:4d:c9:00:52:a0:b8:7d:9a:76:91:ed:85:eb:c7: 14:4a:53:3a:f5:db:45:13:c1:e6:fe:92:19:a7:5c: 80:67:4c:38:1e:e8:51:78:ec:20:de:9e:0e:ba:5a: 2d:5a:a5:af:9d:79:3a:d8:88:02:c0:73:c9:39:49: 1a:26:b1:9f:03:d2:4a:c6:f2:ad:55:45:35:db:f0: 7f:79:75:98:4a:fb:c1:f4:ce:f2:01:a2:b6:c1:c4: 45:bd:be:9c:fb:83:dd:12:8e:1b:ed:0c:e9:13:3c: df:92:a0:87:4c:90:85:f2:6f:84:5d:60:30:0c:f9: 99:bf:47:43:cd:e2:22:67:40:1a:ca:3f:6c:b5:09: 58:38:80:a0:ca:24:18:4b:51:da:02:e9:96:5c:08: ed:75:64:3d:6f:3f:a7:d5:d8:d5:56:84:2f:56:28: c6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:5C:6D:11:FA:A4:96:B2:E8:B6:69:0F:00:B6:6D:FD:34:98:21 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:0b:0a:17:78:68:d7:aa:5d:c1:dd:ed:ca:f9:08:7f:e9: be:c7:83:e5:26:99:50:b4:4a:0b:ba:94:93:ea:33:e9:57:7c: fd:69:94:21:ef:ac:3b:48:af:1e:5e:02:a2:88:7f:1d:62:6f: 5a:97:c2:13:f8:86:1b:64:25:7c:7c:9a:d5:8a:a8:6f:33:61: 6e:43:4c:5a:af:5c:e4:51:36:e3:91:05:ed:47:3f:22:25:6c: 81:6c:a3:33:6f:77:03:3a:48:7d:c9:32:ae:07:5d:3f:c0:8c: 8e:78:27:15:16:9c:8f:f9:aa:bc:d1:6d:e9:65:f2:57:5b:0d: d4:7c:6c:40:e6:5e:29:ba:b0:e1:f7:7d:91:25:39:78:14:ef: 77:d1:10:f1:14:a0:89:f8:b7:99:1c:a4:1f:86:d0:a3:63:0a: b7:50:35:12:85:98:5a:aa:d9:cd:bf:4e:7a:65:ca:d2:91:13: 3d:62:68:1c:89:46:b8:5b:5a:82:f8:8a:df:d0:ee:87:d2:64: 0e:fa:8a:27:72:84:8e:71:dc:da:6c:b9:c5:0f:87:f9:03:e0: 09:3c:af:3b:a2:2e:66:fd:fd:8b:48:2c:83:ec:4f:bd:1c:39: 13:01:01:48:d4:68:ee:90:2a:d8:3d:64:0f:b8:a9:27:ff:d7: 92:6e:16:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjQxMTIyMTQ1ODI1WhcNMjQxMTI5MTQ1ODI1WjAYMRYwFAYD VQQDEw02NzQwOWMxMS1hMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNGntTEfjpPXoLBJ69C9Vz29kU5lQBTe/Ea69VEeG1a0tczGh85sPEsHjLpc Ky33nwjC/VAMibGdcLmTTIkgNssOKWnJzGcdA2D+WluCVpD/LXgiHMVOG2IhTckA UqC4fZp2ke2F68cUSlM69dtFE8Hm/pIZp1yAZ0w4HuhReOwg3p4OulotWqWvnXk6 2IgCwHPJOUkaJrGfA9JKxvKtVUU12/B/eXWYSvvB9M7yAaK2wcRFvb6c+4PdEo4b 7QzpEzzfkqCHTJCF8m+EXWAwDPmZv0dDzeIiZ0Aayj9stQlYOICgyiQYS1HaAumW XAjtdWQ9bz+n1djVVoQvVijGHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh7XG0R +qSWsui2aQ8Atm39NJghMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+AsKF3ho16pdwd3tyvkIf+m+x4PlJplQtEoLupST6jPpV3z9aZQh 76w7SK8eXgKiiH8dYm9al8IT+IYbZCV8fJrViqhvM2FuQ0xar1zkUTbjkQXtRz8i JWyBbKMzb3cDOkh9yTKuB10/wIyOeCcVFpyP+aq80W3pZfJXWw3UfGxA5l4purDh 932RJTl4FO930RDxFKCJ+LeZHKQfhtCjYwq3UDUShZhaqtnNv056ZcrSkRM9Ymgc iUa4W1qC+Irf0O6H0mQO+ooncoSOcdzabLnFD4f5A+AJPK87oi5m/f2LSCyD7E+9 HDkTAQFI1GjukCrYPWQPuKkn/9eSbhaf -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org