$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: Ommq8DN4a/poMj2g0M45X3kNsZMjo9CWdBhJMdTwthY= Subject key identifier: 56:6F:5D:98:61:2E:A0:07:E5:16:F9:22:A8:D6:A4:7A:71:BE:82:A7 Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0B7F Signing time: Fri 22 Nov 2024 20:41:20 +0000 Manifest this update: Fri 22 Nov 2024 20:41:19 +0000 Manifest next update: Fri 29 Nov 2024 20:41:19 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: cFoT5Qaflnff7R+VSXUY0ah0tvpT9PALD1YtEBCi1ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Nov 22 20:41:19 2024 GMT Not After : Nov 29 20:41:19 2024 GMT Subject: CN=6740ec70-4cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:4a:12:b0:67:01:c9:d5:99:86:c0:55:ea: 01:f2:bb:e3:be:80:6a:9f:20:4f:f5:53:77:8f:cf: 50:b3:40:a5:ad:c3:28:3a:32:32:34:c1:c2:b1:f1: 02:4e:e3:04:a0:04:21:cb:86:3c:51:4c:48:a6:24: 97:cc:b5:6a:90:7c:4b:0c:87:91:18:50:6a:20:6a: ab:d3:57:3e:26:6b:2a:75:2d:73:be:06:9e:05:2f: be:3d:b3:e2:52:f0:9e:74:b8:60:ba:98:eb:68:0f: bd:5d:a8:f2:3d:fc:4a:9d:23:c1:d4:80:40:d3:4a: bb:2f:92:14:74:ad:be:48:ad:9f:b7:d7:e8:80:01: 07:de:ce:52:ca:e5:2c:33:2b:3b:c5:12:da:c5:48: 98:83:89:49:84:43:79:41:d0:0f:e6:e7:72:2f:f4: 38:13:39:61:20:fa:1d:a3:1b:1b:c0:98:06:ff:8b: 99:1d:26:0e:b9:d6:4b:df:40:b2:0c:de:a2:a1:48: ef:b4:3e:4d:e6:10:30:5e:db:d6:a4:d3:44:ea:5e: 07:69:44:92:1c:fb:ab:43:95:09:84:54:0c:e2:c4: 76:77:d5:ff:30:39:bf:21:67:50:c8:4b:cf:8a:04: c2:05:ab:77:4d:27:65:7c:2e:34:07:93:c9:97:39: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6F:5D:98:61:2E:A0:07:E5:16:F9:22:A8:D6:A4:7A:71:BE:82:A7 X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b2:b6:fe:b0:5c:37:4c:9e:0c:4f:ee:2f:8a:7f:5b:86:3c: 07:08:8e:57:4a:0d:f7:d6:8a:50:90:53:a7:fd:06:9a:94:c2: b3:23:a3:8b:92:6a:5f:ce:a0:7f:5f:d2:44:4e:00:89:67:8c: 31:93:15:a2:6d:3d:cd:d0:4e:72:5f:d3:74:c4:95:1a:e6:24: 6b:75:13:d2:a5:6c:bb:62:0f:03:47:ad:64:a1:9c:f4:48:9a: 3f:2b:a8:87:8a:93:9e:e4:24:33:c6:4a:77:c6:da:03:fb:0b: 0b:5d:9f:9e:48:dc:a8:ad:61:31:2c:25:f1:aa:d7:be:b2:25: c8:d3:36:e8:58:b7:5a:57:6a:5c:80:6f:09:a0:d7:f1:b2:ef: 0c:cc:b2:65:9d:a5:c5:42:22:f4:cc:6c:7e:de:a6:e9:d9:90: df:b3:35:bf:29:c0:83:4e:b8:3e:2b:18:d9:ff:30:28:49:4f: 09:84:5b:2c:32:8c:5b:fb:49:78:29:e3:4c:b3:a8:5a:51:ad: 56:45:2f:33:9f:48:6b:58:ec:a6:9c:3a:0c:30:c5:ed:65:22: c3:73:a3:10:e0:15:96:03:ae:2e:4c:9f:b0:a1:6e:fe:93:9a: 43:9f:da:18:f2:78:88:20:23:71:9d:2d:7a:16:aa:ed:16:03: 27:23:46:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjQxMTIyMjA0MTE5WhcNMjQxMTI5MjA0MTE5WjAYMRYwFAYD VQQDEw02NzQwZWM3MC00Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2ZKErBnAcnVmYbAVeoB8rvjvoBqnyBP9VN3j89Qs0ClrcMoOjIyNMHCsfEC TuMEoAQhy4Y8UUxIpiSXzLVqkHxLDIeRGFBqIGqr01c+JmsqdS1zvgaeBS++PbPi UvCedLhgupjraA+9XajyPfxKnSPB1IBA00q7L5IUdK2+SK2ft9fogAEH3s5SyuUs Mys7xRLaxUiYg4lJhEN5QdAP5udyL/Q4EzlhIPodoxsbwJgG/4uZHSYOudZL30Cy DN6ioUjvtD5N5hAwXtvWpNNE6l4HaUSSHPurQ5UJhFQM4sR2d9X/MDm/IWdQyEvP igTCBat3TSdlfC40B5PJlzlmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZvXZhh LqAH5Rb5IqjWpHpxvoKnMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAksrb+sFw3TJ4MT+4vin9bhjwHCI5XSg331opQkFOn/QaalMKzI6OL kmpfzqB/X9JETgCJZ4wxkxWibT3N0E5yX9N0xJUa5iRrdRPSpWy7Yg8DR61koZz0 SJo/K6iHipOe5CQzxkp3xtoD+wsLXZ+eSNyorWExLCXxqte+siXI0zboWLdaV2pc gG8JoNfxsu8MzLJlnaXFQiL0zGx+3qbp2ZDfszW/KcCDTrg+KxjZ/zAoSU8JhFss Moxb+0l4KeNMs6haUa1WRS8zn0hrWOymnDoMMMXtZSLDc6MQ4BWWA64uTJ+woW7+ k5pDn9oY8niIICNxnS16FqrtFgMnI0bU -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org