$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json) Hash identifier: Xz97aGAutnoqY30dZpYhUha/vWsi2WX4N6k/IL99Vs0= Subject key identifier: 83:2D:F7:B4:38:0B:5C:FF:19:40:74:EA:3B:F1:F9:B4:46:62:55:F8 Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft Manifest number: 0945 Signing time: Fri 22 Nov 2024 19:59:55 +0000 Manifest this update: Fri 22 Nov 2024 19:59:54 +0000 Manifest next update: Fri 29 Nov 2024 19:59:54 +0000 Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: QwoE4GjMKCQ9Qfjsgz4y3l2UU6IN2kONFyhVO+wj1Uc=) 2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: cYf6mtgN0UIoBT+azcEJHdfuuj+dkzfTVcYBwa1vqp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Validity Not Before: Nov 22 19:59:54 2024 GMT Not After : Nov 29 19:59:54 2024 GMT Subject: CN=6740e2ba-333d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:9a:43:e0:22:b6:c5:b1:20:c4:db:a6:aa: 5e:cc:37:b5:62:74:bc:0b:a7:bc:27:66:26:a0:2c: 9f:f4:76:1f:72:a0:30:46:80:4f:c0:b0:6e:05:51: 76:a4:d8:b6:31:8d:7a:d8:a8:d2:a5:f5:05:ee:59: 49:78:d5:b1:d6:4f:a8:1f:ff:25:73:74:d5:f8:36: fd:8c:95:a9:c9:9a:6a:77:b7:80:ee:e5:48:d6:2f: ca:55:ee:b3:c3:64:8a:2e:94:d6:12:2f:36:5b:ed: 63:e8:a0:fb:a3:a1:11:f6:ca:02:f3:65:28:6e:91: 9e:31:bd:91:ba:30:54:92:f1:24:77:13:c6:7a:e8: 77:5f:0f:b2:f9:73:bc:b7:b3:c9:89:bb:5a:43:bc: 97:e9:77:73:67:ff:b2:da:ca:06:17:a1:f7:c3:94: 5c:c1:20:b0:c2:71:b4:e0:a8:a2:f2:01:bb:a0:8c: 2f:60:fc:21:66:1d:95:b5:43:a9:a1:58:47:da:91: 21:39:8d:fb:55:b6:a0:fd:be:51:13:df:d3:df:4d: 15:61:83:90:fe:2b:ab:48:2a:4f:00:07:d7:77:9d: 50:21:ff:bb:f1:6c:b4:1a:b7:63:e3:f2:b9:96:04: cc:c7:a6:94:b5:7e:bc:fd:5e:7d:ce:ef:4f:ca:33: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2D:F7:B4:38:0B:5C:FF:19:40:74:EA:3B:F1:F9:B4:46:62:55:F8 X509v3 Authority Key Identifier: keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:aa:32:61:75:0b:8b:58:ea:be:6d:b0:48:c5:00:7b:99:44: 2d:9f:45:43:8d:98:24:31:eb:e6:60:67:50:c2:16:1c:ba:05: ab:08:09:85:3e:62:af:3c:b4:55:4f:f0:33:75:d9:71:d4:74: ad:b2:80:fe:16:40:fa:d3:bd:cc:27:0a:85:0d:7c:a0:42:d6: 85:a8:9b:6f:28:c0:b1:51:80:bf:19:52:2a:f1:63:f7:da:1a: 04:38:04:c3:1e:e1:53:d9:63:6e:86:35:48:29:2f:45:a7:43: 11:95:89:d7:43:0c:8a:9a:fd:19:0d:b9:3d:cd:5e:b9:63:a3: 56:7a:0c:1c:25:dc:da:fe:63:f4:51:93:d7:67:c1:0d:45:16: 37:b8:c2:50:c9:98:a3:44:61:81:3b:98:7c:d3:e7:f7:71:d2: 32:ee:60:cd:b9:f0:16:ae:9d:43:63:ad:bb:3e:ae:b3:39:c0: db:89:4a:fb:33:4e:18:d3:91:08:5c:e1:85:b9:56:a9:45:8a: 80:ed:0a:4d:d6:cc:ea:71:15:df:7f:e6:4e:c7:f0:25:ad:f6: a6:8d:7d:71:d8:97:68:cb:b3:2e:9a:d8:8b:3f:c5:38:1e:1d: 02:86:2c:03:b6:23:3d:72:3a:b0:ee:f2:84:98:e5:ab:9f:3c: cb:04:08:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4 OEExMEM2OTEwHhcNMjQxMTIyMTk1OTU0WhcNMjQxMTI5MTk1OTU0WjAYMRYwFAYD VQQDEw02NzQwZTJiYS0zMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAmaQ+AitsWxIMTbpqpezDe1YnS8C6e8J2YmoCyf9HYfcqAwRoBPwLBuBVF2 pNi2MY162KjSpfUF7llJeNWx1k+oH/8lc3TV+Db9jJWpyZpqd7eA7uVI1i/KVe6z w2SKLpTWEi82W+1j6KD7o6ER9soC82UobpGeMb2RujBUkvEkdxPGeuh3Xw+y+XO8 t7PJibtaQ7yX6XdzZ/+y2soGF6H3w5RcwSCwwnG04Kii8gG7oIwvYPwhZh2VtUOp oVhH2pEhOY37Vbag/b5RE9/T300VYYOQ/iurSCpPAAfXd51QIf+78Wy0Grdj4/K5 lgTMx6aUtX68/V59zu9PyjNrmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMt97Q4 C1z/GUB06jvx+bRGYlX4MB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2 REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI1Mi9GMDgxNzE2ODg2REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWti V2pLWmRKOHF2aWVJb1F4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjqjJhdQuLWOq+bbBIxQB7mUQtn0VDjZgkMevmYGdQwhYcugWrCAmF PmKvPLRVT/Azddlx1HStsoD+FkD6073MJwqFDXygQtaFqJtvKMCxUYC/GVIq8WP3 2hoEOATDHuFT2WNuhjVIKS9Fp0MRlYnXQwyKmv0ZDbk9zV65Y6NWegwcJdza/mP0 UZPXZ8ENRRY3uMJQyZijRGGBO5h80+f3cdIy7mDNufAWrp1DY627Pq6zOcDbiUr7 M04Y05EIXOGFuVapRYqA7QpN1szqcRXff+ZOx/AlrfamjX1x2Jdoy7MumtiLP8U4 Hh0ChiwDtiM9cjqw7vKEmOWrnzzLBAic -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org