$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: Re7OWNDOLVKRStGzWf+w2Curkx0YDV1PK+HWXBOZo5A= Subject key identifier: 66:32:46:11:72:E0:1F:E0:78:CA:06:DB:63:FD:91:15:97:A8:80:03 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 124C Signing time: Fri 22 Nov 2024 19:20:53 +0000 Manifest this update: Fri 22 Nov 2024 19:20:52 +0000 Manifest next update: Fri 29 Nov 2024 19:20:52 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: ofh/0gxsg22kBpajYvBsQQibDP/LpTrR1paVTVIXfUU=) 2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: yGqCF5v+KObB7qjgr+mXcAd6zcIwQYt5WbjRgGaPcCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Nov 22 19:20:52 2024 GMT Not After : Nov 29 19:20:52 2024 GMT Subject: CN=6740d995-84b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:6c:86:18:80:ff:92:f7:d3:73:e8:ca:db: 65:64:bb:c7:d6:13:16:d8:df:95:26:99:1c:ce:7d: 4b:d2:62:a4:2f:05:b1:46:4e:a8:38:54:83:e2:58: ef:43:cd:52:d1:3b:d4:d4:16:e9:a0:09:06:d0:7c: 0b:1e:e7:9e:f4:fe:d0:a0:c2:9e:15:a8:dc:5a:68: 7a:c7:77:cd:3c:65:d9:bb:13:15:fe:36:08:68:b9: c1:62:58:f3:72:cd:91:63:33:f9:b3:13:32:3f:d5: 34:29:55:64:67:12:54:a2:50:52:8f:3f:e0:a0:17: 14:45:82:63:08:a6:89:6f:67:e7:31:3d:be:6b:6d: 76:83:1a:f5:8d:3f:d5:96:7f:53:80:02:06:d5:e4: 1c:35:72:81:8d:f1:9b:64:e3:0a:8f:e4:b1:2f:db: 61:20:54:27:d9:b1:1b:a1:c6:10:9e:17:3b:83:0f: 30:2c:ad:d8:7b:62:74:d0:82:4f:cc:f5:46:0e:d3: 5f:7f:52:59:fb:f9:f9:49:25:4c:15:74:73:9f:f3: c7:44:07:ee:ad:10:98:9d:20:cc:25:2a:28:72:98: a6:68:3c:0f:1e:d7:ff:43:87:a9:60:b1:c3:85:be: 89:3a:c2:6c:88:6f:39:34:0d:43:93:bc:e9:ee:4b: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:46:11:72:E0:1F:E0:78:CA:06:DB:63:FD:91:15:97:A8:80:03 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:dd:92:ea:ed:8b:cd:e6:86:7c:bd:db:ef:ee:90:b4:b4:7c: 5c:79:f3:02:d3:dc:bf:d8:cc:bb:59:0b:e2:5d:fa:62:9e:19: ca:f1:80:3b:2d:e5:4b:d0:f0:69:f1:2a:63:2b:0b:94:83:1e: 4e:2d:48:0d:cf:8c:b3:b6:65:1f:ec:56:c3:9d:37:74:34:b1: c8:ef:06:dc:fd:d8:8e:5d:c1:c9:cf:cc:fe:4a:3e:e5:94:2e: 54:35:98:49:20:43:14:4f:a7:ba:41:b3:d7:aa:cc:a1:c3:ff: 30:af:f1:8c:be:a6:09:35:29:d8:fc:4b:da:65:bd:24:bb:64: 03:7d:7c:61:30:da:30:80:b2:a8:8f:d7:bc:ec:9c:28:5d:ea: 04:2a:92:e2:16:4a:a5:f2:75:bf:f8:53:36:da:03:6b:21:67: 3e:47:ba:ae:f3:22:e2:2d:97:bb:ed:d1:c3:17:a0:e1:32:a9: 7b:1a:40:c7:33:b6:da:ee:28:a3:d8:bd:f7:4d:03:05:1a:6d: 03:c4:f9:69:79:ac:bb:8f:86:15:5e:c7:f1:fa:d5:84:ec:ab: 97:a2:06:58:c5:3c:15:bb:34:95:ef:68:ee:a3:d1:65:17:72: 27:ab:96:cf:24:53:18:b1:b0:b3:b4:fd:6a:48:6a:3b:6e:56: fa:83:ac:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjQxMTIyMTkyMDUyWhcNMjQxMTI5MTkyMDUyWjAYMRYwFAYD VQQDEw02NzQwZDk5NS04NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd5shhiA/5L303PoyttlZLvH1hMW2N+VJpkczn1L0mKkLwWxRk6oOFSD4ljv Q81S0TvU1BbpoAkG0HwLHuee9P7QoMKeFajcWmh6x3fNPGXZuxMV/jYIaLnBYljz cs2RYzP5sxMyP9U0KVVkZxJUolBSjz/goBcURYJjCKaJb2fnMT2+a212gxr1jT/V ln9TgAIG1eQcNXKBjfGbZOMKj+SxL9thIFQn2bEbocYQnhc7gw8wLK3Ye2J00IJP zPVGDtNff1JZ+/n5SSVMFXRzn/PHRAfurRCYnSDMJSoocpimaDwPHtf/Q4epYLHD hb6JOsJsiG85NA1Dk7zp7ktAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYyRhFy 4B/geMoG22P9kRWXqIADMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv3ZLq7YvN5oZ8vdvv7pC0tHxcefMC09y/2My7WQviXfpinhnK8YA7 LeVL0PBp8SpjKwuUgx5OLUgNz4yztmUf7FbDnTd0NLHI7wbc/diOXcHJz8z+Sj7l lC5UNZhJIEMUT6e6QbPXqsyhw/8wr/GMvqYJNSnY/EvaZb0ku2QDfXxhMNowgLKo j9e87JwoXeoEKpLiFkql8nW/+FM22gNrIWc+R7qu8yLiLZe77dHDF6DhMql7GkDH M7ba7iij2L33TQMFGm0DxPlpeay7j4YVXsfx+tWE7KuXogZYxTwVuzSV72juo9Fl F3Inq5bPJFMYsbCztP1qSGo7blb6g6wn -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org