$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: 4/QIpIBKFaPq5itgQRYFL/GYHeAazb5KriaKZ+aA8TE= Subject key identifier: 66:9F:00:98:45:AC:B7:64:9C:02:C4:C8:F7:1F:B1:A3:A9:F4:D5:CC Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 164B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 1636 Signing time: Fri 22 Nov 2024 16:43:22 +0000 Manifest this update: Fri 22 Nov 2024 16:43:21 +0000 Manifest next update: Fri 29 Nov 2024 16:43:21 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: yodq1XpdJX+fOYtUp97G9tJXAUj6HPsq4BJWDXeh9CA=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5707 (0x164b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Nov 22 16:43:21 2024 GMT Not After : Nov 29 16:43:21 2024 GMT Subject: CN=6740b4aa-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:39:af:7f:60:c7:c0:c5:75:df:d1:21:1a: 1b:9d:c7:81:6a:d9:1e:4a:d3:bd:44:b5:b3:42:48: 18:f7:c0:5e:1f:5f:97:c3:4f:0f:42:17:d7:76:9e: 25:ed:16:31:61:1e:85:7b:3e:35:d4:57:02:93:69: f3:d8:13:a0:c4:47:af:53:a2:ed:ae:2d:96:3a:f2: 45:d3:76:a3:ae:2b:b9:be:1b:e5:8a:47:e0:46:0c: 61:0a:85:ba:97:e3:5d:60:27:89:04:9b:8b:20:17: a3:e5:96:92:6d:99:f0:cd:4b:e3:85:6c:ef:ff:cd: 77:f7:98:5d:d4:a9:59:b9:1a:a5:50:a2:b5:08:bf: 02:2d:d2:ce:1b:7f:dd:ed:2c:7b:a7:a7:ef:78:f2: 5a:00:34:04:a6:82:b7:49:a0:dd:b3:3f:70:b8:4d: 7c:f8:93:b7:05:de:f2:14:45:9e:33:d0:c6:48:8f: 25:86:98:50:c0:7e:46:02:28:41:1a:ce:18:f7:ca: 00:f7:51:1a:f8:8a:c2:e9:ee:a5:25:38:6d:0e:39: c5:58:93:8e:00:fd:b9:36:4f:7b:63:c1:33:92:a9: 77:02:01:77:bd:d5:f0:e3:e8:a9:a3:fe:89:ab:61: 44:b7:b6:5d:90:6c:92:07:be:6b:74:d5:45:74:37: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:00:98:45:AC:B7:64:9C:02:C4:C8:F7:1F:B1:A3:A9:F4:D5:CC X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:b2:95:d3:67:e1:bc:ef:9d:e8:d1:57:6d:40:1d:cf:32: e0:a9:5a:e8:e9:16:75:1b:64:ca:fd:12:d7:84:4c:b4:94:5e: d0:96:3b:08:b5:4c:dd:18:dc:13:42:22:2f:b6:03:91:84:3a: 0a:81:2f:f3:2b:88:37:9c:b2:0e:51:47:bd:9d:98:7e:bc:21: 50:fd:52:08:23:02:90:23:70:0d:79:aa:8c:97:4b:44:9e:d7: 7e:cf:69:62:88:22:0b:31:34:26:cf:65:ff:c9:ab:8b:4f:b3: 6c:3f:0d:bd:b3:b2:93:77:b7:72:35:1e:c1:4e:b3:6e:f9:7f: 55:b6:22:85:60:bc:de:a7:0e:3a:f0:a5:f4:3d:dd:9f:60:a2: a0:e9:d7:76:c5:2b:32:e2:42:40:6b:9d:f2:9a:ff:82:2b:69: f4:0f:8b:8d:11:d4:24:3e:19:98:84:b8:e9:ba:54:0e:cd:76: d0:2b:22:69:ab:bf:95:ef:ca:31:9a:2b:66:89:d2:e4:5a:d9: fc:d3:73:4f:bb:2f:a4:8c:12:40:9f:c2:08:f2:a6:c8:38:52: 36:fa:77:9b:03:f2:5a:89:76:d7:62:5d:5e:be:4f:21:32:14: c8:a3:a7:1d:2e:e9:e1:08:22:b5:0f:0e:27:a5:3a:fc:bb:ad: fd:a3:2d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjQxMTIyMTY0MzIxWhcNMjQxMTI5MTY0MzIxWjAYMRYwFAYD VQQDEw02NzQwYjRhYS1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHc5r39gx8DFdd/RIRobnceBatkeStO9RLWzQkgY98BeH1+Xw08PQhfXdp4l 7RYxYR6Fez411FcCk2nz2BOgxEevU6Ltri2WOvJF03ajriu5vhvlikfgRgxhCoW6 l+NdYCeJBJuLIBej5ZaSbZnwzUvjhWzv/81395hd1KlZuRqlUKK1CL8CLdLOG3/d 7Sx7p6fvePJaADQEpoK3SaDdsz9wuE18+JO3Bd7yFEWeM9DGSI8lhphQwH5GAihB Gs4Y98oA91Ea+IrC6e6lJThtDjnFWJOOAP25Nk97Y8Ezkql3AgF3vdXw4+ipo/6J q2FEt7ZdkGySB75rdNVFdDdaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGafAJhF rLdknALEyPcfsaOp9NXMMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjpLKV02fhvO+d6NFXbUAdzzLgqVro6RZ1G2TK/RLXhEy0lF7QljsI tUzdGNwTQiIvtgORhDoKgS/zK4g3nLIOUUe9nZh+vCFQ/VIIIwKQI3ANeaqMl0tE ntd+z2liiCILMTQmz2X/yauLT7NsPw29s7KTd7dyNR7BTrNu+X9VtiKFYLzepw46 8KX0Pd2fYKKg6dd2xSsy4kJAa53ymv+CK2n0D4uNEdQkPhmYhLjpulQOzXbQKyJp q7+V78oxmitmidLkWtn803NPuy+kjBJAn8II8qbIOFI2+nebA/JaiXbXYl1evk8h MhTIo6cdLunhCCK1Dw4npTr8u639oy17 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org