$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: b+ECx29KOysYediK9cxSneD0CGSpwyebyFxC9rvGYJ4= Subject key identifier: 36:52:1E:90:F9:C9:56:18:1B:38:8F:68:C7:BF:C8:56:96:E9:BD:8E Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 04D3 Signing time: Fri 22 Nov 2024 23:23:17 +0000 Manifest this update: Fri 22 Nov 2024 23:23:15 +0000 Manifest next update: Fri 29 Nov 2024 23:23:15 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: QIXBnPQEvNdQwK+yijwfI5GEYoilFiZS6brWYOoxab4=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: FKFKH5eFofFRTvqGy9vDB52V4WqF8Uh4JVrswNbtjMM=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: C85Ln946y9Tr5r2XkfYdY+5M9KTyQRGliz2lUS9dRFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Nov 22 23:23:15 2024 GMT Not After : Nov 29 23:23:15 2024 GMT Subject: CN=67411264-f91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:64:cf:81:2f:8c:00:84:ed:97:0b:90:04: 13:b7:4d:e7:d1:2e:d7:55:fe:61:f8:3f:52:86:a7: 4d:ff:48:c8:dc:6b:f6:2c:f1:d4:a1:6f:b3:18:05: 07:79:64:16:03:ab:4c:88:f9:f2:c1:66:82:ec:60: 44:df:5c:54:e4:57:54:0d:89:ef:63:98:7c:5e:a4: 43:1a:eb:f1:ff:e5:5e:75:f2:89:00:3a:c6:5f:dc: 2e:b0:30:73:96:a9:75:b8:fd:ad:1c:14:35:e6:4d: 68:c5:98:0d:a0:47:e3:22:1e:78:88:b6:d5:a6:fa: 0d:08:fc:ae:22:96:a0:3b:5f:96:4c:84:d4:b3:7b: 0b:bd:93:e9:87:5b:0c:eb:7d:4d:48:d3:9b:21:8a: 8e:32:cb:c0:f2:6c:0b:65:4a:08:c6:3c:d8:53:b7: 2e:b6:d4:2e:92:9f:41:d1:2b:6a:ba:88:c3:e1:0c: f8:9a:82:97:53:0a:c6:e7:aa:80:fc:1c:89:a5:8d: 08:78:7d:ba:82:c1:80:c0:f2:c2:6b:40:ae:7b:82: 8b:0a:23:6d:0e:c5:39:c6:5a:43:d3:3b:1c:b8:c8: af:6b:6e:21:eb:92:48:b3:60:6c:39:79:c0:80:e2: d1:4a:59:27:11:e5:d3:cf:2b:23:d4:7b:46:88:4b: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:1E:90:F9:C9:56:18:1B:38:8F:68:C7:BF:C8:56:96:E9:BD:8E X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:b0:f4:72:6d:7c:77:f1:56:6b:f8:cc:60:c7:e5:f7:b7: 55:ba:bd:87:80:1d:3e:94:24:ca:3e:61:f1:2b:01:1f:c8:6b: 44:19:91:6c:e4:08:ed:f4:f0:d6:cb:38:6a:ce:c8:ad:be:b4: 77:28:88:fa:2f:63:7b:e1:af:93:99:ef:30:8a:0a:ac:0d:30: a9:bb:b9:45:d2:53:00:62:4e:72:95:1f:ac:56:9b:60:98:fa: c6:56:f7:fb:c0:4c:79:7b:36:51:ad:9f:17:fd:a2:05:cf:79: 3f:0a:f8:88:ee:85:c6:0a:34:2a:e6:b9:41:2b:b0:48:7a:f0: 1a:3c:1f:f5:6d:0e:6b:7a:d7:1a:71:15:57:0a:18:60:d6:b8: 12:ee:c5:3f:a2:3d:7f:08:68:97:73:5b:12:26:b0:13:73:52: ac:be:a6:2d:16:11:bd:cf:57:de:f9:99:e8:2f:4e:87:df:46: 95:b6:07:8b:64:bc:c0:2d:db:78:53:ce:77:78:ff:ef:f8:4c: 66:ee:d1:a2:66:16:50:96:31:9d:eb:03:3f:3d:fa:04:af:3a: a1:2f:4b:77:59:cc:09:fc:f6:e2:a5:f3:aa:6f:10:1a:e9:57: 54:8d:af:fb:6a:73:7a:a6:ad:33:71:8b:5c:dd:82:2b:e5:ea: 77:16:00:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjQxMTIyMjMyMzE1WhcNMjQxMTI5MjMyMzE1WjAYMRYwFAYD VQQDEw02NzQxMTI2NC1mOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFJkz4EvjACE7ZcLkAQTt03n0S7XVf5h+D9ShqdN/0jI3Gv2LPHUoW+zGAUH eWQWA6tMiPnywWaC7GBE31xU5FdUDYnvY5h8XqRDGuvx/+VedfKJADrGX9wusDBz lql1uP2tHBQ15k1oxZgNoEfjIh54iLbVpvoNCPyuIpagO1+WTITUs3sLvZPph1sM 631NSNObIYqOMsvA8mwLZUoIxjzYU7cuttQukp9B0StquojD4Qz4moKXUwrG56qA /ByJpY0IeH26gsGAwPLCa0Cue4KLCiNtDsU5xlpD0zscuMiva24h65JIs2BsOXnA gOLRSlknEeXTzysj1HtGiEvuhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZSHpD5 yVYYGziPaMe/yFaW6b2OMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXK7D0cm18d/FWa/jMYMfl97dVur2HgB0+lCTKPmHxKwEfyGtEGZFs 5Ajt9PDWyzhqzsitvrR3KIj6L2N74a+Tme8wigqsDTCpu7lF0lMAYk5ylR+sVptg mPrGVvf7wEx5ezZRrZ8X/aIFz3k/CviI7oXGCjQq5rlBK7BIevAaPB/1bQ5retca cRVXChhg1rgS7sU/oj1/CGiXc1sSJrATc1KsvqYtFhG9z1fe+ZnoL06H30aVtgeL ZLzALdt4U853eP/v+Exm7tGiZhZQljGd6wM/PfoErzqhL0t3WcwJ/PbipfOqbxAa 6VdUja/7anN6pq0zcYtc3YIr5ep3FgBQ -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:31 2024 by rpki-client on console-fra.rpki-client.org