$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: YybqhUa6B1gnhc5dNkFU/H/dhAxKaf1myH6eppFgcpM= Subject key identifier: 49:40:2E:4B:D9:D0:32:CA:32:58:38:AF:51:F0:0A:6F:44:55:57:7D Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 2310 Signing time: Fri 22 Nov 2024 16:22:23 +0000 Manifest this update: Fri 22 Nov 2024 16:22:22 +0000 Manifest next update: Fri 29 Nov 2024 16:22:22 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: btEEptyUvvMGU6gNVVPgV7rkZNULQfnxzjHwo101haw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Nov 22 16:22:22 2024 GMT Not After : Nov 29 16:22:22 2024 GMT Subject: CN=6740afbf-64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:e1:8f:b1:77:2c:7e:3b:76:c9:2c:0b:25: 50:c9:b5:34:6d:4f:f6:23:8d:89:70:f7:b3:91:9e: dc:9e:fe:d8:5d:6d:90:b3:25:5d:87:ea:ef:42:83: d6:78:9f:bf:40:89:a5:3c:0f:1a:26:81:1b:ae:ee: b4:61:34:cd:90:ed:76:6e:d1:09:8f:05:9e:6d:8c: df:62:93:a8:77:5b:c7:da:5b:ec:ce:5d:2e:b9:72: 92:01:d2:d8:60:56:7b:ff:04:0d:06:7c:97:1f:b4: 76:b4:77:be:08:c9:6d:a2:15:3d:f9:c7:0b:34:6b: 4b:06:17:b2:8f:84:9b:27:75:f4:16:95:2c:43:79: 06:a0:11:5a:a0:3a:2c:dd:51:81:ba:fe:df:a3:69: 97:02:86:25:9f:28:6b:9f:a8:cc:bc:63:61:8e:af: 84:0a:14:6c:3e:73:09:12:9e:9a:c1:0d:5f:29:e1: c8:61:47:95:5a:aa:de:b4:af:7a:0e:11:2f:20:ba: 76:6d:7f:8c:31:31:61:98:f3:25:10:e0:5b:ac:c0: 38:49:62:4a:50:dc:75:51:60:a9:2d:15:6b:bb:2f: 33:41:b6:05:16:a9:9e:1b:b6:4b:e0:f7:ea:d9:06: 2a:35:fe:6e:d1:0b:a2:a8:4d:bd:5b:52:98:80:fc: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:2E:4B:D9:D0:32:CA:32:58:38:AF:51:F0:0A:6F:44:55:57:7D X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:09:9d:1d:2b:97:4f:0d:f2:e2:3f:f1:56:7c:a2:73:0b: 45:da:0a:fb:80:ba:a5:bc:44:55:cb:5b:22:ad:fa:e5:0c:13: ca:fa:78:d2:ea:12:a6:94:a6:76:3e:38:8e:81:c9:12:62:9e: 56:b3:59:99:ff:a0:a0:59:b5:68:f3:ce:98:23:52:16:ba:73: dc:22:39:17:ce:83:3c:33:53:85:05:04:45:2b:de:16:5e:b7: 3c:0e:11:c6:3e:63:46:e9:75:3d:27:9d:39:1a:60:bb:df:43: 03:d3:65:a1:40:62:cb:e9:e8:e4:eb:e5:80:9c:b5:58:b8:4d: 28:1b:23:ff:33:69:f1:d7:d3:5a:5e:01:1f:b8:9a:79:59:cc: d6:47:65:c7:c8:be:78:d9:8b:3a:40:4f:c6:74:05:96:dc:81: 3c:45:f0:88:e1:8b:4f:5c:3f:2b:95:0f:c7:6e:f8:fb:12:5f: 0b:0f:2a:4d:08:55:41:06:a2:b4:9f:ee:47:6e:0b:71:c0:f8: 0f:57:17:3e:95:39:b5:f3:d3:a7:7c:7b:e1:aa:1b:9e:23:bf: 5c:f8:db:cd:49:5b:10:91:62:9f:9a:28:3f:49:d3:e7:f3:f1: dd:87:02:42:71:82:3e:d5:f1:4e:3b:53:14:eb:69:8a:b4:19: ce:54:9a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjQxMTIyMTYyMjIyWhcNMjQxMTI5MTYyMjIyWjAYMRYwFAYD VQQDEw02NzQwYWZiZi02NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0K7hj7F3LH47dsksCyVQybU0bU/2I42JcPezkZ7cnv7YXW2QsyVdh+rvQoPW eJ+/QImlPA8aJoEbru60YTTNkO12btEJjwWebYzfYpOod1vH2lvszl0uuXKSAdLY YFZ7/wQNBnyXH7R2tHe+CMltohU9+ccLNGtLBheyj4SbJ3X0FpUsQ3kGoBFaoDos 3VGBuv7fo2mXAoYlnyhrn6jMvGNhjq+EChRsPnMJEp6awQ1fKeHIYUeVWqretK96 DhEvILp2bX+MMTFhmPMlEOBbrMA4SWJKUNx1UWCpLRVruy8zQbYFFqmeG7ZL4Pfq 2QYqNf5u0QuiqE29W1KYgPzU8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElALkvZ 0DLKMlg4r1HwCm9EVVd9MB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBflgmdHSuXTw3y4j/xVnyicwtF2gr7gLqlvERVy1sirfrlDBPK+njS 6hKmlKZ2PjiOgckSYp5Ws1mZ/6CgWbVo886YI1IWunPcIjkXzoM8M1OFBQRFK94W Xrc8DhHGPmNG6XU9J505GmC730MD02WhQGLL6ejk6+WAnLVYuE0oGyP/M2nx19Na XgEfuJp5WczWR2XHyL542Ys6QE/GdAWW3IE8RfCI4YtPXD8rlQ/Hbvj7El8LDypN CFVBBqK0n+5HbgtxwPgPVxc+lTm189OnfHvhqhueI79c+NvNSVsQkWKfmig/SdPn 8/HdhwJCcYI+1fFOO1MU62mKtBnOVJoP -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org