$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: 4Jqq5ep7tMFEkIUMbs680lRH6HixED5TPFDfUMoDLhM= Subject key identifier: 19:F2:75:A1:13:76:DF:C6:53:6B:1D:98:3E:8F:97:A7:65:55:1A:82 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 05B8 Signing time: Wed 20 Nov 2024 21:26:35 +0000 Manifest this update: Wed 20 Nov 2024 21:26:34 +0000 Manifest next update: Wed 27 Nov 2024 21:26:34 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: iWd193wJSIeZNxMoZy//6nYoQ579ZKjRGObncDizkKc=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Nov 20 21:26:34 2024 GMT Not After : Nov 27 21:26:34 2024 GMT Subject: CN=673e540a-b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:89:a8:61:01:35:10:76:4f:b2:0b:b8:14: 06:5e:aa:34:96:4f:ec:a9:51:ee:93:4b:cc:6a:de: f8:55:a0:aa:45:1e:c4:db:b7:d8:8b:a0:d8:73:bd: 76:64:74:c8:e8:df:b8:cc:98:32:de:c1:fa:6e:50: 80:b8:9f:a3:e0:f2:3a:57:b6:73:9d:5c:62:97:d9: 38:0c:58:79:37:1f:b4:b1:19:29:86:43:44:9e:44: e8:bf:a1:6d:95:b5:af:2f:ab:2c:5f:00:f0:44:c9: 46:29:17:d9:5f:9d:32:96:94:66:19:5a:67:29:21: e9:59:66:7f:58:98:5d:1f:24:0b:e6:75:ab:1a:6a: 27:c0:93:6a:e7:9c:0d:2b:86:16:90:9d:35:51:06: 64:e1:7e:d4:2e:5f:03:e8:5c:fe:3d:9c:8b:c0:5a: b9:54:35:01:08:1d:a2:9e:f6:00:d9:57:e5:19:a1: 16:d8:3f:e9:8a:d6:71:85:21:ab:09:47:3b:52:eb: 47:5a:c1:9e:56:63:80:66:cf:2f:00:bf:25:80:c1: 3f:21:8e:73:b0:1b:49:6c:30:3d:e9:a4:09:be:10: a7:58:46:98:90:0d:5c:9b:c9:e3:9a:a5:04:cc:36: 93:fd:87:24:78:03:94:ab:ed:d6:59:82:e4:48:61: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F2:75:A1:13:76:DF:C6:53:6B:1D:98:3E:8F:97:A7:65:55:1A:82 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:2a:45:f4:db:4a:1d:14:d7:ff:0c:c9:82:76:4d:80:d1:6a: 08:7c:e6:74:fa:e2:48:c0:f6:6f:21:a9:02:5c:43:e8:1c:f0: f7:88:24:b5:38:52:88:5f:cb:90:64:b5:43:4b:a9:db:b8:71: 53:ff:d4:4b:9f:2c:4c:f7:81:a7:21:2d:7e:29:ab:f5:13:3a: c8:f5:ab:71:7a:11:54:8d:d8:04:9f:39:7c:59:f2:c7:ad:b3: a7:0c:cb:45:5a:ae:ec:76:3d:3f:c3:8b:f3:d5:9e:06:e8:37: a1:78:a6:25:77:b9:fe:3f:e8:93:d2:f7:86:d9:2f:fa:61:aa: 80:27:56:75:b8:ce:0a:a2:87:37:99:9f:94:52:88:ff:4d:d9: 27:bd:eb:0f:fb:32:78:4d:2d:b0:2f:80:43:84:06:f1:85:77: 91:11:c5:53:32:19:1b:d5:c3:09:00:25:62:5a:fc:6a:d6:fb: 28:6b:4c:ca:eb:48:fe:aa:b1:f6:2e:ff:0b:5a:30:46:dd:bf: a6:d9:5c:47:41:e7:da:d8:9a:08:e8:e8:b7:ba:76:44:09:2c: c1:9c:79:db:2d:41:69:36:29:7a:6f:59:94:69:7c:03:f6:bf: 37:4c:73:a6:66:9e:ba:86:b1:70:4c:28:59:5b:c5:40:89:45: 1f:51:9d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjQxMTIwMjEyNjM0WhcNMjQxMTI3MjEyNjM0WjAYMRYwFAYD VQQDEw02NzNlNTQwYS1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohOJqGEBNRB2T7ILuBQGXqo0lk/sqVHuk0vMat74VaCqRR7E27fYi6DYc712 ZHTI6N+4zJgy3sH6blCAuJ+j4PI6V7ZznVxil9k4DFh5Nx+0sRkphkNEnkTov6Ft lbWvL6ssXwDwRMlGKRfZX50ylpRmGVpnKSHpWWZ/WJhdHyQL5nWrGmonwJNq55wN K4YWkJ01UQZk4X7ULl8D6Fz+PZyLwFq5VDUBCB2invYA2VflGaEW2D/pitZxhSGr CUc7UutHWsGeVmOAZs8vAL8lgME/IY5zsBtJbDA96aQJvhCnWEaYkA1cm8njmqUE zDaT/YckeAOUq+3WWYLkSGEzewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnydaET dt/GU2sdmD6Pl6dlVRqCMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdKkX020odFNf/DMmCdk2A0WoIfOZ0+uJIwPZvIakCXEPoHPD3iCS1 OFKIX8uQZLVDS6nbuHFT/9RLnyxM94GnIS1+Kav1EzrI9atxehFUjdgEnzl8WfLH rbOnDMtFWq7sdj0/w4vz1Z4G6DeheKYld7n+P+iT0veG2S/6YaqAJ1Z1uM4Kooc3 mZ+UUoj/TdknvesP+zJ4TS2wL4BDhAbxhXeREcVTMhkb1cMJACViWvxq1vsoa0zK 60j+qrH2Lv8LWjBG3b+m2VxHQefa2JoI6Oi3unZECSzBnHnbLUFpNil6b1mUaXwD 9r83THOmZp66hrFwTChZW8VAiUUfUZ0e -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:43 2024 by rpki-client on console-fra.rpki-client.org