$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: mJJqlduarYAFodPaPKXBx0Eiz+dkbd/O1hYWNX/NDKQ= Subject key identifier: 98:9C:9B:8F:5B:09:4D:A7:BB:42:74:12:64:CD:11:92:C6:41:0A:EE Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 05B3 Signing time: Fri 22 Nov 2024 22:40:38 +0000 Manifest this update: Fri 22 Nov 2024 22:40:37 +0000 Manifest next update: Fri 29 Nov 2024 22:40:37 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: /LUBL/gDloeoiLC1MtyMqdJs7wWpNTLeUTQiFTaDJB4=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: DD3W62iXqfM6WVvA6ioa/M9Aja29c1MxBPKpE9uTGH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Nov 22 22:40:37 2024 GMT Not After : Nov 29 22:40:37 2024 GMT Subject: CN=67410866-2452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:3e:95:6b:1f:49:18:94:71:27:b4:13:10: fb:ec:71:3e:3f:1f:44:66:13:31:3a:b3:d4:ca:c9: 96:f2:51:1c:4c:37:ac:32:63:1a:d8:23:fd:ee:70: fe:58:dd:d5:8a:ee:85:92:10:9c:aa:6c:9f:39:15: aa:53:74:b8:a0:c9:bd:a7:8a:92:fe:e2:4e:56:f0: 50:f6:b8:6a:9d:57:4f:df:15:56:dd:d1:42:b8:92: 5c:d3:bf:13:10:dd:4a:50:da:59:42:2d:52:56:12: 2a:b9:5f:76:43:84:6c:a2:30:3c:8c:a8:9a:a6:a0: 3d:06:3e:3c:39:5a:b7:72:5c:f1:c9:78:bc:af:1b: 01:05:89:d7:04:ac:1c:09:bb:94:93:32:5f:ff:72: 25:41:26:3d:f0:38:58:d8:3c:a1:11:d7:ff:cb:6c: 8b:f0:e8:de:93:5f:4e:be:24:91:a3:f1:61:3d:cc: 9f:84:2f:22:4f:45:05:87:19:ab:91:57:20:59:51: 94:d2:e8:4d:e2:5c:63:c8:f5:b1:de:d9:8c:5c:fe: 5a:98:2b:ab:b0:7c:0e:d2:32:04:91:a7:db:88:d4: 1f:79:6b:3e:be:43:47:0a:4f:39:2d:a5:91:d6:11: 2c:cc:94:15:e3:c4:64:1f:df:1a:08:12:f1:9f:7b: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9C:9B:8F:5B:09:4D:A7:BB:42:74:12:64:CD:11:92:C6:41:0A:EE X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a4:ee:7c:8c:75:e4:f3:0c:d6:5b:b4:9e:3f:9e:1c:91:5b: f1:d8:91:1b:4b:50:02:ca:1b:4c:e9:82:8b:bf:b4:b8:e1:f4: 6f:18:76:fd:67:ed:1c:1f:40:f4:51:4f:91:2a:71:69:2e:e3: 34:9e:22:2a:e0:d1:47:d4:ce:85:21:e8:25:96:23:00:ea:44: fe:10:31:ef:97:b7:6d:9a:da:c1:0d:da:1c:4a:e8:71:47:86: 04:11:92:30:83:7f:03:c6:0f:3e:49:13:9c:4d:67:97:a7:92: e6:25:53:a6:0e:47:04:4b:f0:84:cd:67:73:fc:20:a6:16:6f: 15:d0:6c:81:fa:a2:a7:88:85:33:18:94:40:dc:c9:b5:6f:dc: db:ea:61:c7:d0:92:c0:69:96:69:28:c8:59:13:c7:dc:7e:e7: 3c:99:90:e6:97:4d:a7:78:ef:b3:00:34:05:eb:73:7e:2e:67: e9:80:dc:34:ae:1c:6f:80:40:1f:80:80:d0:88:d8:8a:86:d0: 66:9a:44:b9:79:94:01:44:b8:8f:6a:6b:fc:18:86:2c:2a:ac: 6c:2c:4a:3f:d4:f0:0e:fa:11:89:44:b9:2e:be:8f:04:cf:f4: bd:af:0f:a6:44:07:04:2c:5d:04:ce:48:b6:dc:e3:2b:b5:c4: 1c:d5:a0:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjQxMTIyMjI0MDM3WhcNMjQxMTI5MjI0MDM3WjAYMRYwFAYD VQQDEw02NzQxMDg2Ni0yNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRI+lWsfSRiUcSe0ExD77HE+Px9EZhMxOrPUysmW8lEcTDesMmMa2CP97nD+ WN3Viu6FkhCcqmyfORWqU3S4oMm9p4qS/uJOVvBQ9rhqnVdP3xVW3dFCuJJc078T EN1KUNpZQi1SVhIquV92Q4RsojA8jKiapqA9Bj48OVq3clzxyXi8rxsBBYnXBKwc CbuUkzJf/3IlQSY98DhY2DyhEdf/y2yL8Ojek19OviSRo/FhPcyfhC8iT0UFhxmr kVcgWVGU0uhN4lxjyPWx3tmMXP5amCursHwO0jIEkafbiNQfeWs+vkNHCk85LaWR 1hEszJQV48RkH98aCBLxn3sIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJicm49b CU2nu0J0EmTNEZLGQQruMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBupO58jHXk8wzWW7SeP54ckVvx2JEbS1ACyhtM6YKLv7S44fRvGHb9 Z+0cH0D0UU+RKnFpLuM0niIq4NFH1M6FIeglliMA6kT+EDHvl7dtmtrBDdocSuhx R4YEEZIwg38Dxg8+SROcTWeXp5LmJVOmDkcES/CEzWdz/CCmFm8V0GyB+qKniIUz GJRA3Mm1b9zb6mHH0JLAaZZpKMhZE8fcfuc8mZDml02neO+zADQF63N+LmfpgNw0 rhxvgEAfgIDQiNiKhtBmmkS5eZQBRLiPamv8GIYsKqxsLEo/1PAO+hGJRLkuvo8E z/S9rw+mRAcELF0Ezki23OMrtcQc1aBe -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org