$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: Bt9FTuzFX42wBsgM1KI4r13484q+2VobasuVAxYeL/4= Subject key identifier: D0:37:F8:CC:B1:31:F8:34:44:D3:D2:1A:97:56:1B:77:A6:54:9F:A0 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: A4 Signing time: Thu 21 Nov 2024 04:03:16 +0000 Manifest this update: Thu 21 Nov 2024 04:03:16 +0000 Manifest next update: Thu 28 Nov 2024 04:03:16 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: 3SlwwSSyMX78Pmg7cX3cvourHsD5ibIINm+X0MjvwGA=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: XHMOruIuotrAORNoRDyzc4wQnaHhlyXVenycmcJNbBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Nov 21 04:03:16 2024 GMT Not After : Nov 28 04:03:16 2024 GMT Subject: CN=673eb104-ec56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:8b:b1:1d:cb:c0:7c:ce:69:84:18:7d:64: 63:34:93:e7:54:5b:90:6b:ff:08:dc:c7:39:b4:43: 76:8e:32:0a:be:29:84:f7:fc:e9:52:21:cd:46:19: 8b:45:06:01:e9:7e:70:5a:2d:6e:83:f9:01:2d:15: 26:4e:6f:f0:9d:07:7b:ad:09:a4:7b:cf:56:a5:f7: 35:5c:10:e8:08:8e:f6:71:4a:3c:ac:b8:a3:09:9a: cd:10:45:d5:cf:31:18:b7:f1:8d:dc:5d:6e:f5:a4: e6:17:88:be:58:df:15:67:74:2e:5b:03:cc:f2:44: 98:1a:45:6a:cb:77:af:48:a9:fe:9e:af:9b:d6:dd: a3:1c:f9:60:05:e5:bd:ee:81:4f:13:17:e0:20:f5: 8f:0c:12:3f:91:a4:85:8e:08:15:60:ce:1d:4b:ed: ef:d1:61:15:73:f0:0e:30:99:fe:27:3b:23:76:5a: d6:30:3e:94:fe:5e:61:29:39:e9:e5:6d:16:e8:67: 0b:ae:a8:a8:67:ef:4c:bf:f8:e5:e9:37:c7:1b:49: 9b:58:23:a2:a2:66:b2:bd:71:5a:49:62:e7:c7:2c: 9a:28:ff:ce:36:1a:2f:0e:99:81:53:05:25:a5:eb: f4:2c:0b:41:fb:80:37:3a:3e:b3:5f:e2:24:c9:2c: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:F8:CC:B1:31:F8:34:44:D3:D2:1A:97:56:1B:77:A6:54:9F:A0 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:14:b0:a6:ff:27:2c:d3:02:93:b7:a0:8f:01:e7:74:84:cb: b1:3f:3b:94:e2:7c:2f:cf:55:83:14:44:57:40:bf:26:cd:8b: 1e:cf:df:e8:75:1d:21:b5:82:c6:4f:41:1a:1b:f2:fb:b2:a6: af:7f:94:a3:f4:2f:57:2e:d6:76:e5:a8:96:74:b2:4b:1e:52: fd:30:29:52:fd:e7:6e:9d:57:41:61:d9:e9:d2:fc:a2:64:87: fa:b0:6e:06:02:fa:87:fc:a0:aa:42:45:a5:6c:60:ad:b0:3c: 28:68:4f:1c:9d:75:bc:33:5a:95:13:b8:dd:0d:da:23:1c:c4: 68:d5:d0:00:06:c0:ac:fe:28:d0:3b:5e:3e:56:e0:15:d1:75: 50:4e:7d:92:08:84:17:17:26:34:c5:0e:51:f6:4e:2d:31:8e: 9b:40:54:e0:11:49:2e:b4:89:60:92:db:ee:2b:cf:4c:41:31: 90:f1:3f:d5:66:0f:17:57:19:56:b7:01:b7:63:8f:80:66:5d: e6:f3:5a:e3:77:09:88:93:4f:4c:6d:92:53:f0:a6:4b:08:d7: 58:9a:82:c3:97:d7:1a:a9:64:81:17:42:fd:f0:b8:fb:0c:43: e3:66:fd:df:c6:a9:37:81:18:2b:fd:6a:1e:39:89:c9:37:c4: 60:7c:4a:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjQxMTIxMDQwMzE2WhcNMjQxMTI4MDQwMzE2WjAYMRYwFAYD VQQDEw02NzNlYjEwNC1lYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR2LsR3LwHzOaYQYfWRjNJPnVFuQa/8I3Mc5tEN2jjIKvimE9/zpUiHNRhmL RQYB6X5wWi1ug/kBLRUmTm/wnQd7rQmke89Wpfc1XBDoCI72cUo8rLijCZrNEEXV zzEYt/GN3F1u9aTmF4i+WN8VZ3QuWwPM8kSYGkVqy3evSKn+nq+b1t2jHPlgBeW9 7oFPExfgIPWPDBI/kaSFjggVYM4dS+3v0WEVc/AOMJn+JzsjdlrWMD6U/l5hKTnp 5W0W6GcLrqioZ+9Mv/jl6TfHG0mbWCOiomayvXFaSWLnxyyaKP/ONhovDpmBUwUl pev0LAtB+4A3Oj6zX+IkySwupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA3+Myx Mfg0RNPSGpdWG3emVJ+gMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdFLCm/ycs0wKTt6CPAed0hMuxPzuU4nwvz1WDFERXQL8mzYsez9/o dR0htYLGT0EaG/L7sqavf5Sj9C9XLtZ25aiWdLJLHlL9MClS/edunVdBYdnp0vyi ZIf6sG4GAvqH/KCqQkWlbGCtsDwoaE8cnXW8M1qVE7jdDdojHMRo1dAABsCs/ijQ O14+VuAV0XVQTn2SCIQXFyY0xQ5R9k4tMY6bQFTgEUkutIlgktvuK89MQTGQ8T/V Zg8XVxlWtwG3Y4+AZl3m81rjdwmIk09MbZJT8KZLCNdYmoLDl9caqWSBF0L98Lj7 DEPjZv3fxqk3gRgr/WoeOYnJN8RgfEoO -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org