$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json) Hash identifier: SltnqEdJ+doit9owbuw7k5i6qEQ3PvHdjAKeNW/lHV0= Subject key identifier: FB:74:54:4D:9F:99:09:F2:E3:99:FA:F0:1B:83:D6:D5:50:5E:D1:18 Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 1167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft Manifest number: 115D Signing time: Fri 22 Nov 2024 17:13:53 +0000 Manifest this update: Fri 22 Nov 2024 17:13:53 +0000 Manifest next update: Fri 29 Nov 2024 17:13:53 +0000 Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: u/ZqYW0444XFPxo86WcJrn+v160EboVnZ41O77tJZCw=) 2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: Pei0cti7OSCFhgjRaYzV/VlBx4zhYdDoDzyP9hUTPDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4455 (0x1167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Nov 22 17:13:53 2024 GMT Not After : Nov 29 17:13:53 2024 GMT Subject: CN=6740bbd1-630a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:c0:11:60:6b:6b:cb:73:f0:50:4f:13:4d: ec:b0:38:bf:f7:59:a4:28:60:d4:f6:0b:61:8b:cd: 1c:90:37:45:57:29:0c:37:49:14:cd:12:e6:7c:c7: cd:19:44:ed:80:47:ea:f3:6a:a4:88:14:f0:d7:f6: 66:f5:f4:1a:48:b0:fc:34:5f:7b:9c:cf:d5:7f:0c: d8:4f:a7:90:de:ac:a5:fe:fd:5a:d0:62:b9:37:03: 40:06:0f:1c:a5:9f:14:8b:4e:af:d4:26:02:4c:1a: a2:79:cc:b5:f1:c7:94:9c:54:22:0e:eb:d4:55:b9: a6:bb:26:ef:f4:27:cc:a6:70:d6:c6:a0:00:9c:40: eb:a8:5f:d7:21:8d:b7:8a:7e:f9:51:66:34:c2:78: 97:a1:1f:1c:90:4a:21:25:c9:1c:43:11:07:9d:f9: ed:4a:93:ce:d8:92:9f:01:23:ee:8b:0f:34:09:87: 41:27:81:13:fa:c8:f9:8d:7e:56:0a:15:0e:04:31: 38:34:57:51:77:7d:58:94:8d:b9:c4:3e:5b:fb:eb: b3:6f:75:e5:80:1d:21:e2:29:5d:56:e8:5b:9b:02: db:57:d4:be:2c:c4:50:40:3f:21:2d:74:db:26:40: 63:56:fb:fd:89:ad:2b:8f:55:6c:f4:17:d3:19:3a: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:74:54:4D:9F:99:09:F2:E3:99:FA:F0:1B:83:D6:D5:50:5E:D1:18 X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:ed:2c:65:a0:7c:c9:e7:b9:67:91:9b:5e:9c:0f:07:93: c9:35:d9:61:c7:6d:22:c6:8e:38:3c:ca:7e:40:18:a3:5f:08: dd:14:9b:a6:2e:23:51:6e:fb:bd:73:69:7a:51:cc:48:70:29: 60:93:06:5d:01:95:1e:45:53:b8:3e:f8:3a:92:cb:a6:d1:14: c3:35:35:dd:46:11:96:37:9e:e8:de:f4:be:6b:9a:40:e6:73: 39:e6:c7:55:ca:5e:a9:04:f0:66:15:f6:4f:46:bf:67:06:be: 03:f5:26:c1:80:32:89:cd:4a:88:c2:6f:7a:7f:0e:d8:6c:67: f3:63:3d:3d:ee:89:38:32:27:b0:4c:c7:ee:de:ff:f1:90:7a: 96:f0:6a:a4:b9:cd:32:5d:f1:ab:00:63:69:83:28:4e:c8:5f: b9:c6:4b:d7:2a:ef:61:6d:f7:23:40:b8:a8:4d:92:5d:80:87: 97:4d:3c:29:4f:42:96:75:43:b8:bb:ea:52:7d:9f:0f:ad:14: b6:8e:6e:76:d6:ec:6b:0e:4d:b9:e4:71:e6:62:22:c3:69:d0: 05:82:7d:58:53:1b:3a:80:da:d3:f3:8a:cb:ab:ef:a2:ff:e0: 8e:b5:5b:9d:16:c1:ae:5e:40:41:36:a9:17:30:62:f4:8a:c4: c8:e3:f1:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjQxMTIyMTcxMzUzWhcNMjQxMTI5MTcxMzUzWjAYMRYwFAYD VQQDEw02NzQwYmJkMS02MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KvAEWBra8tz8FBPE03ssDi/91mkKGDU9gthi80ckDdFVykMN0kUzRLmfMfN GUTtgEfq82qkiBTw1/Zm9fQaSLD8NF97nM/VfwzYT6eQ3qyl/v1a0GK5NwNABg8c pZ8Ui06v1CYCTBqiecy18ceUnFQiDuvUVbmmuybv9CfMpnDWxqAAnEDrqF/XIY23 in75UWY0wniXoR8ckEohJckcQxEHnfntSpPO2JKfASPuiw80CYdBJ4ET+sj5jX5W ChUOBDE4NFdRd31YlI25xD5b++uzb3XlgB0h4ildVuhbmwLbV9S+LMRQQD8hLXTb JkBjVvv9ia0rj1Vs9BfTGTq0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt0VE2f mQny45n68BuD1tVQXtEYMB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzFFNC8zODI0N0E3MEYxNjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21N eWdsdDZKY2FuY2ozMTQ0ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQQ+0sZaB8yee5Z5GbXpwPB5PJNdlhx20ixo44PMp+QBijXwjdFJum LiNRbvu9c2l6UcxIcClgkwZdAZUeRVO4Pvg6ksum0RTDNTXdRhGWN57o3vS+a5pA 5nM55sdVyl6pBPBmFfZPRr9nBr4D9SbBgDKJzUqIwm96fw7YbGfzYz097ok4Miew TMfu3v/xkHqW8Gqkuc0yXfGrAGNpgyhOyF+5xkvXKu9hbfcjQLioTZJdgIeXTTwp T0KWdUO4u+pSfZ8PrRS2jm521uxrDk255HHmYiLDadAFgn1YUxs6gNrT84rLq++i /+COtVudFsGuXkBBNqkXMGL0isTI4/Fd -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org