$ rpki-client -vvf rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft File: kUk2UwsP-H5UDYRskCD7hNO19YM.mft (raw, json) Hash identifier: Kzk/SC2bhMB3cLVKNuk+VDl9ndLJLKQEmFE8Y8LF+zg= Subject key identifier: BA:7C:6A:C8:6C:79:F3:EA:16:31:A8:A0:EE:81:DD:F1:39:55:9B:27 Authority key identifier: 91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83 Certificate issuer: /CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft Manifest number: 0675 Signing time: Fri 22 Nov 2024 21:52:55 +0000 Manifest this update: Fri 22 Nov 2024 21:52:54 +0000 Manifest next update: Fri 29 Nov 2024 21:52:54 +0000 Files and hashes: 1: kUk2UwsP-H5UDYRskCD7hNO19YM.crl (hash: XFwBt3R4EvBCb+g6bVMdn1cKHsa6/Nb30kZPq+0jcQw=) 2: 12C61BCA37CA11EDB8E79257C4F9AE02.roa (hash: w/LPsf1fuNhXTUpVcTEl4mS9U0ZYhq4ApJJQJuCMBlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583 Validity Not Before: Nov 22 21:52:54 2024 GMT Not After : Nov 29 21:52:54 2024 GMT Subject: CN=6740fd37-e29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:40:d2:7c:fb:9c:ee:1f:51:3b:e1:48:7d: 45:d5:57:57:a0:70:da:16:5a:83:54:47:04:b6:c1: 57:c9:a3:ef:45:96:aa:72:53:c7:9b:c8:c9:33:c2: 53:93:d3:42:53:17:95:d7:a5:17:00:20:3d:40:bc: 73:b2:a3:db:03:6f:a9:f8:d2:3d:a3:c8:6b:65:a0: fa:c3:b3:b2:d3:43:a9:43:cd:61:16:fc:21:5c:97: 2b:01:86:ce:7e:18:09:75:97:b8:2b:ca:68:24:7c: 01:6c:e9:c6:94:9d:30:92:ef:60:4f:32:fd:8d:d1: 36:51:fc:e3:1d:76:7f:75:b1:b3:56:10:76:24:07: e9:1d:3e:74:be:93:53:07:e1:3a:2f:33:84:e6:2b: 65:e8:84:ce:32:36:48:ee:b8:22:6d:13:d6:2e:e9: 73:4c:91:06:10:b1:b2:fb:f4:85:13:37:1b:36:80: 63:47:e8:40:f4:1b:dc:61:ac:28:35:be:58:db:2d: d3:e7:80:b2:46:86:e9:3c:6d:e0:f5:ef:15:d3:98: 95:87:4c:44:a9:bd:b5:d4:21:a5:b2:6b:5a:b0:93: bc:6c:49:02:fb:47:a8:8d:ac:82:18:40:e1:da:08: 41:3d:f4:83:5d:d8:d5:b4:56:f7:6d:c5:eb:73:94: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:6A:C8:6C:79:F3:EA:16:31:A8:A0:EE:81:DD:F1:39:55:9B:27 X509v3 Authority Key Identifier: keyid:91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:92:9f:3b:1d:4c:5b:7f:4a:1e:7c:be:cb:6d:f6:01:af:c3: 77:1d:c7:9d:d8:d7:d7:25:2f:a2:00:1e:e4:9f:da:c5:9b:2f: 63:dc:a4:5f:66:1f:10:47:7c:aa:9c:ce:41:20:dd:ab:5f:96: e5:5f:4f:26:7d:09:51:63:9f:42:db:1e:82:56:d6:01:65:df: 29:ed:f8:27:6d:4d:9c:b4:1a:73:68:28:8a:8e:1f:b4:ff:39: 46:44:a1:ea:c7:ba:63:0f:02:ec:a3:8d:fc:e4:76:0e:af:ac: 16:89:33:c7:a2:6d:d8:9b:d6:24:48:54:a2:20:49:3d:53:53: d4:cc:ba:31:30:64:20:8a:0a:84:ef:ea:3b:64:d7:38:79:99: 39:c6:31:40:73:d6:2c:6e:1a:97:c5:5d:0c:1d:08:e1:bd:2e: 7d:b9:ef:b6:48:94:70:45:df:db:5d:2a:ed:4f:ff:01:61:f2: 7b:81:18:aa:0c:d8:9e:85:4e:5c:6e:0b:41:db:3e:02:7b:4b: d4:24:76:2f:6f:d8:3d:8e:4b:3b:46:38:b6:14:14:b8:9f:60: 58:e4:5f:30:49:35:50:17:91:13:3c:61:ec:b0:32:cc:9c:8a: 18:8c:73:20:2b:80:07:0e:b6:c0:24:9a:03:75:6a:b3:ad:f9: 01:87:54:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2ODAxMTAvBgNVBAUTKDkxNDkzNjUzMEIwRkY4N0U1NDBEODQ2QzkwMjBGQjg0 RDNCNUY1ODMwHhcNMjQxMTIyMjE1MjU0WhcNMjQxMTI5MjE1MjU0WjAYMRYwFAYD VQQDEw02NzQwZmQzNy1lMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGpA0nz7nO4fUTvhSH1F1VdXoHDaFlqDVEcEtsFXyaPvRZaqclPHm8jJM8JT k9NCUxeV16UXACA9QLxzsqPbA2+p+NI9o8hrZaD6w7Oy00OpQ81hFvwhXJcrAYbO fhgJdZe4K8poJHwBbOnGlJ0wku9gTzL9jdE2UfzjHXZ/dbGzVhB2JAfpHT50vpNT B+E6LzOE5itl6ITOMjZI7rgibRPWLulzTJEGELGy+/SFEzcbNoBjR+hA9BvcYawo Nb5Y2y3T54CyRobpPG3g9e8V05iVh0xEqb211CGlsmtasJO8bEkC+0eojayCGEDh 2ghBPfSDXdjVtFb3bcXrc5T4UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp8ashs efPqFjGooO6B3fE5VZsnMB8GA1UdIwQYMBaAFJFJNlMLD/h+VA2EbJAg+4TTtfWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY4MC84RTI4NjY4MjU1 M0MxMUVCOEM2MzBGNzJDNEY5QUUwMi9rVWsyVXdzUC1INVVEWVJza0NEN2hOTzE5 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVazJVd3NQLUg1VURZUnNrQ0Q3aE5PMTlZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY4MC84RTI4NjY4MjU1M0MxMUVCOEM2MzBGNzJDNEY5QUUwMi9rVWsyVXdzUC1I NVVEWVJza0NEN2hOTzE5WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQkp87HUxbf0oefL7LbfYBr8N3Hced2NfXJS+iAB7kn9rFmy9j3KRf Zh8QR3yqnM5BIN2rX5blX08mfQlRY59C2x6CVtYBZd8p7fgnbU2ctBpzaCiKjh+0 /zlGRKHqx7pjDwLso4385HYOr6wWiTPHom3Ym9YkSFSiIEk9U1PUzLoxMGQgigqE 7+o7ZNc4eZk5xjFAc9YsbhqXxV0MHQjhvS59ue+2SJRwRd/bXSrtT/8BYfJ7gRiq DNiehU5cbgtB2z4Ce0vUJHYvb9g9jks7Rji2FBS4n2BY5F8wSTVQF5ETPGHssDLM nIoYjHMgK4AHDrbAJJoDdWqzrfkBh1St -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org