$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: VQa5Sfyisyr8i+CLQJdwd5wdx9JXYgZdQn4unZAFQy0= Subject key identifier: 68:FB:B5:4E:10:28:ED:47:85:D5:3B:9C:C5:E5:B7:34:87:74:5D:CF Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 0154 Signing time: Sat 23 Nov 2024 02:30:32 +0000 Manifest this update: Sat 23 Nov 2024 02:30:31 +0000 Manifest next update: Sat 30 Nov 2024 02:30:31 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: 40dd5snGNZ0Dp4VQl6XTU7clxGO2hqmpMW+LGfAnMzw=) 2: 028335CAC3BC11EEB6DE185EC4F9AE02.roa (hash: YYtXyk1EEHIZzzJgz3IlAy5yL7gltpGPXetLmQmw2Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Nov 23 02:30:31 2024 GMT Not After : Nov 30 02:30:31 2024 GMT Subject: CN=67413e47-d966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b0:75:ad:62:28:96:12:8f:20:16:9b:61:6b: 08:34:46:92:c8:11:ab:17:d5:da:3c:98:d2:c7:66: 27:5c:b2:9a:f9:6f:57:8a:73:dd:49:ce:b2:42:6c: 9a:35:c0:29:ef:8e:60:8c:ca:ae:b3:77:b0:e6:07: b4:58:e6:ad:37:0f:b6:f5:7a:13:03:fd:df:86:c4: 9e:f3:aa:99:8d:2c:f6:a5:04:9b:b2:44:04:92:fd: b3:f6:f3:5b:ce:0d:03:e5:b6:24:3d:d7:80:10:d6: 2d:04:f5:c7:f2:33:46:2c:d4:b5:4b:6b:bf:4b:25: ad:8a:10:9e:3f:0f:36:7f:0b:31:c7:01:1e:68:b8: b5:24:0e:c8:c4:e4:8f:67:ae:fd:84:f6:0a:43:30: 63:bc:fa:1c:06:a5:76:90:65:48:5e:ad:a2:ae:b0: 9b:c8:1b:dd:39:87:cd:7e:d3:41:59:0e:04:59:e6: a6:44:db:17:e4:41:37:01:d9:1a:e9:f7:ee:6c:8e: 01:05:f4:68:74:f1:12:e1:2c:56:23:4a:80:ee:4d: 4d:b7:63:35:10:b2:72:28:cd:f7:cb:1d:90:80:fe: 1c:70:2f:bd:32:ee:a5:2a:ab:e7:42:be:94:93:71: 10:77:97:75:75:13:2f:e1:27:8e:9e:f1:68:9b:5a: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FB:B5:4E:10:28:ED:47:85:D5:3B:9C:C5:E5:B7:34:87:74:5D:CF X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7b:9b:46:58:a8:d7:b2:58:02:12:f1:ef:12:17:b3:8b:4d: a1:ac:6f:26:79:ab:38:25:f0:37:d0:ae:6d:5d:a4:3d:83:16: 7d:33:1c:34:9d:19:a0:5e:f1:c8:4e:53:13:e7:1c:d0:dc:04: be:b9:8f:f1:ad:8c:e0:61:60:55:39:60:a5:1f:b6:07:c8:a4: c0:f6:82:4d:93:15:69:e3:78:89:60:6e:38:ed:e0:35:59:62: 78:18:b7:b1:e6:f2:45:52:b0:f3:03:13:f0:dd:71:49:75:cb: cf:c2:1b:c8:b0:1b:0f:85:6c:29:83:2d:1a:b4:4e:03:0e:58: 13:7c:75:a3:9d:37:c2:dd:57:32:23:1c:a9:af:e1:c0:3b:20: c6:82:41:b4:d6:b8:fa:33:58:c9:a7:d3:70:5a:5e:79:ff:1f: c3:fd:0f:d7:63:a3:83:b5:e4:26:be:19:a1:9d:9e:24:93:63: 78:a3:0c:0f:b4:43:86:94:9a:ac:5b:3f:26:b0:52:19:11:4a: 13:a8:73:ff:83:47:56:25:4e:92:83:f5:f0:93:61:f6:08:b4: e2:84:31:72:5a:1a:42:a3:8b:f3:62:1f:57:2c:d9:f7:d7:ce: 74:80:bf:ca:43:ca:56:b4:1d:98:7a:e7:f2:ed:c5:c1:ba:29: 5c:43:29:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjQxMTIzMDIzMDMxWhcNMjQxMTMwMDIzMDMxWjAYMRYwFAYD VQQDEw02NzQxM2U0Ny1kOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LB1rWIolhKPIBabYWsINEaSyBGrF9XaPJjSx2YnXLKa+W9XinPdSc6yQmya NcAp745gjMqus3ew5ge0WOatNw+29XoTA/3fhsSe86qZjSz2pQSbskQEkv2z9vNb zg0D5bYkPdeAENYtBPXH8jNGLNS1S2u/SyWtihCePw82fwsxxwEeaLi1JA7IxOSP Z679hPYKQzBjvPocBqV2kGVIXq2irrCbyBvdOYfNftNBWQ4EWeamRNsX5EE3Adka 6ffubI4BBfRodPES4SxWI0qA7k1Nt2M1ELJyKM33yx2QgP4ccC+9Mu6lKqvnQr6U k3EQd5d1dRMv4SeOnvFom1oXYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj7tU4Q KO1HhdU7nMXltzSHdF3PMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANe5tGWKjXslgCEvHvEhezi02hrG8meas4JfA30K5tXaQ9gxZ9Mxw0 nRmgXvHITlMT5xzQ3AS+uY/xrYzgYWBVOWClH7YHyKTA9oJNkxVp43iJYG447eA1 WWJ4GLex5vJFUrDzAxPw3XFJdcvPwhvIsBsPhWwpgy0atE4DDlgTfHWjnTfC3Vcy Ixypr+HAOyDGgkG01rj6M1jJp9NwWl55/x/D/Q/XY6ODteQmvhmhnZ4kk2N4owwP tEOGlJqsWz8msFIZEUoTqHP/g0dWJU6Sg/Xwk2H2CLTihDFyWhpCo4vzYh9XLNn3 1850gL/KQ8pWtB2Yeufy7cXBuilcQynB -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org