$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: p1oCrcNfXzpMC75NeUcn9t/+SuRRTOgY6E/TV78wUPU= Subject key identifier: F8:28:81:90:F6:EB:5E:92:1F:DE:78:CF:7A:5D:42:20:52:58:DA:C7 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 05E7 Signing time: Fri 22 Nov 2024 22:26:35 +0000 Manifest this update: Fri 22 Nov 2024 22:26:35 +0000 Manifest next update: Fri 29 Nov 2024 22:26:35 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: njAm4ItYVgDMBsfIIY9FpnDFd1AVzb6DlKLeCoQvX3o=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Nov 22 22:26:35 2024 GMT Not After : Nov 29 22:26:35 2024 GMT Subject: CN=6741051b-0dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:f9:cc:64:e7:a3:9c:2d:df:b6:f1:88:78: 98:c5:97:e2:ab:5c:29:22:4f:4d:81:99:6d:5a:2b: c0:83:4b:ab:a7:cd:1f:02:b2:4b:7b:88:bc:f2:14: 33:40:05:c5:90:b4:1a:3d:a0:70:2d:f3:66:81:82: bf:a2:f9:06:ef:20:9d:5b:9b:2a:96:ba:53:b8:d0: e8:a5:9e:e8:c8:49:2e:e9:7a:92:d0:ca:3a:e6:77: e3:84:7f:4e:b4:b8:79:7c:25:e6:2f:c9:64:e3:91: 6e:18:49:2c:dd:de:c1:97:a6:e6:80:df:d0:d1:c1: f0:be:1a:b6:2f:51:a0:5c:ce:f0:76:1e:26:11:65: 5b:c7:49:22:3d:12:e0:fb:a9:b5:a3:c4:71:e9:b7: 00:cc:f7:33:8f:1d:ac:45:ca:c5:3b:7c:31:87:70: 10:93:78:5f:f4:18:d7:6b:58:f1:e6:14:48:6f:1e: f3:98:9a:ca:a9:31:75:18:59:b6:b7:55:76:6a:28: cb:0d:e3:53:2d:b4:76:51:46:8c:e3:74:c2:95:be: b0:4f:85:7d:b8:ec:7c:72:7c:85:10:1d:6b:e2:0b: aa:0e:32:c1:39:0a:3a:b7:d4:c9:70:f4:47:95:fb: c7:72:62:05:ec:d9:c9:ae:ec:cf:bf:3c:8f:98:61: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:81:90:F6:EB:5E:92:1F:DE:78:CF:7A:5D:42:20:52:58:DA:C7 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9c:f4:5b:a0:89:d2:38:f9:fe:49:cc:ee:1f:d6:e7:e6:d0: de:a4:0b:bb:d5:12:5f:af:a2:bb:fd:5d:03:3c:77:d4:8e:47: 9b:85:2f:3e:a9:48:9b:60:47:41:e4:8e:2b:7e:2b:47:cc:86: b2:26:42:02:30:92:8e:1a:1d:54:1a:d3:63:40:64:a4:41:bb: 97:f4:8f:ba:5c:2a:bf:71:40:ec:6b:fb:d9:26:1e:24:e3:37: 16:89:33:91:d1:db:b0:b6:91:ef:73:88:e3:98:a8:e8:fd:6a: af:2f:61:ca:86:74:ff:7d:45:e5:67:e8:4c:fd:8b:32:2a:bd: 15:7a:63:3b:0b:e4:f0:3d:48:c7:a1:26:79:fe:38:58:15:d1: 25:a5:d8:b1:41:fb:4a:18:a2:31:c2:84:e3:b9:bc:94:6f:93: 5b:4d:d1:44:b7:48:2b:49:69:9a:d2:67:90:10:14:fa:8f:65: 89:83:d5:f5:f2:77:b9:83:51:42:ac:6d:92:16:cc:fa:9c:31: 80:9e:bf:2a:70:6c:5c:47:0e:b7:cc:7e:76:f7:a8:50:58:0c: 32:1f:cf:d2:b7:21:63:98:47:79:71:e4:ee:dc:a5:93:7d:b2: 40:91:16:c2:7e:9a:8f:a5:34:4e:6c:4c:e5:67:a7:2e:3f:e0: 77:4e:19:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjQxMTIyMjIyNjM1WhcNMjQxMTI5MjIyNjM1WjAYMRYwFAYD VQQDEw02NzQxMDUxYi0wZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz/5zGTno5wt37bxiHiYxZfiq1wpIk9NgZltWivAg0urp80fArJLe4i88hQz QAXFkLQaPaBwLfNmgYK/ovkG7yCdW5sqlrpTuNDopZ7oyEku6XqS0Mo65nfjhH9O tLh5fCXmL8lk45FuGEks3d7Bl6bmgN/Q0cHwvhq2L1GgXM7wdh4mEWVbx0kiPRLg +6m1o8Rx6bcAzPczjx2sRcrFO3wxh3AQk3hf9BjXa1jx5hRIbx7zmJrKqTF1GFm2 t1V2aijLDeNTLbR2UUaM43TClb6wT4V9uOx8cnyFEB1r4guqDjLBOQo6t9TJcPRH lfvHcmIF7NnJruzPvzyPmGHTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgogZD2 616SH954z3pdQiBSWNrHMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDnPRboInSOPn+SczuH9bn5tDepAu71RJfr6K7/V0DPHfUjkebhS8+ qUibYEdB5I4rfitHzIayJkICMJKOGh1UGtNjQGSkQbuX9I+6XCq/cUDsa/vZJh4k 4zcWiTOR0duwtpHvc4jjmKjo/WqvL2HKhnT/fUXlZ+hM/YsyKr0VemM7C+TwPUjH oSZ5/jhYFdElpdixQftKGKIxwoTjubyUb5NbTdFEt0grSWma0meQEBT6j2WJg9X1 8ne5g1FCrG2SFsz6nDGAnr8qcGxcRw63zH5296hQWAwyH8/StyFjmEd5ceTu3KWT fbJAkRbCfpqPpTRObEzlZ6cuP+B3Thmc -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org