$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: uhM8pvw7NxRHDdYojXe54mi8vsfK5CMrR7cm7gF6uYs= Subject key identifier: 94:51:B5:57:29:13:3D:C1:9F:99:B5:07:F3:8C:58:C2:45:38:F7:B1 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 03EE Signing time: Sat 23 Nov 2024 00:04:28 +0000 Manifest this update: Sat 23 Nov 2024 00:04:28 +0000 Manifest next update: Sat 30 Nov 2024 00:04:28 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: oYseA3Cg1JE2jlJOYAXxO2DjggCdQ6ZIZ5wzHIFQmnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Nov 23 00:04:28 2024 GMT Not After : Nov 30 00:04:28 2024 GMT Subject: CN=67411c0c-1bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:94:37:ea:f3:af:69:8a:0b:48:5b:2a:0c:42: c9:a3:48:1f:1c:68:01:26:a0:40:87:3a:ea:61:47: 76:27:25:ea:b1:ba:d5:0d:30:e1:1d:2f:7b:b2:5a: 5e:95:1c:5a:46:3e:b3:b7:47:c1:69:f5:21:b8:c5: 2e:9d:ae:4e:5a:25:83:4a:08:b4:20:1f:1b:35:0d: 09:a8:9f:a9:9f:8c:68:44:0d:e8:a3:a0:c3:51:7e: d5:20:38:30:1b:d3:10:11:9c:fb:39:3d:b7:a4:31: b7:fc:67:73:ab:37:9c:e8:7b:70:bb:0b:7b:8b:b4: 04:92:e2:ce:f7:81:17:30:1c:04:08:d2:d0:a5:ab: 59:67:5f:93:2e:da:5f:82:b2:d1:2e:6f:3c:4a:47: c4:0b:45:8c:4b:4e:42:92:ff:8f:fb:66:22:6a:63: f4:c2:29:2f:d0:95:a8:11:a4:49:a6:3a:ca:14:91: 80:82:90:11:a8:03:e9:a0:8d:3e:da:89:6b:25:c7: 19:ba:f0:75:22:47:41:4d:41:4a:49:67:6e:b7:49: 53:a7:da:3b:86:f1:17:e2:12:e9:2a:89:30:76:77: fb:07:b5:49:90:4f:22:0a:8d:08:be:dd:a4:0a:b8: 52:96:01:6f:ca:72:97:1f:a1:fc:89:f6:ef:be:e7: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:51:B5:57:29:13:3D:C1:9F:99:B5:07:F3:8C:58:C2:45:38:F7:B1 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7c:60:18:76:24:bf:05:22:76:40:2d:b6:22:88:4a:c9:ff: 6e:06:71:a3:8f:01:80:0f:a0:3c:15:19:96:9f:4d:4e:71:03: 26:6e:59:46:c1:fb:2e:32:7b:44:23:13:81:d8:0c:b1:f1:77: 3d:94:57:62:0b:26:0e:3b:66:62:4b:e0:02:1a:52:59:59:b1: dd:c3:2e:0a:5c:1c:a3:8c:47:68:bd:6b:c6:ca:5c:eb:1c:8e: 2f:91:38:1a:44:8b:c1:9b:d8:2f:e3:2c:e5:0d:e8:7a:fe:98: 39:26:b1:e0:cd:a5:2a:d1:0a:ce:cc:0b:4c:42:e0:ce:b1:1d: 16:92:8f:87:2f:b6:b9:e1:e2:4b:04:e2:b1:18:cf:67:7c:4b: 2a:57:c7:f9:70:ac:da:02:b8:83:8c:f7:2f:50:9b:f1:74:e1: b5:6b:f8:e5:3e:bb:2f:47:71:2b:5c:4c:b7:ce:2b:f8:94:99: bf:27:1b:c5:d4:d2:f5:81:11:94:2d:68:d6:85:d4:1d:c9:5f: 35:e9:ed:d8:2e:94:4f:4a:c9:01:5c:50:62:ec:20:8e:65:3f: f0:35:4c:ef:8c:6b:0f:df:93:d1:d5:64:c8:ad:cd:57:18:71: fe:f7:6e:46:0d:8e:a9:fe:6a:da:64:18:5e:9d:83:49:86:8b: 40:7f:db:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjQxMTIzMDAwNDI4WhcNMjQxMTMwMDAwNDI4WjAYMRYwFAYD VQQDEw02NzQxMWMwYy0xYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZQ36vOvaYoLSFsqDELJo0gfHGgBJqBAhzrqYUd2JyXqsbrVDTDhHS97slpe lRxaRj6zt0fBafUhuMUuna5OWiWDSgi0IB8bNQ0JqJ+pn4xoRA3oo6DDUX7VIDgw G9MQEZz7OT23pDG3/Gdzqzec6Htwuwt7i7QEkuLO94EXMBwECNLQpatZZ1+TLtpf grLRLm88SkfEC0WMS05Ckv+P+2YiamP0wikv0JWoEaRJpjrKFJGAgpARqAPpoI0+ 2olrJccZuvB1IkdBTUFKSWdut0lTp9o7hvEX4hLpKokwdnf7B7VJkE8iCo0Ivt2k CrhSlgFvynKXH6H8ifbvvueguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRRtVcp Ez3Bn5m1B/OMWMJFOPexMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZfGAYdiS/BSJ2QC22IohKyf9uBnGjjwGAD6A8FRmWn01OcQMmbllG wfsuMntEIxOB2Ayx8Xc9lFdiCyYOO2ZiS+ACGlJZWbHdwy4KXByjjEdovWvGylzr HI4vkTgaRIvBm9gv4yzlDeh6/pg5JrHgzaUq0QrOzAtMQuDOsR0Wko+HL7a54eJL BOKxGM9nfEsqV8f5cKzaAriDjPcvUJvxdOG1a/jlPrsvR3ErXEy3ziv4lJm/JxvF 1NL1gRGULWjWhdQdyV816e3YLpRPSskBXFBi7CCOZT/wNUzvjGsP35PR1WTIrc1X GHH+925GDY6p/mraZBhenYNJhotAf9u4 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org