$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json) Hash identifier: IzzI2ZYfX6y+eP0A8iw4po5PYhPFD9qTfVSIxJShJ1Y= Subject key identifier: 16:08:E8:6F:CE:77:FC:85:D3:80:66:9B:4A:DD:DD:27:E4:98:7D:7F Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Certificate serial: 0F76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft Manifest number: 0F68 Signing time: Fri 22 Nov 2024 17:32:43 +0000 Manifest this update: Fri 22 Nov 2024 17:32:42 +0000 Manifest next update: Fri 29 Nov 2024 17:32:42 +0000 Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: Q4hQlLoNxVoKV5NOeKKBejELlNQHWdL8pWrHGNno3FQ=) 2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: ADwuiMuCXWdbcH0qjtPSZ/UoUy9O3h+eNA26nMvAOHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3958 (0xf76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Validity Not Before: Nov 22 17:32:42 2024 GMT Not After : Nov 29 17:32:42 2024 GMT Subject: CN=6740c03a-979a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:e9:42:6c:ec:09:a6:16:80:80:c2:be:6d: 68:a5:7d:4d:1e:00:81:04:21:7c:01:89:59:69:fe: 0c:d5:21:e4:0b:43:65:1a:66:ba:ae:78:01:3d:0e: ca:3e:aa:f8:9d:cb:4c:61:ab:64:b9:af:e8:b6:5b: 01:90:c0:7f:63:d1:8f:52:c6:48:b4:8c:ad:c4:49: e7:90:49:a0:25:b9:d2:81:7c:57:df:36:3e:ce:b7: 8d:01:2f:51:25:21:d5:db:67:fd:0c:dc:8f:4f:7d: 51:4a:b9:84:9a:29:18:01:b6:90:0d:e8:57:c8:c7: b9:75:bd:bf:86:22:06:b1:c5:f7:86:35:e1:25:d1: 5c:63:b3:05:61:6c:f7:12:15:66:2a:49:4d:25:a1: d7:27:7f:50:33:9e:2f:cc:df:ff:6a:54:55:b0:c1: dd:57:dc:dd:db:85:e2:98:97:28:20:26:72:1b:cf: 79:29:b8:ac:ae:36:34:c8:ce:98:c7:6e:50:ec:dc: be:7a:cd:8e:fa:e9:a8:1d:e0:77:b3:81:a9:9c:92: e8:eb:b8:5f:98:c3:32:2c:f3:9e:1b:1f:c7:36:39: ba:6e:f8:34:eb:ce:19:2b:54:1f:ab:f4:7a:3d:36: 36:8d:d2:90:24:a9:ed:86:6d:85:3d:26:d3:27:ae: cd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:08:E8:6F:CE:77:FC:85:D3:80:66:9B:4A:DD:DD:27:E4:98:7D:7F X509v3 Authority Key Identifier: keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:42:e2:4c:a4:b2:1e:a2:2a:3e:82:63:4d:2b:b9:be:af:1c: 3b:41:3b:3e:b2:5b:e5:4b:a3:6d:ae:74:02:28:07:71:9d:7a: 69:00:42:a0:e0:04:9e:86:84:e3:42:6c:80:2d:26:90:cf:bd: f6:51:c8:4f:42:6c:68:9f:92:98:f5:36:b0:a2:f9:c4:38:5a: 31:9e:01:20:13:36:89:49:7a:b9:66:15:78:26:5c:97:96:c2: 48:63:89:03:0b:78:be:d3:37:b1:55:d2:97:34:e7:44:4e:f9: 3a:e7:d9:2a:80:4d:5c:4a:dc:ea:0d:b9:f3:d7:5d:14:b7:36: 59:81:bb:fa:e4:36:a5:a3:f4:25:d2:cf:92:95:8b:e6:5f:5d: 6b:24:a6:6d:0a:58:bf:b5:78:e4:e2:55:19:6a:97:ab:4e:c8: b5:e2:30:e1:74:59:72:8c:bc:0b:65:42:28:44:ea:65:50:4d: 39:87:a0:07:c1:08:ee:4a:40:e5:b6:ba:d2:24:b5:b5:da:25: a1:5a:76:25:5d:75:27:b5:64:60:58:c6:ed:9e:3e:c5:f2:7b: c7:ae:32:83:80:bb:08:73:f6:0d:6b:80:b2:b0:46:f5:73:f9: ba:1c:6d:17:75:7d:cc:e1:ec:5c:ae:64:fc:e2:31:4f:6c:ff: 2c:16:c0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3 MzJEOUREQTYwHhcNMjQxMTIyMTczMjQyWhcNMjQxMTI5MTczMjQyWjAYMRYwFAYD VQQDEw02NzQwYzAzYS05NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUnpQmzsCaYWgIDCvm1opX1NHgCBBCF8AYlZaf4M1SHkC0NlGma6rngBPQ7K Pqr4nctMYatkua/otlsBkMB/Y9GPUsZItIytxEnnkEmgJbnSgXxX3zY+zreNAS9R JSHV22f9DNyPT31RSrmEmikYAbaQDehXyMe5db2/hiIGscX3hjXhJdFcY7MFYWz3 EhVmKklNJaHXJ39QM54vzN//alRVsMHdV9zd24XimJcoICZyG895KbisrjY0yM6Y x25Q7Ny+es2O+umoHeB3s4GpnJLo67hfmMMyLPOeGx/HNjm6bvg0684ZK1Qfq/R6 PTY2jdKQJKnthm2FPSbTJ67NGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYI6G/O d/yF04Bmm0rd3SfkmH1/MB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1 RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU5Ni9FREE2NUFDNDU1RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlB bXZIc21lbW54LUp6TFozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHQuJMpLIeoio+gmNNK7m+rxw7QTs+slvlS6NtrnQCKAdxnXppAEKg 4ASehoTjQmyALSaQz732UchPQmxon5KY9TawovnEOFoxngEgEzaJSXq5ZhV4JlyX lsJIY4kDC3i+0zexVdKXNOdETvk659kqgE1cStzqDbnz110UtzZZgbv65Dalo/Ql 0s+SlYvmX11rJKZtCli/tXjk4lUZaperTsi14jDhdFlyjLwLZUIoROplUE05h6AH wQjuSkDltrrSJLW12iWhWnYlXXUntWRgWMbtnj7F8nvHrjKDgLsIc/YNa4CysEb1 c/m6HG0XdX3M4excrmT84jFPbP8sFsAT -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org