$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: GhHYaZG06IrBOi+vDoHloJ0XKnJRiTRCJaIo5CPqPzI= Subject key identifier: 10:41:3D:5B:12:32:2B:E7:ED:3F:D4:19:33:E0:D6:65:DA:AE:02:58 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 19F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 19D6 Signing time: Fri 22 Nov 2024 16:24:21 +0000 Manifest this update: Fri 22 Nov 2024 16:24:20 +0000 Manifest next update: Fri 29 Nov 2024 16:24:20 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: zGP6VGtPdqROwionHvBYTgPh1iYNjDfQ4e+LbzUQRt0=) 2: A0769964641D11EFA3C4902EC4F9AE02.roa (hash: t5K6AqvleSo216upA/bWqmGHo904QC0Pfe/exQVGjfs=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 9Yic7ZudnM+/3y+rGwCOY5Ix5lQBB7EQE64c16elJaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6640 (0x19f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Nov 22 16:24:20 2024 GMT Not After : Nov 29 16:24:20 2024 GMT Subject: CN=6740b035-3bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:84:fe:2d:f6:28:77:5c:0d:01:0e:6f:85: 07:3b:a2:67:a9:0b:92:0d:27:70:e7:e2:f2:c6:f9: ca:d8:d1:ad:89:14:8f:6c:66:df:8b:d8:d4:41:4d: 00:a5:69:9d:a8:99:59:3d:f3:6d:db:2c:7f:34:2a: 62:51:53:a9:cf:b2:13:f7:13:7f:fb:8c:01:62:76: 47:77:b0:96:66:a4:20:9e:9b:88:36:52:a6:ec:63: 2a:d0:c5:e1:4e:86:5a:3d:96:5b:98:41:85:ce:be: bb:f1:ba:f4:ae:ba:1e:28:ac:ad:e6:43:be:c6:72: a3:83:68:4e:51:0d:00:b5:82:81:86:f0:b0:0c:e2: 0a:61:1b:c7:d5:41:ca:e1:ea:f4:d8:43:30:89:69: 18:a2:7c:00:70:53:b9:29:23:83:d1:f5:36:a2:e5: 1d:11:ca:20:bd:bf:88:33:c9:5b:17:cc:aa:73:9b: 50:d7:b2:6b:1c:35:c1:c2:21:95:15:46:72:53:7c: ff:13:9e:09:62:2e:da:92:fc:94:31:3e:68:a4:f7: 62:7b:85:78:87:39:c9:bd:e2:f6:83:bc:ac:21:ab: f1:af:75:09:1e:0f:76:67:9c:97:bb:9f:ee:a0:19: 25:06:1f:b0:0c:14:1b:c0:de:4c:b8:66:de:8e:e2: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:41:3D:5B:12:32:2B:E7:ED:3F:D4:19:33:E0:D6:65:DA:AE:02:58 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:72:94:77:96:b5:7d:21:ad:29:b5:d2:20:da:47:3f:1e:d9: f5:97:83:7f:24:78:6f:40:9e:78:bc:f5:f5:83:5f:b2:de:9f: 92:e0:8e:5f:b2:78:21:1c:33:63:ed:f8:92:22:53:7c:72:5b: 33:75:63:48:39:34:9c:d0:1a:82:93:d9:37:54:91:ae:2a:f0: bd:5a:af:40:05:34:82:d2:7f:74:01:97:33:fd:44:b1:a8:ad: d9:f5:1c:19:67:02:39:db:db:bd:f0:3f:3b:cf:69:c0:b4:cd: 9c:ee:bc:88:a7:05:f0:de:9e:18:0f:91:54:30:12:38:42:38: 0b:fc:0d:bc:b6:32:48:9a:17:8f:a0:22:55:b6:05:3c:af:39: bf:3a:02:fb:c8:40:ea:0b:14:38:18:34:3b:dd:7e:5f:7b:dd: 87:cb:81:9e:50:07:b3:0c:de:af:39:45:e7:38:57:8f:c8:5d: bf:fd:47:66:2b:a2:03:81:c0:f1:7a:b1:f2:10:35:3a:8e:0c: 56:44:bf:40:00:42:c4:78:25:97:62:49:7a:8e:ed:27:2d:4b: b2:c3:30:89:20:69:36:19:b1:89:2a:2b:d0:1f:c4:96:7c:56: dc:61:a5:6f:be:2c:8b:6f:5f:90:25:1a:36:c7:95:ca:b4:72: 65:7b:49:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjQxMTIyMTYyNDIwWhcNMjQxMTI5MTYyNDIwWjAYMRYwFAYD VQQDEw02NzQwYjAzNS0zYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ayE/i32KHdcDQEOb4UHO6JnqQuSDSdw5+LyxvnK2NGtiRSPbGbfi9jUQU0A pWmdqJlZPfNt2yx/NCpiUVOpz7IT9xN/+4wBYnZHd7CWZqQgnpuINlKm7GMq0MXh ToZaPZZbmEGFzr678br0rroeKKyt5kO+xnKjg2hOUQ0AtYKBhvCwDOIKYRvH1UHK 4er02EMwiWkYonwAcFO5KSOD0fU2ouUdEcogvb+IM8lbF8yqc5tQ17JrHDXBwiGV FUZyU3z/E54JYi7akvyUMT5opPdie4V4hznJveL2g7ysIavxr3UJHg92Z5yXu5/u oBklBh+wDBQbwN5MuGbejuKUxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBBPVsS Mivn7T/UGTPg1mXargJYMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmcpR3lrV9Ia0ptdIg2kc/Htn1l4N/JHhvQJ54vPX1g1+y3p+S4I5f snghHDNj7fiSIlN8clszdWNIOTSc0BqCk9k3VJGuKvC9Wq9ABTSC0n90AZcz/USx qK3Z9RwZZwI529u98D87z2nAtM2c7ryIpwXw3p4YD5FUMBI4QjgL/A28tjJImheP oCJVtgU8rzm/OgL7yEDqCxQ4GDQ73X5fe92Hy4GeUAezDN6vOUXnOFePyF2//Udm K6IDgcDxerHyEDU6jgxWRL9AAELEeCWXYkl6ju0nLUuywzCJIGk2GbGJKivQH8SW fFbcYaVvviyLb1+QJRo2x5XKtHJle0kx -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org