$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: PLzVaZ9Fua7AhSLaFZjJcxjafM6j2m+oFR0K7LzeOic= Subject key identifier: 31:1C:06:F0:A6:33:8E:7A:DE:79:23:FC:0F:28:34:E9:5D:32:A1:3B Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:37:42 +0000 Manifest this update: Wed 23 Oct 2024 06:37:42 +0000 Manifest next update: Wed 30 Oct 2024 06:37:42 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: ++vb/Ceyy+gcln3YjZJCfmrmpwWHFPZQmgA7SOLETpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Oct 23 06:37:42 2024 GMT Not After : Oct 30 06:37:42 2024 GMT Subject: CN=671899b6-08e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:75:36:0a:88:4f:dd:a5:fe:bd:81:2a:07: b0:a6:76:a7:5b:00:bc:50:9d:15:67:10:a1:b5:aa: 1b:10:1d:12:69:3c:39:02:45:ab:07:f5:76:e6:82: b0:e2:ac:65:cf:88:2d:23:c1:a6:e5:08:d5:23:80: 9e:ee:58:a6:c3:dc:fb:d8:b7:86:b0:18:20:5c:57: 36:33:cc:c0:cf:e3:84:24:1e:eb:37:21:bd:3e:f8: 8e:60:e5:8e:f0:15:3c:ae:7c:49:f7:1b:44:57:56: 0c:84:09:06:df:8d:38:1c:fe:01:62:00:53:35:7e: be:0c:80:37:34:28:de:9c:46:52:5f:c6:33:ab:93: aa:da:fe:ea:e2:a9:b9:8f:e8:b0:6c:e0:3e:d4:b2: 5c:05:11:0a:8e:86:3d:a4:c1:fa:6b:c3:5a:cd:c8: cb:69:2b:46:cc:d5:a0:11:61:93:f1:dd:6a:4f:b3: fd:a9:44:be:9e:4d:fc:dd:9c:c2:b0:27:db:86:bf: da:7f:4a:cc:8c:c7:3b:62:b1:80:c1:60:77:f8:27: 8b:2b:61:dd:2d:2b:eb:fb:3d:2a:21:2a:4c:41:af: 67:ee:37:df:c6:90:6a:0b:4d:af:2b:52:ca:b0:1d: 0e:b2:23:06:2c:06:b4:79:5e:0f:75:9b:77:80:5a: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:06:F0:A6:33:8E:7A:DE:79:23:FC:0F:28:34:E9:5D:32:A1:3B X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7c:49:fe:c7:83:91:ec:57:2c:47:42:a1:08:4f:32:3a:13: c4:cb:e3:20:2d:8a:dc:50:26:c6:bd:98:f1:37:67:8b:11:27: 15:64:13:56:66:b1:81:9e:72:b7:15:2e:1e:c9:e3:8d:e9:5f: f5:34:29:c0:c7:1d:50:29:92:05:d0:05:6b:3a:0c:51:d4:de: 20:39:17:08:d3:c6:d6:3d:dd:e7:49:a3:54:89:05:ec:97:9d: 59:3a:8c:54:8c:b0:86:5b:0c:fb:3f:98:fd:01:9b:8b:ae:37: be:61:33:a7:f1:d2:e3:2e:f4:9b:5a:87:c2:23:61:da:b2:bb: 04:11:1c:d4:c0:c3:e6:c8:da:ee:16:6b:b8:ec:21:28:bf:b7: db:a7:f7:e6:f8:af:ae:02:81:d3:6e:c4:20:d5:13:c1:e6:c8: da:f7:12:01:2b:5b:48:4d:12:11:35:19:d0:a6:ea:1f:5f:be: be:47:42:1f:96:51:8b:a2:f6:93:00:b4:4b:63:fb:a6:54:d9: 76:f9:a5:0f:a6:c0:ca:7d:15:98:fe:ee:44:a5:b6:45:c6:db: 3c:b3:7f:24:f3:2e:9c:b7:28:bc:74:20:7d:ed:24:57:ea:11: 5e:8e:04:04:e4:41:48:e2:7b:b8:b6:8d:8e:03:2f:44:22:88: 08:59:c1:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgwNjExMC8GA1UEBRMoOTE0NkI3ODJFQjgyNDY3QjE5RDhCNDFEMUNDNDBFQkYw NDg5OTA2NjAeFw0yNDEwMjMwNjM3NDJaFw0yNDEwMzAwNjM3NDJaMBgxFjAUBgNV BAMTDTY3MTg5OWI2LTA4ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx4XU2CohP3aX+vYEqB7CmdqdbALxQnRVnEKG1qhsQHRJpPDkCRasH9XbmgrDi rGXPiC0jwablCNUjgJ7uWKbD3PvYt4awGCBcVzYzzMDP44QkHus3Ib0++I5g5Y7w FTyufEn3G0RXVgyECQbfjTgc/gFiAFM1fr4MgDc0KN6cRlJfxjOrk6ra/uriqbmP 6LBs4D7UslwFEQqOhj2kwfprw1rNyMtpK0bM1aARYZPx3WpPs/2pRL6eTfzdnMKw J9uGv9p/SsyMxztisYDBYHf4J4srYd0tK+v7PSohKkxBr2fuN9/GkGoLTa8rUsqw HQ6yIwYsBrR5Xg91m3eAWpJNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMRwG8KYz jnreeSP8Dyg06V0yoTswHwYDVR0jBBgwFoAUkUa3guuCRnsZ2LQdHMQOvwSJkGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODA2L0QwQzVGNEUyNkU5 MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1VhM2d1dUNSbnNaMkxRZEhNUU92d1NKa0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODA2L0QwQzVGNEUyNkU5MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5z WjJMUWRITVFPdndTSmtHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIh8Sf7Hg5HsVyxHQqEITzI6E8TL4yAtitxQJsa9mPE3Z4sRJxVkE1Zm sYGecrcVLh7J443pX/U0KcDHHVApkgXQBWs6DFHU3iA5FwjTxtY93edJo1SJBeyX nVk6jFSMsIZbDPs/mP0Bm4uuN75hM6fx0uMu9Jtah8IjYdqyuwQRHNTAw+bI2u4W a7jsISi/t9un9+b4r64CgdNuxCDVE8HmyNr3EgErW0hNEhE1GdCm6h9fvr5HQh+W UYui9pMAtEtj+6ZU2Xb5pQ+mwMp9FZj+7kSltkXG2zyzfyTzLpy3KLx0IH3tJFfq EV6OBATkQUjie7i2jY4DL0QiiAhZwTw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org