$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: r//1QChv3yn+qWh+Jm3VvPGdDasIyvNj8ysrkvkhfpc= Subject key identifier: 49:FF:04:4C:D1:97:F2:74:7E:E8:EB:86:6F:A0:F2:F1:65:27:E6:8E Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 015C Signing time: Sat 23 Nov 2024 02:24:07 +0000 Manifest this update: Sat 23 Nov 2024 02:24:06 +0000 Manifest next update: Sat 30 Nov 2024 02:24:06 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: +oZkX9eCfvjuhWfefGZWrn6uiQ2qUnAheJoCRfURpnY=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: AGwMWWX4NXZWZYXJ1FNIjuVkZbLaD1EeTlU2DIzsVSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Nov 23 02:24:06 2024 GMT Not After : Nov 30 02:24:06 2024 GMT Subject: CN=67413cc7-cfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:90:08:4d:28:7c:e2:77:1b:47:52:c5:60: ac:b7:4b:d9:9a:5a:8e:5d:61:c2:10:b9:6a:fc:bb: 35:a3:87:0f:97:c4:11:b4:a6:21:88:55:7a:7d:b4: 05:39:4d:8c:78:3c:42:03:15:2c:65:9b:59:42:21: 42:a9:4c:63:e8:06:97:d7:79:fc:e7:90:5a:0d:19: 7c:86:78:13:8f:1e:1c:bb:71:c3:a7:e9:2f:b5:4e: 34:c8:21:b5:3c:fc:b9:99:d6:81:cd:5f:6a:f8:67: 5f:f7:d3:80:9a:9a:33:30:4b:06:ff:22:01:9a:c7: dc:e6:0f:71:ea:ae:f6:3d:38:60:6f:fc:69:a7:7b: 51:c7:b3:48:3b:28:99:9e:76:67:af:05:ff:e2:8f: 59:03:cd:60:4c:f6:39:c4:d3:72:b4:84:75:01:52: d6:34:e4:b2:23:03:2d:d8:1b:ea:9f:41:68:ce:78: 5d:13:61:4e:b6:cb:9d:2e:96:86:b8:9b:e2:d5:5e: 35:a4:14:5a:cd:1b:8b:79:25:6d:ee:fc:2f:8a:b9: d3:ab:e9:e1:cb:c5:f3:3c:04:9f:89:6f:77:5d:4f: 13:d7:58:c3:20:31:d5:ce:18:78:e2:9e:f5:0b:7e: 03:c8:21:7d:de:21:84:b9:8c:ba:d4:f2:25:2e:94: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FF:04:4C:D1:97:F2:74:7E:E8:EB:86:6F:A0:F2:F1:65:27:E6:8E X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:6c:43:d1:86:34:22:80:14:51:9e:b5:d7:21:9f:54:a3: 34:ff:bc:b0:1b:18:8d:7a:80:74:13:af:0b:df:b7:e5:ef:9e: d1:df:3f:21:aa:ae:37:a2:5c:6b:72:54:8c:c4:a2:3a:81:22: 84:5d:55:d1:45:ed:ce:32:aa:d0:44:47:84:5d:53:63:21:b3: a2:1c:a0:ec:0f:cf:49:cd:c8:dd:49:e2:03:19:66:59:99:5a: de:5b:21:9a:33:93:b7:7d:8a:dc:3b:04:2f:63:69:64:a3:5f: 5b:3c:44:d5:f9:0d:aa:4a:13:51:76:48:c0:c3:59:1b:28:d7: e2:4f:2a:51:72:10:42:37:ec:10:16:10:20:87:57:6d:d7:c1: 35:49:5a:39:0b:17:02:ed:2d:65:c3:10:5a:d8:e7:c3:cb:6b: 4a:29:58:d0:de:ea:3f:96:95:e0:cc:4e:18:f9:ba:d5:95:73: 2a:75:f4:ae:51:62:2c:08:a6:be:f1:53:55:cb:b1:e3:8a:f8: f7:dd:66:60:61:92:dc:80:ea:37:06:57:8d:a6:1e:8e:70:a3: d7:23:2b:ee:10:c3:8c:52:f8:39:6f:ad:6e:e4:f9:ed:f5:fc: 10:40:ef:70:0f:9b:2f:ab:49:c0:70:d9:43:32:46:9c:5d:fa: a7:19:fc:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjQxMTIzMDIyNDA2WhcNMjQxMTMwMDIyNDA2WjAYMRYwFAYD VQQDEw02NzQxM2NjNy1jZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31mQCE0ofOJ3G0dSxWCst0vZmlqOXWHCELlq/Ls1o4cPl8QRtKYhiFV6fbQF OU2MeDxCAxUsZZtZQiFCqUxj6AaX13n855BaDRl8hngTjx4cu3HDp+kvtU40yCG1 PPy5mdaBzV9q+Gdf99OAmpozMEsG/yIBmsfc5g9x6q72PThgb/xpp3tRx7NIOyiZ nnZnrwX/4o9ZA81gTPY5xNNytIR1AVLWNOSyIwMt2Bvqn0FoznhdE2FOtsudLpaG uJvi1V41pBRazRuLeSVt7vwvirnTq+nhy8XzPASfiW93XU8T11jDIDHVzhh44p71 C34DyCF93iGEuYy61PIlLpTLEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEn/BEzR l/J0fujrhm+g8vFlJ+aOMB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywGxD0YY0IoAUUZ611yGfVKM0/7ywGxiNeoB0E68L37fl757R3z8h qq43olxrclSMxKI6gSKEXVXRRe3OMqrQREeEXVNjIbOiHKDsD89JzcjdSeIDGWZZ mVreWyGaM5O3fYrcOwQvY2lko19bPETV+Q2qShNRdkjAw1kbKNfiTypRchBCN+wQ FhAgh1dt18E1SVo5CxcC7S1lwxBa2OfDy2tKKVjQ3uo/lpXgzE4Y+brVlXMqdfSu UWIsCKa+8VNVy7Hjivj33WZgYZLcgOo3BleNph6OcKPXIyvuEMOMUvg5b61u5Pnt 9fwQQO9wD5svq0nAcNlDMkacXfqnGfwn -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org