$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: QYnr9GYEs66ymecvZpDjwSXMVP5Te0ewyTKAkd+Illc= Subject key identifier: 0E:B6:D2:CE:F4:56:D3:D3:0E:68:DE:E3:FD:FB:5F:A3:CB:6E:A5:95 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 0214 Signing time: Mon 25 Nov 2024 01:22:43 +0000 Manifest this update: Mon 25 Nov 2024 01:22:42 +0000 Manifest next update: Mon 02 Dec 2024 01:22:42 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: vJjsCZPfKg0M99s2kVk6hjq7jcd+rOrJLWXt05ObsTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 01:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Nov 25 01:22:42 2024 GMT Not After : Dec 2 01:22:42 2024 GMT Subject: CN=6743d162-614f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:d9:be:01:f2:2d:83:8c:aa:7d:4e:13:22: 1e:fe:5e:68:84:3a:9f:e9:cb:9b:71:4f:c4:4d:ca: 21:88:ef:ec:5b:f4:d1:d1:66:95:71:20:10:6a:99: 1a:98:2f:56:ad:21:03:80:a4:ed:8d:c7:79:3a:91: 1d:30:63:34:59:eb:51:6a:57:ba:76:33:dd:f2:d6: 2d:c7:4b:fd:93:38:66:7d:96:a4:9c:50:d2:12:e4: 1f:5c:e0:0e:ef:f1:6c:62:4d:7e:13:3b:55:37:07: 35:8f:f1:66:7b:af:57:6f:6f:64:cc:05:ea:e2:fb: 0e:6e:83:bc:92:80:77:79:4b:ca:95:ac:87:c1:e6: a0:f4:49:62:67:02:66:62:f8:1f:c4:8f:97:8e:4d: 32:10:85:b0:eb:35:36:c2:0e:2b:cf:91:c5:64:6a: dd:10:76:c3:90:9e:7b:df:dd:66:8f:66:ea:49:42: 99:be:78:10:69:03:16:c5:79:ff:cf:97:f7:f9:1c: 26:41:88:4c:9a:2d:b2:cb:f4:b1:89:cd:df:58:72: 94:e5:9c:c7:4a:ef:7b:f3:a0:60:44:13:94:e9:1a: 58:c6:05:00:89:aa:de:f2:47:31:75:76:13:5b:a9: 75:b4:dd:8b:42:65:4f:44:be:60:87:95:d6:a5:5b: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B6:D2:CE:F4:56:D3:D3:0E:68:DE:E3:FD:FB:5F:A3:CB:6E:A5:95 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c6:19:1b:0d:3f:30:c8:41:5d:92:4a:32:fb:ce:88:a1:ee: 71:5f:25:87:1a:ff:78:63:62:6b:6c:e6:9a:a0:30:ab:19:8d: ba:70:5b:01:ae:80:34:72:3a:5f:e2:7b:b0:b8:d6:cf:a0:f6: 09:ef:f9:a3:32:79:1b:fd:29:81:e2:3e:a2:f4:08:80:10:d0: c2:f4:2f:fc:b4:fd:8c:2c:58:ff:ef:28:73:24:ce:9a:d8:f2: 43:b7:46:65:93:92:b6:19:60:b9:11:a1:ba:d3:64:04:85:90: 7f:c7:a5:73:98:6b:3d:b1:d7:1e:f1:e3:92:60:15:29:91:e3: fb:28:5b:a4:d0:54:3a:0e:1e:7c:79:91:84:dc:24:af:f4:84: 16:ab:da:d3:e7:ef:23:95:09:9a:2e:5e:93:dc:98:67:4c:f5: 3a:cc:a8:da:9e:68:30:55:0f:68:f5:24:7a:32:f3:86:f2:09: 5b:13:ff:6a:4a:30:42:75:6c:79:21:26:5e:5c:c1:ef:5c:ce: 38:16:69:93:db:55:7f:5c:fc:e2:ed:8f:12:b2:40:28:21:9a: 43:8d:92:d0:8d:e2:08:1b:c9:94:fa:7f:03:4f:ad:fe:37:3f: 07:f5:c5:50:01:63:9a:07:f8:02:f9:a0:9d:9a:61:e0:00:a2: d1:de:6c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjQxMTI1MDEyMjQyWhcNMjQxMjAyMDEyMjQyWjAYMRYwFAYD VQQDEw02NzQzZDE2Mi02MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjXZvgHyLYOMqn1OEyIe/l5ohDqf6cubcU/ETcohiO/sW/TR0WaVcSAQapka mC9WrSEDgKTtjcd5OpEdMGM0WetRale6djPd8tYtx0v9kzhmfZaknFDSEuQfXOAO 7/FsYk1+EztVNwc1j/Fme69Xb29kzAXq4vsOboO8koB3eUvKlayHweag9EliZwJm YvgfxI+Xjk0yEIWw6zU2wg4rz5HFZGrdEHbDkJ57391mj2bqSUKZvngQaQMWxXn/ z5f3+RwmQYhMmi2yy/Sxic3fWHKU5ZzHSu9786BgRBOU6RpYxgUAiare8kcxdXYT W6l1tN2LQmVPRL5gh5XWpVtZtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA620s70 VtPTDmje4/37X6PLbqWVMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUxhkbDT8wyEFdkkoy+86Ioe5xXyWHGv94Y2JrbOaaoDCrGY26cFsB roA0cjpf4nuwuNbPoPYJ7/mjMnkb/SmB4j6i9AiAENDC9C/8tP2MLFj/7yhzJM6a 2PJDt0Zlk5K2GWC5EaG602QEhZB/x6VzmGs9sdce8eOSYBUpkeP7KFuk0FQ6Dh58 eZGE3CSv9IQWq9rT5+8jlQmaLl6T3JhnTPU6zKjanmgwVQ9o9SR6MvOG8glbE/9q SjBCdWx5ISZeXMHvXM44FmmT21V/XPzi7Y8SskAoIZpDjZLQjeIIG8mU+n8DT63+ Nz8H9cVQAWOaB/gC+aCdmmHgAKLR3mxz -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:21 2024 by rpki-client on console-fra.rpki-client.org