$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: F+BASR7bu5oB+EjglPDcKIPBvlgI5aNggQs4cnWywfo= Subject key identifier: 8E:31:6B:8C:EA:C7:64:F9:D9:AD:4F:B6:1C:52:46:0E:8A:9A:41:9F Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: 4D Signing time: Thu 21 Nov 2024 05:20:28 +0000 Manifest this update: Thu 21 Nov 2024 05:20:27 +0000 Manifest next update: Thu 28 Nov 2024 05:20:27 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: dYMdOYsDzUzbe4jAkgZrmWlRLd5rcidYSAU0oZaTgSM=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: BGWFxC/B5z+W4syYv1KrB6WI1JIbx5pNt/4UAlcwzEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Nov 21 05:20:27 2024 GMT Not After : Nov 28 05:20:27 2024 GMT Subject: CN=673ec31b-5397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:38:63:eb:b4:c3:2a:d0:57:0d:a5:3f:a7: 16:88:35:cd:d4:f7:54:cc:5c:84:a8:b3:2b:df:fa: ad:bb:bd:5c:a3:a4:b0:3d:46:a4:27:2f:68:2b:d9: 9b:1e:ff:c1:d8:5e:ee:db:36:99:6c:e1:96:84:d1: c4:8c:b3:45:e3:d3:c7:62:36:c3:fb:98:a0:97:e0: 4f:c9:7b:7d:85:2b:96:8e:bf:36:d0:da:b8:32:65: ca:53:97:b4:d3:af:7d:6f:65:ec:64:84:67:ef:30: ae:bc:2b:06:b9:b0:e6:99:11:d6:00:e3:c0:55:18: 2d:7b:14:55:6b:42:22:5f:37:f7:5b:ce:3d:17:b5: 33:ca:9e:7c:23:a8:7c:36:fb:a3:a5:0a:bf:fb:05: 6e:67:0f:c3:5e:8f:0a:2e:48:f7:5f:2c:79:62:7c: 87:30:79:2f:42:d6:b0:58:88:04:c4:36:b9:2a:60: 0e:e0:0b:c0:e4:10:15:50:b3:f9:39:79:6b:40:4d: e4:ef:44:fb:20:72:c4:46:0c:e3:26:6f:60:e7:ee: 8d:32:97:7e:38:69:4c:d9:5b:60:d1:5a:1b:b5:0b: 4d:d3:89:59:1a:f6:3f:93:81:9e:7e:46:69:f0:0e: 00:84:da:7e:84:e6:58:2a:54:33:d2:23:2c:64:33: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:31:6B:8C:EA:C7:64:F9:D9:AD:4F:B6:1C:52:46:0E:8A:9A:41:9F X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:90:58:cf:e1:74:71:75:45:71:da:f8:0a:f8:bf:a3:c5:a6: 05:7d:50:61:94:46:c0:c8:30:2a:eb:8a:5e:3b:1c:b8:31:e4: 1b:66:44:b8:2f:15:82:03:09:d8:16:04:18:7d:6e:14:1d:6b: 28:86:b4:a8:93:84:a3:45:8f:aa:7e:50:d6:44:b7:c9:95:cb: 87:db:f0:dc:d5:c8:dd:7c:c4:32:de:f3:16:32:ba:1d:90:26: c9:45:e9:57:49:32:61:e4:cd:fd:b0:4c:40:61:24:d7:fd:4e: e7:99:a4:be:6d:65:67:27:42:4b:6e:3a:62:d9:ab:90:e4:a8: bc:29:56:68:5c:d2:17:dc:68:e8:47:68:3d:31:bf:76:6e:3b: d6:2e:09:9c:89:f5:ac:c4:de:2a:f4:80:62:fe:dc:89:f8:65: 31:40:65:bb:6f:86:3e:c8:de:14:28:b2:24:0a:82:b7:23:99: 8b:21:04:c9:55:b3:79:16:2b:17:d6:17:39:ca:a7:fb:b8:c0: 98:25:10:e9:51:ed:59:08:78:36:03:9f:7a:c2:ae:f0:b2:96: cb:63:39:ec:64:2a:4e:56:18:08:aa:34:0c:65:ca:9a:fd:1d: 8a:9c:b4:5e:a5:3d:a7:f0:dc:f5:eb:a6:82:af:e3:b6:24:ec: e9:bc:c4:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzRGQjExMC8GA1UEBRMoOTIyNDE2NjU5NTU4MjE3QzkzNjI3Qjk2RDlDOUVBRkFD MUZBQTNFRTAeFw0yNDExMjEwNTIwMjdaFw0yNDExMjgwNTIwMjdaMBgxFjAUBgNV BAMTDTY3M2VjMzFiLTUzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBPDhj67TDKtBXDaU/pxaINc3U91TMXISosyvf+q27vVyjpLA9RqQnL2gr2Zse /8HYXu7bNpls4ZaE0cSMs0Xj08diNsP7mKCX4E/Je32FK5aOvzbQ2rgyZcpTl7TT r31vZexkhGfvMK68Kwa5sOaZEdYA48BVGC17FFVrQiJfN/dbzj0XtTPKnnwjqHw2 +6OlCr/7BW5nD8NejwouSPdfLHlifIcweS9C1rBYiATENrkqYA7gC8DkEBVQs/k5 eWtATeTvRPsgcsRGDOMmb2Dn7o0yl344aUzZW2DRWhu1C03TiVka9j+TgZ5+Rmnw DgCE2n6E5lgqVDPSIyxkMzwLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjjFrjOrH ZPnZrU+2HFJGDoqaQZ8wHwYDVR0jBBgwFoAUkiQWZZVYIXyTYnuW2cnq+sH6o+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NEZCLzgxNjk3MkM2MzQz OTExRUY5QzNEMjEzRUM0RjlBRTAyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8t NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2lRV1paVllJWHlUWW51VzJjbnEtc0g2by00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NEZCLzgxNjk3MkM2MzQzOTExRUY5QzNEMjEzRUM0RjlBRTAyL2tpUVdaWlZZSVh5 VFludVcyY25xLXNINm8tNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6QWM/hdHF1RXHa+Ar4v6PFpgV9UGGURsDIMCrril47HLgx5BtmRLgv FYIDCdgWBBh9bhQdayiGtKiThKNFj6p+UNZEt8mVy4fb8NzVyN18xDLe8xYyuh2Q JslF6VdJMmHkzf2wTEBhJNf9TueZpL5tZWcnQktuOmLZq5DkqLwpVmhc0hfcaOhH aD0xv3ZuO9YuCZyJ9azE3ir0gGL+3In4ZTFAZbtvhj7I3hQosiQKgrcjmYshBMlV s3kWKxfWFznKp/u4wJglEOlR7VkIeDYDn3rCrvCylstjOexkKk5WGAiqNAxlypr9 HYqctF6lPafw3PXrpoKv47Yk7Om8xDY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org