$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: Nd3akklRlFJsb76eIuE3j1BrpRSH0VYd/qpi3iNtQLo= Subject key identifier: 21:06:33:CB:60:69:22:5F:1F:0F:A4:16:1E:CE:D1:AC:3B:17:52:3F Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 2D Signing time: Mon 21 Oct 2024 06:09:55 +0000 Manifest this update: Mon 21 Oct 2024 06:09:55 +0000 Manifest next update: Mon 28 Oct 2024 06:09:55 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: KbatXZieRvz3bLa7L1Ws8TGUQI77SsT7fLvPn3TkHGg=) 2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=) 3: 4B5B64C25F6411EFBC739B4FC4F9AE02.roa (hash: VYna6cWYFndEMpqakjNTMdAcPe4hQVZ6c7OGBrC7QsU=) 4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Oct 2024 06:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Oct 21 06:09:55 2024 GMT Not After : Oct 28 06:09:55 2024 GMT Subject: CN=6715f033-3bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:57:37:d4:ae:e6:d5:90:1d:6d:a7:42:b8:77: 37:2f:62:7f:13:2b:fc:94:2d:d6:b9:5b:c2:8d:3c: 92:18:ad:18:34:16:21:6b:0a:e5:4a:86:bb:2c:8c: 6f:db:b6:56:6a:e4:a3:79:e1:d1:6a:d7:7c:44:b1: 38:78:b9:ce:6f:3c:de:94:1f:41:83:73:54:a5:71: dc:c0:1c:90:4c:62:88:58:03:b0:fa:b3:fd:b8:f8: b6:4f:fa:fa:66:60:0d:0d:8d:b8:b8:37:d5:ad:33: 75:4e:55:93:43:c6:4b:ae:84:1e:fe:1e:1c:a0:a3: 66:7a:8b:bb:05:4c:dc:2e:a6:97:c2:44:84:45:22: f5:21:47:20:07:a9:d7:aa:f3:e6:48:e9:d4:e6:98: 8c:8a:fe:34:26:61:4d:dd:79:8a:de:67:c6:c1:2a: a3:3c:aa:e2:a9:e7:48:a9:f1:97:52:c3:d5:09:90: 39:03:47:8e:5e:59:36:fc:03:3a:4c:1e:76:21:0e: eb:94:2b:e5:95:b8:c2:6f:a0:0f:b3:f1:d0:1a:7d: e0:e7:95:80:ab:ce:21:dd:59:a6:8b:d3:00:06:46: 0d:0f:d3:d0:6b:9d:94:c2:ad:ce:a6:11:ee:04:4e: d4:29:20:e5:95:f8:57:03:36:83:0c:a8:81:d4:97: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:33:CB:60:69:22:5F:1F:0F:A4:16:1E:CE:D1:AC:3B:17:52:3F X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:73:77:14:83:ef:79:1b:cd:0c:ef:31:c6:ea:b3:e5:2e:a4: d3:07:59:4a:a5:41:6e:55:2e:72:6e:4c:da:27:15:d3:60:7d: 49:a8:6d:7e:2f:8b:14:39:a3:3c:d7:e0:26:f7:a2:ef:10:f7: b7:03:41:4c:77:49:cc:6e:95:b2:47:19:64:d2:ae:27:92:b8: 97:2d:2c:e0:4c:4e:74:90:04:0d:e0:9c:9e:7d:91:25:67:f6: c4:d7:ec:1e:05:82:35:cd:45:9a:76:c0:75:31:88:9f:80:79: c4:f3:1d:17:1f:b1:51:7e:fa:17:0d:36:d8:f1:26:c9:e3:af: b4:60:af:37:c9:5f:18:c1:af:b7:2c:3a:f1:bd:c2:54:76:fa: 9a:92:37:d2:ab:c9:20:a8:a7:19:60:51:cf:e8:b5:a0:14:f0: a9:4b:1c:43:d7:ef:57:34:a7:0d:f3:e5:b9:be:77:94:fa:cb: 5a:9b:16:be:d2:c9:9e:d8:5e:c3:6d:38:55:e4:21:a1:95:75: 7f:5a:6b:94:70:26:cd:b1:3b:b6:f7:93:41:02:1c:22:5d:1a: ea:6e:5c:be:cc:5b:00:c5:3a:fa:42:d4:16:7f:5e:54:a2:ea: 2d:92:28:b2:68:e8:ea:f6:3f:e2:a2:70:0f:94:fc:80:04:63: 9c:71:de:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTY3MjExMC8GA1UEBRMoOTFBQTc3ODNGQjAyNzgxOTgzOEM0QTkxQzkxQzYwRDQx RkIzRUVBQjAeFw0yNDEwMjEwNjA5NTVaFw0yNDEwMjgwNjA5NTVaMBgxFjAUBgNV BAMTDTY3MTVmMDMzLTNiYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsVzfUrubVkB1tp0K4dzcvYn8TK/yULda5W8KNPJIYrRg0FiFrCuVKhrssjG/b tlZq5KN54dFq13xEsTh4uc5vPN6UH0GDc1SlcdzAHJBMYohYA7D6s/24+LZP+vpm YA0Njbi4N9WtM3VOVZNDxkuuhB7+Hhygo2Z6i7sFTNwuppfCRIRFIvUhRyAHqdeq 8+ZI6dTmmIyK/jQmYU3deYreZ8bBKqM8quKp50ip8ZdSw9UJkDkDR45eWTb8AzpM HnYhDuuUK+WVuMJvoA+z8dAafeDnlYCrziHdWaaL0wAGRg0P09BrnZTCrc6mEe4E TtQpIOWV+FcDNoMMqIHUlwT5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIQYzy2Bp Il8fD6QWHs7RrDsXUj8wHwYDVR0jBBgwFoAUkap3g/sCeBmDjEqRyRxg1B+z7qsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjcyL0U1RjQ1QUQwNUY1 NDExRUY4RDE4QkUyM0M0RjlBRTAyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdx cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2FwM2dfc0NlQm1EakVxUnlSeGcxQi16N3FzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NjcyL0U1RjQ1QUQwNUY1NDExRUY4RDE4QkUyM0M0RjlBRTAyL2thcDNnX3NDZUJt RGpFcVJ5UnhnMUItejdxcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZzdxSD73kbzQzvMcbqs+UupNMHWUqlQW5VLnJuTNonFdNgfUmobX4v ixQ5ozzX4Cb3ou8Q97cDQUx3ScxulbJHGWTSrieSuJctLOBMTnSQBA3gnJ59kSVn 9sTX7B4FgjXNRZp2wHUxiJ+AecTzHRcfsVF++hcNNtjxJsnjr7RgrzfJXxjBr7cs OvG9wlR2+pqSN9KrySCopxlgUc/otaAU8KlLHEPX71c0pw3z5bm+d5T6y1qbFr7S yZ7YXsNtOFXkIaGVdX9aa5RwJs2xO7b3k0ECHCJdGupuXL7MWwDFOvpC1BZ/XlSi 6i2SKLJo6Or2P+KicA+U/IAEY5xx3us= -----END CERTIFICATE-----Generated at Mon Oct 21 07:54:13 2024 by rpki-client on console-ams.rpki-client.org