$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: WHvwIgct25TvrIHWJfqjGsX/uf5o1n46/wZooy3kfU8= Subject key identifier: A5:E7:2B:E1:28:58:33:AF:01:C8:D5:61:6B:8E:33:ED:FB:61:A5:99 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 053E Signing time: Fri 22 Nov 2024 23:02:22 +0000 Manifest this update: Fri 22 Nov 2024 23:02:21 +0000 Manifest next update: Fri 29 Nov 2024 23:02:21 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: YZUx41tfeNo2wA19gYBRjuiK2KKqbAUR+jGeUexit1c=) 2: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: 7fqXwcDMViUGksefOIDEbGFQPWAHlvrlXbc5Ijdn5rA=) 3: 372C520CFDFF11EEA6CEDB2FC4F9AE02.roa (hash: 2HSyR9/qDj6A++MWvCQqzP3v4KNQcaxA2Cp1UbFvPlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Nov 22 23:02:21 2024 GMT Not After : Nov 29 23:02:21 2024 GMT Subject: CN=67410d7e-3f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:9c:3d:0f:5e:84:38:94:6a:95:bd:28:47: 15:cc:d7:06:af:e4:e7:f2:40:b0:94:6f:2e:4d:a5: 13:61:8a:51:7c:ef:d2:d5:0e:67:e4:67:e7:10:f0: de:5a:1c:fa:c6:44:20:a6:6b:eb:31:6d:b8:26:d8: 1d:73:47:96:b6:c2:41:df:b0:85:6b:20:f8:65:78: 2e:f7:c3:25:9a:30:55:60:1a:c0:5e:1f:dd:41:bb: 3a:cf:a9:6e:22:9e:ca:50:84:45:fa:2c:a4:eb:6e: c6:36:da:69:f3:bc:c0:49:4a:66:20:69:2e:a6:b6: fb:97:ce:0a:fd:2f:b2:9c:58:7d:59:1f:bf:30:3c: 26:52:ed:8e:e2:c1:72:11:06:c2:60:ec:db:9f:fb: ed:93:32:6d:f3:95:34:9c:e3:3e:e6:d6:22:d9:36: 35:9c:bf:67:08:e1:7d:58:57:19:95:ad:f3:81:6b: 27:bb:1f:b3:c1:21:03:da:b9:4b:91:e5:91:92:e4: 22:3a:4e:5d:db:e8:0f:67:2a:82:5e:a4:d6:3a:68: 87:9c:b1:27:45:ab:9b:82:b9:de:73:b6:20:b8:0b: d5:af:dc:b5:ab:a4:af:8a:89:82:35:c0:62:b0:45: b0:60:a3:1e:8a:2f:4f:20:d5:df:85:20:f9:2e:c2: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E7:2B:E1:28:58:33:AF:01:C8:D5:61:6B:8E:33:ED:FB:61:A5:99 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:b2:95:9c:69:0e:27:c3:67:46:64:2a:96:b6:3c:76:b6: e5:dc:3e:01:34:e9:1f:a5:1a:90:c9:fa:2b:0e:33:66:7e:ac: af:3b:e4:89:2d:36:87:5c:67:88:86:01:2d:55:5b:03:07:61: 1a:ac:f4:8f:6d:cd:34:cb:d9:74:93:c1:e4:c5:ea:3f:9a:5a: f3:86:d9:ac:b5:ac:32:f3:e5:b6:c1:de:0f:9d:e9:7f:0c:99: 77:1d:34:84:4d:92:de:29:84:bb:46:a3:15:bf:36:43:33:e2: 7f:df:24:ec:46:75:b3:a3:52:36:b3:49:08:3b:34:85:e4:85: 80:16:00:8e:2b:e6:a3:7c:06:0b:c3:8f:50:e5:45:18:e7:fc: 6c:6a:90:5a:1d:f0:45:9e:83:de:27:8b:da:2a:94:b8:0d:ba: aa:4d:48:6c:5b:92:dd:94:5b:26:b3:d7:f0:7c:40:2d:68:24: 81:cb:06:dc:73:72:6e:82:20:36:05:1c:00:f0:03:7a:63:71: 49:89:62:f8:f2:93:47:bf:45:35:93:71:86:74:87:44:b2:95: a2:57:9c:29:fb:5c:d1:6e:67:20:f1:ec:ae:fc:a7:9e:ab:08: d4:df:62:44:e3:41:aa:11:89:77:dd:d5:62:0f:37:44:9c:b4: 54:67:5b:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjQxMTIyMjMwMjIxWhcNMjQxMTI5MjMwMjIxWjAYMRYwFAYD VQQDEw02NzQxMGQ3ZS0zZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgicPQ9ehDiUapW9KEcVzNcGr+Tn8kCwlG8uTaUTYYpRfO/S1Q5n5GfnEPDe Whz6xkQgpmvrMW24Jtgdc0eWtsJB37CFayD4ZXgu98MlmjBVYBrAXh/dQbs6z6lu Ip7KUIRF+iyk627GNtpp87zASUpmIGkuprb7l84K/S+ynFh9WR+/MDwmUu2O4sFy EQbCYOzbn/vtkzJt85U0nOM+5tYi2TY1nL9nCOF9WFcZla3zgWsnux+zwSED2rlL keWRkuQiOk5d2+gPZyqCXqTWOmiHnLEnRaubgrnec7YguAvVr9y1q6SviomCNcBi sEWwYKMeii9PINXfhSD5LsIXGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXnK+Eo WDOvAcjVYWuOM+37YaWZMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbLbKVnGkOJ8NnRmQqlrY8drbl3D4BNOkfpRqQyforDjNmfqyvO+SJ LTaHXGeIhgEtVVsDB2EarPSPbc00y9l0k8Hkxeo/mlrzhtmstawy8+W2wd4Pnel/ DJl3HTSETZLeKYS7RqMVvzZDM+J/3yTsRnWzo1I2s0kIOzSF5IWAFgCOK+ajfAYL w49Q5UUY5/xsapBaHfBFnoPeJ4vaKpS4DbqqTUhsW5LdlFsms9fwfEAtaCSBywbc c3JugiA2BRwA8AN6Y3FJiWL48pNHv0U1k3GGdIdEspWiV5wp+1zRbmcg8eyu/Kee qwjU32JE40GqEYl33dViDzdEnLRUZ1ve -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org