$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: KahtEH9+/vChaq+nX6xUa81SrJosAIQkpkIKakdJt40= Subject key identifier: C0:D6:C9:EF:4B:21:67:57:04:53:55:5F:07:AB:ED:17:C4:F0:EB:CF Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 097A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 0974 Signing time: Fri 22 Nov 2024 19:52:58 +0000 Manifest this update: Fri 22 Nov 2024 19:52:58 +0000 Manifest next update: Fri 29 Nov 2024 19:52:58 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: pPvImeRQV1XXpLnc5bz84dBk0mimaV5wiswJ+oBEaIk=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7d4ZQMpLwZNv6c2aTJKagStC5pu82EAlUBC22iAZFbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Nov 22 19:52:58 2024 GMT Not After : Nov 29 19:52:58 2024 GMT Subject: CN=6740e11a-4e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:87:f1:39:a2:b1:b5:9c:9a:86:6d:9e:81: 9d:bd:a1:e3:a7:66:d3:cc:33:89:b2:89:11:45:6b: fa:8b:fb:fb:0c:4d:8a:b1:07:3d:71:1d:54:57:53: 1e:b3:e6:4a:e0:8e:e7:0d:14:cb:6e:fe:98:00:95: 83:27:30:52:c1:e7:da:a1:fa:5a:b3:20:85:d2:e5: 6c:df:f2:36:52:e9:11:f4:65:b2:ff:8f:c4:55:d4: 77:80:df:d5:54:da:94:e5:79:11:95:5a:02:7e:a6: e7:cc:32:a1:d0:12:cb:78:82:06:2c:63:c0:a2:00: 22:8e:2c:fb:22:cb:7d:c4:a6:b9:08:cf:07:98:5a: f1:f6:ae:ce:ee:64:12:61:3e:01:8d:78:36:6d:29: 24:4b:36:53:b6:b9:19:14:61:db:a7:c2:b3:74:38: 7f:a5:6f:48:9c:d8:1d:30:67:69:2a:e7:22:15:6d: 5f:ae:05:c3:fd:ef:6f:9f:db:19:66:be:ed:ce:4e: b3:49:2b:b3:fb:4f:ab:ff:01:93:f1:2c:99:d2:99: 41:1a:9e:bd:e6:6f:21:34:02:5f:86:c9:34:28:24: be:02:13:29:f0:f6:27:c1:5b:67:65:de:51:1e:84: 53:4d:5a:12:58:7c:61:14:c5:73:6c:dc:10:76:69: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:C9:EF:4B:21:67:57:04:53:55:5F:07:AB:ED:17:C4:F0:EB:CF X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:17:17:f3:e6:66:70:b6:68:5c:bd:cd:39:0d:70:88:4a: 84:c0:4f:06:ea:1f:14:de:4a:d5:a5:2d:79:46:25:da:be:39: cd:ab:63:2e:a8:cc:a3:15:cf:18:8b:6b:bd:fb:70:86:b9:13: ca:4a:73:f8:6e:59:d1:31:5d:dc:86:ac:2c:31:c1:78:2d:57: ed:a9:42:27:45:80:50:f0:aa:94:da:52:2f:69:f6:13:c3:ce: fb:58:a9:13:93:66:a2:58:1d:88:da:82:94:f7:a3:fa:f8:98: 63:5b:94:8a:ff:98:a3:af:1d:aa:83:e2:22:c2:58:c9:52:a6: 3b:3f:2f:8e:2d:38:41:c8:d8:f6:90:5d:23:8e:56:96:30:40: 54:05:85:e9:1f:6e:47:12:e2:76:12:9f:e0:79:d5:9e:7d:2f: 5f:f5:c1:71:ad:b8:49:37:59:f8:36:9e:ab:9e:d3:c0:4f:77: 03:15:ee:09:45:c3:eb:a7:6f:8f:f1:e6:d0:d2:0d:54:52:5c: a6:bc:d8:f9:58:ef:06:2a:b9:2d:ca:8d:cc:6c:0b:fd:37:60: ed:80:0f:f5:c4:81:d9:9a:bd:fa:7b:6d:90:90:e7:3e:03:ed: 89:e1:55:35:da:23:7f:dc:0e:ac:e5:99:de:18:10:15:cd:d3: c2:d2:ff:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjQxMTIyMTk1MjU4WhcNMjQxMTI5MTk1MjU4WjAYMRYwFAYD VQQDEw02NzQwZTExYS00ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRCH8TmisbWcmoZtnoGdvaHjp2bTzDOJsokRRWv6i/v7DE2KsQc9cR1UV1Me s+ZK4I7nDRTLbv6YAJWDJzBSwefaofpasyCF0uVs3/I2UukR9GWy/4/EVdR3gN/V VNqU5XkRlVoCfqbnzDKh0BLLeIIGLGPAogAijiz7Ist9xKa5CM8HmFrx9q7O7mQS YT4BjXg2bSkkSzZTtrkZFGHbp8KzdDh/pW9InNgdMGdpKuciFW1frgXD/e9vn9sZ Zr7tzk6zSSuz+0+r/wGT8SyZ0plBGp695m8hNAJfhsk0KCS+AhMp8PYnwVtnZd5R HoRTTVoSWHxhFMVzbNwQdmnG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDWye9L IWdXBFNVXwer7RfE8OvPMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7RxcX8+ZmcLZoXL3NOQ1wiEqEwE8G6h8U3krVpS15RiXavjnNq2Mu qMyjFc8Yi2u9+3CGuRPKSnP4blnRMV3chqwsMcF4LVftqUInRYBQ8KqU2lIvafYT w877WKkTk2aiWB2I2oKU96P6+JhjW5SK/5ijrx2qg+IiwljJUqY7Py+OLThByNj2 kF0jjlaWMEBUBYXpH25HEuJ2Ep/gedWefS9f9cFxrbhJN1n4Np6rntPAT3cDFe4J RcPrp2+P8ebQ0g1UUlymvNj5WO8GKrktyo3MbAv9N2DtgA/1xIHZmr36e22QkOc+ A+2J4VU12iN/3A6s5ZneGBAVzdPC0v+c -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org