$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft File: KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json) Hash identifier: eH8BiGFDwAxc2+I1QHS1dbjK7JHWLifcSi4Xd2ZO4yc= Subject key identifier: 8C:B9:48:F2:CE:3F:73:B4:B9:DD:8A:C4:7A:0A:AF:57:B5:9B:3D:1B Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B Certificate issuer: /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft Manifest number: 0304 Signing time: Sat 23 Nov 2024 00:50:08 +0000 Manifest this update: Sat 23 Nov 2024 00:50:07 +0000 Manifest next update: Sat 30 Nov 2024 00:50:07 +0000 Files and hashes: 1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: 976atHc6uT2L9KWsd+jEv9owZItnSV18jXvUfpQ3AVs=) 2: BFFAF880912711EE92065180C4F9AE02.roa (hash: +cOVT6IUlf5AF9Iwe8S2ZR7C+kK58G6HwMNDUoEK6dU=) 3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: TgaszdDD0RtD3WBLop2xKd2Re72k68i95Zea6tpoI9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Validity Not Before: Nov 23 00:50:07 2024 GMT Not After : Nov 30 00:50:07 2024 GMT Subject: CN=674126bf-cd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:ca:bc:42:b7:db:7c:ac:e0:bb:7b:ba:be: c0:df:78:c4:61:fc:bc:de:7f:4e:f1:0c:40:1b:b1: 15:07:a9:99:24:54:fe:63:a6:10:0e:39:65:25:80: 0e:af:ce:61:af:af:1b:b6:a3:d4:6a:08:28:03:6d: c7:20:55:ed:65:09:36:53:c8:bf:f7:4c:ca:a3:1e: 82:08:14:4d:93:26:15:bb:0e:8d:d5:a9:16:d3:72: 22:bb:97:1f:8d:14:7d:58:6a:10:7e:26:0b:d9:83: e1:e7:da:31:e5:d8:35:0d:98:63:91:db:b0:ae:9a: ce:d0:52:fe:1e:c1:b8:13:76:1a:b2:d3:a7:c0:b3: 02:36:6a:1b:e9:51:e8:d8:b7:67:7e:1c:da:89:c7: 1b:63:23:85:4c:70:0e:8f:90:b0:2a:b3:ff:26:42: 4f:d2:fd:7b:dd:a5:85:27:b6:4b:2b:53:b1:b3:8a: 4d:da:d5:37:db:08:c9:e7:4b:df:f1:e7:8b:69:d2: b6:0b:a4:ef:97:c6:a5:f2:17:81:7a:5e:3a:91:b5: ff:4d:2b:f3:6d:ae:20:05:9b:6a:4b:11:29:ea:96: 6f:6f:7a:a8:3c:1c:81:f8:06:80:73:f4:77:d0:b1: 7e:79:54:bb:0a:de:6a:2e:2c:f8:0b:3b:45:df:82: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:48:F2:CE:3F:73:B4:B9:DD:8A:C4:7A:0A:AF:57:B5:9B:3D:1B X509v3 Authority Key Identifier: keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:0f:70:38:87:7f:5a:8c:f8:b9:5e:9b:1a:47:65:95:0a: 67:b2:9f:62:2e:ba:6b:ea:8d:a8:67:c1:1e:8b:fc:64:e3:88: d8:bb:22:f8:3c:e4:59:90:a6:43:57:07:4e:21:fd:e4:cc:0c: 94:30:a2:26:6e:a1:6d:0a:23:59:99:09:66:c8:a9:2c:5f:7c: ac:f8:84:18:32:2c:bb:17:ca:37:8f:a1:d6:e6:0b:91:89:5d: 48:7b:9d:ee:e0:e9:4a:45:60:83:6b:4f:59:a2:fe:b1:97:2e: 65:40:cf:cc:06:1f:80:c0:e0:2f:e3:3d:d7:99:12:79:22:96: 26:0d:d2:a7:8e:53:80:0a:47:a3:f0:f3:58:af:87:51:24:7e: 48:d8:f0:4d:c5:9b:f3:5c:45:f4:56:e0:be:b0:fb:70:41:be: b0:2b:21:08:56:45:bd:99:a0:da:7d:5d:e4:b3:38:c6:1f:27: 4e:11:c3:47:8e:fb:c6:e1:a9:65:38:90:f9:e7:8c:e4:d5:37: ab:c5:bb:68:e2:b3:9b:c8:26:fa:34:0c:d2:6d:28:42:0c:39: ec:00:c9:fb:ca:5c:2a:84:11:12:bb:49:85:bf:fd:e5:4c:af: ff:2d:bc:4d:a8:aa:0c:a8:df:1c:2f:f9:d6:e6:20:59:12:4b: 9d:5f:09:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD MEE2MTAwNkIwHhcNMjQxMTIzMDA1MDA3WhcNMjQxMTMwMDA1MDA3WjAYMRYwFAYD VQQDEw02NzQxMjZiZi1jZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPnKvEK323ys4Lt7ur7A33jEYfy83n9O8QxAG7EVB6mZJFT+Y6YQDjllJYAO r85hr68btqPUaggoA23HIFXtZQk2U8i/90zKox6CCBRNkyYVuw6N1akW03Iiu5cf jRR9WGoQfiYL2YPh59ox5dg1DZhjkduwrprO0FL+HsG4E3YastOnwLMCNmob6VHo 2LdnfhzaiccbYyOFTHAOj5CwKrP/JkJP0v173aWFJ7ZLK1Oxs4pN2tU32wjJ50vf 8eeLadK2C6Tvl8al8heBel46kbX/TSvzba4gBZtqSxEp6pZvb3qoPByB+AaAc/R3 0LF+eVS7Ct5qLiz4CztF34JCOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy5SPLO P3O0ud2KxHoKr1e1mz0bMB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2 RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4 SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGaQ9wOId/Woz4uV6bGkdllQpnsp9iLrpr6o2oZ8Eei/xk44jYuyL4 PORZkKZDVwdOIf3kzAyUMKImbqFtCiNZmQlmyKksX3ys+IQYMiy7F8o3j6HW5guR iV1Ie53u4OlKRWCDa09Zov6xly5lQM/MBh+AwOAv4z3XmRJ5IpYmDdKnjlOACkej 8PNYr4dRJH5I2PBNxZvzXEX0VuC+sPtwQb6wKyEIVkW9maDafV3kszjGHydOEcNH jvvG4allOJD554zk1Terxbto4rObyCb6NAzSbShCDDnsAMn7ylwqhBESu0mFv/3l TK//LbxNqKoMqN8cL/nW5iBZEkudXwlT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org