$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: GwJ6bstjCTEZVllAYlk6M2eUFbtV/YVAXyGHZVl/U6E= Subject key identifier: 51:4A:C1:4C:99:FF:EA:47:FF:B6:E5:96:0D:EB:5F:89:77:65:4F:2A Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 03B2 Signing time: Sat 23 Nov 2024 00:16:56 +0000 Manifest this update: Sat 23 Nov 2024 00:16:55 +0000 Manifest next update: Sat 30 Nov 2024 00:16:55 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: 9AZxtvCF6XyBKPTSmUtk4mu5pcp/NV1loypjYui++YQ=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: lzoRu7PAU6kva5pswgNYItUig4xW0or+7Ba0dcJ8VHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Nov 23 00:16:55 2024 GMT Not After : Nov 30 00:16:55 2024 GMT Subject: CN=67411ef7-db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:33:80:c7:f6:74:c1:b1:d7:38:8a:48:0b: f1:ad:90:4e:a1:ae:52:7f:da:46:89:49:58:8a:6e: 44:82:0d:aa:52:86:09:57:d3:f6:7d:47:96:25:0e: 23:ea:dd:0f:47:d9:10:50:23:d5:50:51:83:af:69: 39:53:3f:54:b9:1c:4e:00:02:8a:6a:dd:64:c2:b0: 3a:91:4c:33:68:a0:3d:60:8a:c7:a6:49:1b:d4:1c: 78:b5:96:d7:64:e0:c4:21:6f:50:c6:b6:1c:ad:b9: 60:bd:de:33:c3:7a:54:8c:81:10:f7:26:bb:3a:51: bd:70:ea:b2:65:f7:76:61:f2:25:bc:79:d0:4b:22: 7f:c3:5d:8b:20:08:24:eb:33:25:e1:be:ba:3b:b9: f2:dd:d7:df:cb:05:44:67:26:e0:c4:fa:b5:ec:4c: 06:02:84:62:44:21:ce:df:2d:af:a8:38:ba:78:01: 92:da:b0:ec:17:db:ea:89:75:8e:74:99:53:53:0f: 70:c1:ba:18:fb:01:61:c9:0a:f1:ce:06:01:1b:66: 33:8e:cf:72:3d:85:c5:5d:be:cd:fc:40:bc:43:a4: 79:c9:1e:ae:c0:a1:dd:53:21:05:6b:5a:c7:4d:8c: bd:4d:c0:cc:9e:0a:2b:f6:dd:f2:bd:9f:f1:c7:dd: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:C1:4C:99:FF:EA:47:FF:B6:E5:96:0D:EB:5F:89:77:65:4F:2A X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:c9:a7:99:95:91:8c:96:11:2d:62:f6:f0:05:f6:42:79: 34:94:a5:7c:1f:05:5f:a5:b4:ce:84:ba:6c:01:e0:6b:cd:b3: 6c:21:32:3a:9c:80:2c:27:d3:1d:df:ca:7c:d9:27:ed:dd:d8: 0a:dc:bd:10:55:09:4b:50:11:5f:f3:18:8b:5d:93:ec:eb:7d: c3:99:50:24:6b:a7:86:31:40:f7:4e:71:e2:7b:b0:d2:0a:fb: 48:17:f9:95:db:12:00:17:30:36:6a:45:fa:e4:f1:62:1b:d4: a3:51:b7:68:5f:14:dc:bb:82:87:8d:04:22:35:47:66:4f:60: fe:35:1e:b1:f1:ba:03:2a:ef:a4:9c:e0:12:61:b2:31:86:c8: ab:b5:71:65:59:ed:9b:ac:2c:31:cf:73:90:c6:e9:7f:9e:b3: 21:f7:a8:38:bc:60:90:87:12:50:25:d4:d0:26:27:d4:4d:2d: 70:f7:73:31:3d:3f:68:48:f1:1a:8c:e2:46:4a:a1:64:92:f5: ec:6c:bb:b6:4a:d1:be:e8:57:03:1a:ef:be:1d:8b:a4:cd:ab: 07:f8:b9:d5:0b:4d:33:15:06:eb:a5:ec:7d:f9:cb:f0:8d:64: 5f:ab:ba:27:f1:f1:8b:5d:56:a4:ee:55:f1:c8:5d:19:f2:5e: 74:b0:f3:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjQxMTIzMDAxNjU1WhcNMjQxMTMwMDAxNjU1WjAYMRYwFAYD VQQDEw02NzQxMWVmNy1kYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtQzgMf2dMGx1ziKSAvxrZBOoa5Sf9pGiUlYim5Egg2qUoYJV9P2fUeWJQ4j 6t0PR9kQUCPVUFGDr2k5Uz9UuRxOAAKKat1kwrA6kUwzaKA9YIrHpkkb1Bx4tZbX ZODEIW9QxrYcrblgvd4zw3pUjIEQ9ya7OlG9cOqyZfd2YfIlvHnQSyJ/w12LIAgk 6zMl4b66O7ny3dffywVEZybgxPq17EwGAoRiRCHO3y2vqDi6eAGS2rDsF9vqiXWO dJlTUw9wwboY+wFhyQrxzgYBG2Yzjs9yPYXFXb7N/EC8Q6R5yR6uwKHdUyEFa1rH TYy9TcDMngor9t3yvZ/xx93rIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFKwUyZ /+pH/7bllg3rX4l3ZU8qMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAMMmnmZWRjJYRLWL28AX2Qnk0lKV8HwVfpbTOhLpsAeBrzbNsITI6 nIAsJ9Md38p82Sft3dgK3L0QVQlLUBFf8xiLXZPs633DmVAka6eGMUD3TnHie7DS CvtIF/mV2xIAFzA2akX65PFiG9SjUbdoXxTcu4KHjQQiNUdmT2D+NR6x8boDKu+k nOASYbIxhsirtXFlWe2brCwxz3OQxul/nrMh96g4vGCQhxJQJdTQJifUTS1w93Mx PT9oSPEajOJGSqFkkvXsbLu2StG+6FcDGu++HYukzasH+LnVC00zFQbrpex9+cvw jWRfq7on8fGLXVak7lXxyF0Z8l50sPMJ -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org