$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft File: rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json) Hash identifier: EIe0DKhVvSBCVLAQMnJo9lwxrVO4hwMtc6dw7sTRFV0= Subject key identifier: C9:E2:3C:0E:45:D2:14:05:52:DC:6F:AF:67:47:CD:24:C4:86:85:83 Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3 Certificate issuer: /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft Manifest number: 0532 Signing time: Fri 22 Nov 2024 23:04:15 +0000 Manifest this update: Fri 22 Nov 2024 23:04:15 +0000 Manifest next update: Fri 29 Nov 2024 23:04:15 +0000 Files and hashes: 1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: YTyvpuoypwDaA8mOhhXa5v1UNxsYBohePQf7JrhBMkY=) 2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: 8hqvaN3hvlkWTiAFriU5tZiN/3ujG/aVXQcge+TLoA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3 Validity Not Before: Nov 22 23:04:15 2024 GMT Not After : Nov 29 23:04:15 2024 GMT Subject: CN=67410def-05f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:a8:b6:e1:97:e4:21:3b:7c:25:38:80:9e: 67:4d:64:34:a4:fb:72:47:da:1a:8e:4c:b2:22:fc: e7:cb:fe:5c:9e:3e:df:82:b5:b9:ed:a8:84:cd:80: c8:3d:df:3f:77:6e:ba:62:db:ca:ea:9b:81:2b:25: e5:b2:92:e4:0d:00:55:2b:d5:66:85:c4:c8:99:72: 99:de:c8:47:48:6b:ba:34:bd:1f:3f:df:9e:e7:6b: 29:eb:78:19:d7:2c:c7:6d:21:b3:34:63:a5:84:a8: bd:e4:5c:f6:c1:e6:38:0f:fd:0c:1c:f5:66:10:09: 6c:07:c3:9d:fa:f5:e0:8d:53:b1:01:cc:8c:93:54: 50:fe:fa:85:7c:31:65:a3:9a:09:49:08:bb:92:22: 18:97:ae:31:dd:90:c0:af:7d:65:4f:f4:13:36:07: 48:91:9f:7f:0b:01:38:e2:d8:42:ed:db:32:12:c1: b6:64:78:e8:85:a0:60:a3:8d:1f:c3:fe:7f:ca:62: 42:a6:89:3a:43:44:7e:af:3f:95:2d:8c:e0:8f:eb: b4:a6:dd:bc:97:7c:ad:4d:20:93:63:0d:1a:0e:5f: d6:7e:d2:3a:82:93:89:b3:0e:79:af:6f:be:c6:57: d3:4e:98:a1:8a:8e:74:55:1c:45:24:00:24:f9:73: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E2:3C:0E:45:D2:14:05:52:DC:6F:AF:67:47:CD:24:C4:86:85:83 X509v3 Authority Key Identifier: keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:94:e4:d0:b8:72:4d:aa:4e:04:55:35:b3:2e:7f:92:4a:4e: 34:14:c1:e4:21:99:04:02:5a:b5:e7:e2:d0:d8:2e:36:5f:02: 7f:9e:0d:d3:03:3a:f6:73:f9:7b:e2:14:52:af:cd:15:61:d1: f6:c9:35:b4:07:22:ed:3b:2f:a8:df:2d:c6:39:a1:41:8e:4d: bb:a4:a5:33:83:18:e5:cd:31:23:1c:a2:45:66:b0:a6:74:84: dc:2e:05:c1:c3:b7:b9:47:a7:ff:df:1d:62:a7:78:4d:45:be: 1b:73:f9:be:c2:01:59:46:01:e3:a7:75:c1:e1:e1:7c:5f:e3: ed:d2:58:e5:e7:e7:29:e1:45:29:0d:fc:2d:3d:23:ba:f9:2c: 76:d3:e5:e6:5f:70:b0:89:39:ec:f0:68:d6:3e:f2:11:79:2e: cb:ab:47:ee:b4:98:91:b0:e2:87:2d:eb:25:5e:f0:83:c2:47: 30:22:bb:7b:d0:84:7e:6d:57:3f:eb:1b:76:f6:51:34:40:11: 77:bd:1f:41:dc:c0:8f:f2:0f:dd:da:43:e7:b5:90:15:2d:1e: 9b:be:ef:33:39:3c:d1:11:96:cd:67:a4:02:c5:76:25:9e:d2: 4c:b9:89:dc:f4:5a:49:f7:85:61:27:c6:16:b0:29:56:7b:ee: 72:f6:2d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkwNUIxMTAvBgNVBAUTKEFDQTkxRUE0MDk3RDlFOUYzMUY1NkVGQUM2QkQ0OEYw MTZCRTk4RDMwHhcNMjQxMTIyMjMwNDE1WhcNMjQxMTI5MjMwNDE1WjAYMRYwFAYD VQQDEw02NzQxMGRlZi0wNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoR2otuGX5CE7fCU4gJ5nTWQ0pPtyR9oajkyyIvzny/5cnj7fgrW57aiEzYDI Pd8/d266YtvK6puBKyXlspLkDQBVK9VmhcTImXKZ3shHSGu6NL0fP9+e52sp63gZ 1yzHbSGzNGOlhKi95Fz2weY4D/0MHPVmEAlsB8Od+vXgjVOxAcyMk1RQ/vqFfDFl o5oJSQi7kiIYl64x3ZDAr31lT/QTNgdIkZ9/CwE44thC7dsyEsG2ZHjohaBgo40f w/5/ymJCpok6Q0R+rz+VLYzgj+u0pt28l3ytTSCTYw0aDl/WftI6gpOJsw55r2++ xlfTTpihio50VRxFJAAk+XPFZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMniPA5F 0hQFUtxvr2dHzSTEhoWDMB8GA1UdIwQYMBaAFKypHqQJfZ6fMfVu+sa9SPAWvpjT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTA1Qi8xNjZGQzg4NkQz RTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5wOHg5Vzc2eHIxSThCYS1t Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLa2VwQWw5bnA4eDlXNzZ4cjFJOEJhLW1OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTA1Qi8xNjZGQzg4NkQzRTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5w OHg5Vzc2eHIxSThCYS1tTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCslOTQuHJNqk4EVTWzLn+SSk40FMHkIZkEAlq15+LQ2C42XwJ/ng3T Azr2c/l74hRSr80VYdH2yTW0ByLtOy+o3y3GOaFBjk27pKUzgxjlzTEjHKJFZrCm dITcLgXBw7e5R6f/3x1ip3hNRb4bc/m+wgFZRgHjp3XB4eF8X+Pt0ljl5+cp4UUp DfwtPSO6+Sx20+XmX3CwiTns8GjWPvIReS7Lq0futJiRsOKHLeslXvCDwkcwIrt7 0IR+bVc/6xt29lE0QBF3vR9B3MCP8g/d2kPntZAVLR6bvu8zOTzREZbNZ6QCxXYl ntJMuYnc9FpJ94VhJ8YWsClWe+5y9i0t -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org