$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: p+oj82qqU+bAG+oOZif2gEA9jexLwI2UixWtNiLstx8= Subject key identifier: 78:CD:35:19:AD:CE:37:0C:7F:1D:95:BA:18:F3:FA:45:69:A7:D8:45 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 0337 Signing time: Sat 23 Nov 2024 00:40:49 +0000 Manifest this update: Sat 23 Nov 2024 00:40:48 +0000 Manifest next update: Sat 30 Nov 2024 00:40:48 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: tQ01heHMD8o3GGr5ptlvkv4Mi3zwsFMxdSaLxwttgvI=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: NMqAki7QKbcI9560/QHlulosJMID1dw06paSnKMXxq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Nov 23 00:40:48 2024 GMT Not After : Nov 30 00:40:48 2024 GMT Subject: CN=67412490-5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:f7:5b:b2:27:4a:f2:69:02:cd:ef:be:bf: 4b:3c:36:3c:1a:1a:95:7e:39:b6:99:2c:73:d8:63: e2:cb:4a:e0:ce:55:38:a2:a9:e4:25:ea:fa:06:5f: 1b:24:60:0b:3f:92:05:b9:a8:f2:78:f3:1d:c4:45: 04:10:18:4f:8b:bd:47:4d:da:ef:30:92:65:99:b4: ea:7a:0f:c0:da:b0:7e:08:6a:c4:a0:91:27:fc:6b: 95:97:29:86:03:b9:bb:1f:5e:36:92:ab:88:19:f5: 72:13:67:35:7e:08:de:24:0e:4a:75:ea:0a:fc:c4: 30:f9:91:8f:7d:87:1d:f0:00:5a:98:d1:3f:78:59: 3a:46:d1:4c:7f:b0:ef:8d:4a:b9:03:34:dd:42:8f: 98:79:c9:31:75:75:14:2b:4f:6c:69:aa:7b:c5:2d: e6:cd:56:ab:db:2f:20:92:be:2c:24:5d:dc:ff:f8: 9f:11:c2:b7:7c:10:20:25:88:e8:c8:4a:0d:c1:79: 56:e7:37:78:a6:b1:28:86:70:49:68:71:54:78:31: a8:53:2f:e7:20:e3:d4:43:f2:00:c8:80:30:93:48: 63:35:35:c5:d4:c9:83:69:00:4f:fe:20:a1:6c:e9: 4d:a6:00:70:c8:45:35:c3:d2:cb:c1:7f:42:e8:5c: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:35:19:AD:CE:37:0C:7F:1D:95:BA:18:F3:FA:45:69:A7:D8:45 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b5:bc:8e:9d:fe:2d:70:eb:cc:14:cf:0a:2b:5a:4a:8e:a6: 94:9c:b4:c8:2f:c1:12:89:48:e5:e4:23:64:02:ce:67:42:b3: dd:f2:d4:43:c9:e4:47:2a:ba:5e:9b:35:2c:ae:73:62:6d:be: 50:c6:df:ca:25:2e:ab:a9:56:c0:d1:b9:79:c4:5e:49:68:71: 36:ed:d5:e0:2c:53:3b:64:dc:d2:14:5a:0a:f2:6d:fc:cb:ba: 1e:75:4c:9f:91:a4:23:c4:36:71:72:7b:60:9e:aa:b6:41:88: 0f:1d:9c:67:17:c9:b7:af:fb:80:16:fc:9e:39:5b:57:b2:14: 40:c3:f9:3f:bd:47:47:90:61:38:94:4b:c2:99:21:b7:70:36: e4:1e:8a:67:8e:77:37:8e:9c:bb:a2:3f:c7:a2:d7:01:de:d2: 46:20:11:79:62:e2:42:d9:83:2f:00:62:38:e8:70:c3:06:d4: 4f:c7:d8:03:9a:ba:c1:00:1c:21:8f:3d:85:36:86:91:fa:a2: 67:31:4e:13:70:0c:d2:03:c5:c1:5f:56:f6:32:5d:65:9d:15: 19:05:23:d2:8a:ef:06:16:fa:cd:9f:ce:da:6c:76:f1:85:1a: c4:65:23:3a:39:28:32:65:40:8c:7e:dd:4e:3c:8a:45:cd:18: e5:b3:15:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjQxMTIzMDA0MDQ4WhcNMjQxMTMwMDA0MDQ4WjAYMRYwFAYD VQQDEw02NzQxMjQ5MC01MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoe73W7InSvJpAs3vvr9LPDY8GhqVfjm2mSxz2GPiy0rgzlU4oqnkJer6Bl8b JGALP5IFuajyePMdxEUEEBhPi71HTdrvMJJlmbTqeg/A2rB+CGrEoJEn/GuVlymG A7m7H142kquIGfVyE2c1fgjeJA5KdeoK/MQw+ZGPfYcd8ABamNE/eFk6RtFMf7Dv jUq5AzTdQo+YeckxdXUUK09saap7xS3mzVar2y8gkr4sJF3c//ifEcK3fBAgJYjo yEoNwXlW5zd4prEohnBJaHFUeDGoUy/nIOPUQ/IAyIAwk0hjNTXF1MmDaQBP/iCh bOlNpgBwyEU1w9LLwX9C6FzY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjNNRmt zjcMfx2Vuhjz+kVpp9hFMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+tbyOnf4tcOvMFM8KK1pKjqaUnLTIL8ESiUjl5CNkAs5nQrPd8tRD yeRHKrpemzUsrnNibb5Qxt/KJS6rqVbA0bl5xF5JaHE27dXgLFM7ZNzSFFoK8m38 y7oedUyfkaQjxDZxcntgnqq2QYgPHZxnF8m3r/uAFvyeOVtXshRAw/k/vUdHkGE4 lEvCmSG3cDbkHopnjnc3jpy7oj/HotcB3tJGIBF5YuJC2YMvAGI46HDDBtRPx9gD mrrBABwhjz2FNoaR+qJnMU4TcAzSA8XBX1b2Ml1lnRUZBSPSiu8GFvrNn87abHbx hRrEZSM6OSgyZUCMft1OPIpFzRjlsxUG -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org