$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: XTmHwDMmy0LYf3sPFd5oa11i2Rd/PSYBS8X00GsQYg8= Subject key identifier: AC:5E:3C:0B:91:3F:73:FB:2A:FE:E5:3B:1E:E0:0C:64:FA:8F:AB:30 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 032A Signing time: Sat 23 Nov 2024 00:43:16 +0000 Manifest this update: Sat 23 Nov 2024 00:43:15 +0000 Manifest next update: Sat 30 Nov 2024 00:43:15 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: W7DQIsDw6HvOps1favKm8Pq9jh9eO24GkNqmPxO2e34=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 0e5zzWh6ApozGk/jFChRqF4rHk2hQMmiudaU4V4FOFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Nov 23 00:43:15 2024 GMT Not After : Nov 30 00:43:15 2024 GMT Subject: CN=67412524-6399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:b7:32:2b:65:87:37:ad:39:4a:ac:21:56: 59:c7:c2:a8:44:5f:83:71:58:a4:75:82:14:3f:ea: 93:2f:c6:cd:e9:93:60:10:f0:ee:50:a0:49:16:37: 3a:e3:25:83:1b:f2:6a:94:3b:4d:2b:2c:08:28:f9: 79:26:c4:6e:ce:f3:b0:f1:2e:ee:da:75:3b:49:c3: 46:07:02:dd:ea:91:73:c0:68:7f:37:d6:45:e5:87: c7:fc:f4:a0:17:ec:f3:98:c0:4d:21:17:c8:7d:f9: f4:3e:80:ae:ef:62:43:67:1a:29:30:41:c2:6e:43: 29:38:84:32:b1:d8:f3:a0:ec:3d:bb:a5:e2:40:f6: 64:0f:fb:00:34:57:74:14:f0:f8:27:82:b2:3e:bd: 3c:36:62:36:0a:46:af:9b:ec:66:38:92:81:cc:e9: d6:5b:76:81:5b:0f:4f:99:55:5d:48:c2:26:5a:6c: 5a:b5:bf:fa:c6:8b:4d:76:d4:97:7e:af:a5:02:f1: 51:b7:2a:fb:ec:d0:c3:50:1a:57:ab:ca:62:58:15: d4:cd:a5:05:d8:fc:5a:ad:f4:71:27:9c:5a:54:55: 92:1c:ff:90:e3:d8:1e:bf:2b:03:eb:ed:5e:ab:53: 41:a9:c5:dc:c2:58:90:70:98:86:68:91:22:d8:68: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:3C:0B:91:3F:73:FB:2A:FE:E5:3B:1E:E0:0C:64:FA:8F:AB:30 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:74:c3:21:dd:9a:cd:9c:33:38:7a:ab:e9:1b:22:74:53:1c: 66:4f:27:19:2c:22:4a:2b:37:7c:24:72:3b:a1:1f:13:57:71: 18:c4:73:bc:9f:34:5c:4d:7f:1d:39:fc:c4:be:54:ba:4c:cb: 4c:fe:5b:8d:45:47:7b:e5:28:bd:19:46:6a:88:71:ed:bf:fc: ef:9d:8f:52:57:30:28:c5:e0:c7:a1:d4:2c:06:d2:67:f2:f3: 84:ae:12:8e:7b:a6:a6:fa:50:e9:78:5b:5d:de:ff:19:a0:62: 5a:b3:97:cb:ca:b3:0f:38:3c:3a:44:22:9d:4d:90:4c:9a:08: 41:62:d3:15:92:12:76:26:53:4a:55:a2:cb:73:62:37:ce:3b: 22:5f:8b:72:85:22:81:31:8a:58:5c:15:0c:0b:56:f3:33:ce: 57:d9:65:65:74:91:2b:d6:30:c5:2d:30:89:ee:0a:6b:1b:d1: 33:b7:ea:cc:39:67:a0:11:a6:4a:40:97:c9:66:e7:c7:ca:88: 94:ce:ef:33:c1:7b:40:91:c9:bb:57:18:0f:7e:14:10:a9:99: 26:28:8a:8a:60:3c:1c:33:0d:9b:f2:2c:ee:70:eb:4a:2a:c8: 6c:b0:ee:f9:62:63:fc:19:5c:13:11:35:15:69:91:6b:7f:29: 0d:e6:d0:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjQxMTIzMDA0MzE1WhcNMjQxMTMwMDA0MzE1WjAYMRYwFAYD VQQDEw02NzQxMjUyNC02Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2S3MitlhzetOUqsIVZZx8KoRF+DcVikdYIUP+qTL8bN6ZNgEPDuUKBJFjc6 4yWDG/JqlDtNKywIKPl5JsRuzvOw8S7u2nU7ScNGBwLd6pFzwGh/N9ZF5YfH/PSg F+zzmMBNIRfIffn0PoCu72JDZxopMEHCbkMpOIQysdjzoOw9u6XiQPZkD/sANFd0 FPD4J4KyPr08NmI2Ckavm+xmOJKBzOnWW3aBWw9PmVVdSMImWmxatb/6xotNdtSX fq+lAvFRtyr77NDDUBpXq8piWBXUzaUF2PxarfRxJ5xaVFWSHP+Q49gevysD6+1e q1NBqcXcwliQcJiGaJEi2GjnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxePAuR P3P7Kv7lOx7gDGT6j6swMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1dMMh3ZrNnDM4eqvpGyJ0UxxmTycZLCJKKzd8JHI7oR8TV3EYxHO8 nzRcTX8dOfzEvlS6TMtM/luNRUd75Si9GUZqiHHtv/zvnY9SVzAoxeDHodQsBtJn 8vOErhKOe6am+lDpeFtd3v8ZoGJas5fLyrMPODw6RCKdTZBMmghBYtMVkhJ2JlNK VaLLc2I3zjsiX4tyhSKBMYpYXBUMC1bzM85X2WVldJEr1jDFLTCJ7gprG9Ezt+rM OWegEaZKQJfJZufHyoiUzu8zwXtAkcm7VxgPfhQQqZkmKIqKYDwcMw2b8izucOtK KshssO75YmP8GVwTETUVaZFrfykN5tAu -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org