$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: WfO7JvQnQX4HuEdpRnTZzqp7XZi36b/otbvyV74z3sM= Subject key identifier: DD:3E:B6:A2:B5:92:F7:F4:BB:00:4F:B1:C5:51:64:0D:89:D0:32:D2 Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: A4 Signing time: Sat 23 Nov 2024 04:14:10 +0000 Manifest this update: Sat 23 Nov 2024 04:14:09 +0000 Manifest next update: Sat 30 Nov 2024 04:14:09 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: Suu2Edn+RuICJ48PBnYo11uuKiLHNqDEdRKKaqWWb+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Nov 23 04:14:09 2024 GMT Not After : Nov 30 04:14:09 2024 GMT Subject: CN=67415692-ae8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:76:c5:1a:d5:ac:e1:b2:60:41:eb:f9:20:b8: e0:16:3f:3b:38:0d:be:bd:0e:99:54:a9:35:cd:04: e1:9e:b7:d4:34:cc:df:82:26:df:52:87:23:d3:cc: 3e:10:d7:7e:7c:43:a3:ad:86:ed:40:80:2b:2d:ef: 8b:43:10:18:67:2f:f2:c7:22:47:a3:71:de:f9:2b: 62:ca:1f:29:82:7c:3f:c0:13:0b:9b:ba:2f:e9:9c: 16:44:df:33:b1:82:68:90:eb:fb:3f:2e:d1:87:e5: 3f:18:20:91:7b:88:35:74:21:7f:c6:13:d6:09:1c: 87:01:a5:36:90:64:aa:b2:ab:a5:ac:3f:b8:ac:51: 76:91:d4:c6:5b:21:39:3b:e6:a3:89:86:01:22:a9: 22:d2:7d:05:bc:da:e1:ce:27:c7:ca:fe:19:53:bb: 88:49:56:d6:0f:45:f4:ac:34:80:53:27:69:66:5d: d5:94:d3:9a:30:1b:1d:a5:97:f2:8d:3c:68:34:5b: 80:1c:33:c6:5f:5c:4e:74:a0:0a:6e:66:87:4a:97: cd:f3:2f:97:67:6a:35:f4:b6:b7:bb:e5:50:3e:18: 1a:a3:84:79:a4:9c:8d:53:ea:a1:96:15:61:e5:d9: 11:a5:d9:2f:28:5c:19:52:86:83:86:55:b8:02:2e: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:B6:A2:B5:92:F7:F4:BB:00:4F:B1:C5:51:64:0D:89:D0:32:D2 X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c4:15:39:a7:e8:6c:6a:c3:70:d9:01:6b:a6:bd:ae:70:d6: 4e:e3:2c:67:46:7a:4a:85:6f:83:63:a3:fc:0e:5c:ef:e6:77: 93:0d:19:6f:65:9f:1c:8c:26:01:02:05:69:e0:d5:a6:45:91: ca:9f:8b:38:05:b3:ed:3a:47:cb:06:79:33:17:07:96:db:0f: 6f:4c:f6:ef:d6:48:2b:0e:3e:90:4c:84:97:b4:f4:1a:76:74: 65:ad:f3:84:85:3c:63:74:ad:87:72:30:18:a6:b7:e6:40:b1: df:17:de:67:46:51:36:8f:6e:b0:44:83:51:fa:f6:cb:b1:4b: 3d:bf:02:53:f0:0a:7e:a0:31:3a:99:ee:a7:58:48:6d:62:02: 18:0c:f0:65:87:f0:c5:2c:91:0d:0f:92:69:cb:3d:41:64:d2: f1:27:22:4f:4a:03:56:37:b3:6e:73:7f:70:ff:c6:f0:f8:98: 17:34:7f:5a:8d:bf:a6:94:97:f4:c7:16:bf:dc:6a:28:b4:cd: 21:12:6a:f9:aa:82:14:47:7c:8a:40:57:0b:30:40:2c:33:aa: 76:62:ad:94:c8:29:1a:b2:d9:4a:fd:3e:bf:6f:9e:a3:cd:b2: c4:b2:cf:2e:fd:2a:27:55:2e:e7:d4:76:07:b8:4f:77:2a:5b: ce:e9:88:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjQxMTIzMDQxNDA5WhcNMjQxMTMwMDQxNDA5WjAYMRYwFAYD VQQDEw02NzQxNTY5Mi1hZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HbFGtWs4bJgQev5ILjgFj87OA2+vQ6ZVKk1zQThnrfUNMzfgibfUocj08w+ ENd+fEOjrYbtQIArLe+LQxAYZy/yxyJHo3He+Stiyh8pgnw/wBMLm7ov6ZwWRN8z sYJokOv7Py7Rh+U/GCCRe4g1dCF/xhPWCRyHAaU2kGSqsqulrD+4rFF2kdTGWyE5 O+ajiYYBIqki0n0FvNrhzifHyv4ZU7uISVbWD0X0rDSAUydpZl3VlNOaMBsdpZfy jTxoNFuAHDPGX1xOdKAKbmaHSpfN8y+XZ2o19La3u+VQPhgao4R5pJyNU+qhlhVh 5dkRpdkvKFwZUoaDhlW4Ai5pmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0+tqK1 kvf0uwBPscVRZA2J0DLSMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxBU5p+hsasNw2QFrpr2ucNZO4yxnRnpKhW+DY6P8Dlzv5neTDRlv ZZ8cjCYBAgVp4NWmRZHKn4s4BbPtOkfLBnkzFweW2w9vTPbv1kgrDj6QTISXtPQa dnRlrfOEhTxjdK2HcjAYprfmQLHfF95nRlE2j26wRINR+vbLsUs9vwJT8Ap+oDE6 me6nWEhtYgIYDPBlh/DFLJEND5Jpyz1BZNLxJyJPSgNWN7Nuc39w/8bw+JgXNH9a jb+mlJf0xxa/3GootM0hEmr5qoIUR3yKQFcLMEAsM6p2Yq2UyCkastlK/T6/b56j zbLEss8u/SonVS7n1HYHuE93KlvO6Yg8 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org