$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: i1qG5x6uLv1zXycQ0l0cJjJDhHh1vjuVoJhhkYJBro8= Subject key identifier: 2C:45:1A:A8:E9:F4:E2:54:6B:2E:73:64:16:C4:29:55:93:DD:4C:2C Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 085C Signing time: Fri 22 Nov 2024 20:24:51 +0000 Manifest this update: Fri 22 Nov 2024 20:24:50 +0000 Manifest next update: Fri 29 Nov 2024 20:24:50 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: S/WPZv/VvS7dGfHsYhcSOZ3S8KP9P1ELfSsWGmgvnbQ=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Nov 22 20:24:50 2024 GMT Not After : Nov 29 20:24:50 2024 GMT Subject: CN=6740e892-bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:69:9f:7e:18:fa:c2:cc:b7:3f:12:90:d1: 39:cb:da:44:31:8a:e9:d1:f9:d2:0b:4e:67:0f:61: d4:06:71:40:7b:b7:b6:c5:2c:31:37:50:92:25:68: 4f:af:94:66:6d:e3:29:a2:ac:fc:a8:6f:3d:e3:6b: 73:26:f0:72:fb:5a:d1:ce:36:80:8b:ae:1e:1f:20: c2:26:7d:eb:60:35:07:0e:14:75:21:25:38:05:cd: 8b:d4:ce:70:13:28:db:b6:d6:76:67:0b:bc:d5:f1: 51:ca:17:2d:95:86:83:15:72:2a:92:8d:b9:17:ec: 87:40:f4:16:26:93:70:86:ef:08:85:38:b9:fc:ac: f4:7f:84:7f:ac:df:e5:29:43:a4:60:fd:1f:ee:a9: 12:a0:75:2f:0f:12:c6:8e:a3:1d:6e:6a:1c:b3:d3: 54:61:0c:9d:d3:33:fc:05:d6:75:38:26:90:ce:68: b0:52:03:9a:17:34:91:4b:22:bd:a4:52:80:ca:ec: aa:fd:99:b6:bd:22:8b:91:a9:e8:a5:c0:77:f9:13: c3:9b:b9:20:6a:6d:ec:40:ea:68:4f:ce:02:50:28: fe:e6:6d:a4:40:51:3f:41:74:85:4f:73:6f:26:0b: 05:7e:ea:e8:fe:f9:f9:31:46:82:f1:91:df:19:67: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:45:1A:A8:E9:F4:E2:54:6B:2E:73:64:16:C4:29:55:93:DD:4C:2C X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d6:92:ec:79:5b:41:75:18:75:0e:e0:e6:99:95:2a:a5:82: 51:db:06:34:a8:5d:c7:fb:1f:a6:65:f1:32:dd:20:b8:20:eb: df:0d:a5:2b:0f:66:8f:34:15:be:a1:cd:71:8a:8d:04:8b:2d: fc:16:19:81:1c:04:62:ce:8a:a7:8b:83:3c:cc:b7:84:31:41: 0a:f0:07:7f:c0:bb:ab:c3:51:38:0e:5e:74:05:20:6e:cd:c2: 16:33:87:20:92:83:f3:10:c0:73:59:70:00:e4:66:08:33:dc: 63:0d:ea:ad:34:7c:d0:3d:e0:5d:0d:2e:f9:5c:98:fa:2e:5a: e2:09:01:eb:fe:4c:0a:93:b6:4a:c2:73:93:65:c4:7d:34:87: df:01:b9:b3:65:90:99:ac:01:09:54:b3:29:d7:bb:71:43:50: 92:94:10:cd:aa:3b:31:32:6e:8e:d2:9c:cf:34:e7:0b:e4:62: dd:cf:0c:f8:46:f4:d9:26:8d:68:1b:a3:07:74:ec:d8:aa:1e: 33:7e:80:18:ff:59:46:dc:8a:60:ae:4a:4b:33:6e:d5:56:a7: ed:9b:8b:0a:ce:f8:ed:57:1b:f5:73:a0:9b:23:ed:22:0a:d0: 36:3e:bb:a4:e9:58:48:6a:ab:ce:3d:0f:7b:2f:62:02:bc:e7: 71:9f:20:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjQxMTIyMjAyNDUwWhcNMjQxMTI5MjAyNDUwWjAYMRYwFAYD VQQDEw02NzQwZTg5Mi1iYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvVpn34Y+sLMtz8SkNE5y9pEMYrp0fnSC05nD2HUBnFAe7e2xSwxN1CSJWhP r5RmbeMpoqz8qG8942tzJvBy+1rRzjaAi64eHyDCJn3rYDUHDhR1ISU4Bc2L1M5w EyjbttZ2Zwu81fFRyhctlYaDFXIqko25F+yHQPQWJpNwhu8IhTi5/Kz0f4R/rN/l KUOkYP0f7qkSoHUvDxLGjqMdbmocs9NUYQyd0zP8BdZ1OCaQzmiwUgOaFzSRSyK9 pFKAyuyq/Zm2vSKLkanopcB3+RPDm7kgam3sQOpoT84CUCj+5m2kQFE/QXSFT3Nv JgsFfuro/vn5MUaC8ZHfGWec0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxFGqjp 9OJUay5zZBbEKVWT3UwsMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv1pLseVtBdRh1DuDmmZUqpYJR2wY0qF3H+x+mZfEy3SC4IOvfDaUr D2aPNBW+oc1xio0Eiy38FhmBHARizoqni4M8zLeEMUEK8Ad/wLurw1E4Dl50BSBu zcIWM4cgkoPzEMBzWXAA5GYIM9xjDeqtNHzQPeBdDS75XJj6LlriCQHr/kwKk7ZK wnOTZcR9NIffAbmzZZCZrAEJVLMp17txQ1CSlBDNqjsxMm6O0pzPNOcL5GLdzwz4 RvTZJo1oG6MHdOzYqh4zfoAY/1lG3IpgrkpLM27VVqftm4sKzvjtVxv1c6CbI+0i CtA2Pruk6VhIaqvOPQ97L2ICvOdxnyB8 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org