$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: RAdUEzRkqGJo/oijVFb+NFJBtIIKZnU+yRi3Dpb9BxE= Subject key identifier: A2:E1:A2:D5:D2:E2:9B:21:77:42:B0:54:94:A3:82:74:0B:85:D2:7A Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 0FA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 0F92 Signing time: Fri 22 Nov 2024 17:30:15 +0000 Manifest this update: Fri 22 Nov 2024 17:30:15 +0000 Manifest next update: Fri 29 Nov 2024 17:30:15 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: trGMF9ao05BqzEw950ITKZxPqpHG31rmCTx491N4GYY=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: mlji510395Oygfniyac8KKWq0dtqfkqm0EekbIqX4BU=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: 5O8DYgHc79V6KcmKNVHeX4W4dMmoUEhQnrmExgSqPEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4001 (0xfa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Nov 22 17:30:15 2024 GMT Not After : Nov 29 17:30:15 2024 GMT Subject: CN=6740bfa7-0c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:17:e4:7c:22:d0:d9:db:43:22:ce:5a:f9: 53:2e:91:3b:08:4b:f1:42:81:fe:7d:51:10:8f:c7: 7c:09:b8:f5:b6:46:d6:c2:6b:c9:c5:31:6f:94:1c: 1f:ab:da:09:e9:60:aa:c5:fc:58:09:9f:36:17:3b: 59:a4:eb:5d:26:b6:bf:92:6d:cc:74:a9:de:d7:49: 5c:cd:70:0f:64:24:6e:22:d5:2b:73:91:2e:a8:c1: 29:8a:b0:20:64:5b:40:a1:ba:96:71:f1:e4:44:91: 05:76:1e:62:a5:43:65:02:2c:ae:0a:73:d1:00:c4: 7d:7c:bb:e3:f1:ba:b2:0f:13:6b:c1:03:1b:62:13: 18:36:8d:0e:28:3b:a0:e6:4b:d2:7c:5d:e0:54:21: aa:11:34:f7:c6:71:7e:30:eb:ec:7c:d1:16:73:a0: 3f:59:38:b2:92:3d:47:a1:10:16:11:ff:f3:9d:80: f6:d6:a2:93:f0:d5:8d:a8:49:05:32:d2:e4:60:0f: fd:2c:66:a2:42:02:90:d3:fe:e0:7b:be:7e:b2:1c: 61:80:37:c8:ec:a8:ed:c6:8d:73:f0:0b:fe:0d:2a: d3:4d:c8:55:f4:92:d0:e7:f7:6f:d0:85:95:84:29: f7:20:fd:4c:d0:60:9e:b4:ca:e5:6a:38:13:f9:80: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:A2:D5:D2:E2:9B:21:77:42:B0:54:94:A3:82:74:0B:85:D2:7A X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ab:42:71:67:44:ab:ce:03:9d:31:7b:34:67:a1:51:ce:9b: 3b:3b:f3:e5:55:29:8d:59:4e:ef:57:32:2c:76:5d:c5:8e:71: 75:fc:c9:8a:d0:80:82:a4:ff:36:8f:c0:21:0f:ce:6f:0a:57: 13:38:70:2d:a3:72:eb:e5:06:9e:cc:f3:ef:63:cd:20:3f:2a: a4:1d:62:8a:48:bd:e2:b4:5e:a7:2f:12:12:00:de:9f:b3:71: c1:e6:96:c6:81:bf:ff:01:02:c4:9f:f7:82:80:ba:95:c8:a6: 55:9b:20:de:c1:24:2f:d9:cc:a0:c7:28:23:a2:97:da:3a:0f: 75:3a:85:40:0a:77:dd:41:4e:c9:0f:22:dc:5b:ae:e6:cb:f2: 68:81:29:07:ea:36:4f:ec:cd:8d:46:08:89:3b:ad:55:79:3d: 15:13:f3:46:4c:7b:e1:2c:e2:d2:20:b1:c5:05:fd:7a:c2:4b: 42:39:64:7f:60:01:2c:0e:a4:73:1c:51:da:45:1b:8a:86:45: 4d:fe:90:fb:ff:ec:e3:6c:ba:5b:1f:3a:3f:f4:42:50:15:46: f8:7c:a0:d1:a8:39:62:a6:61:a4:99:69:f9:22:0a:ac:38:4b: 34:2c:c7:ff:17:ea:33:8a:7b:c2:04:e5:b0:46:47:4e:6b:e2: 5a:69:59:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjQxMTIyMTczMDE1WhcNMjQxMTI5MTczMDE1WjAYMRYwFAYD VQQDEw02NzQwYmZhNy0wYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BwX5Hwi0NnbQyLOWvlTLpE7CEvxQoH+fVEQj8d8Cbj1tkbWwmvJxTFvlBwf q9oJ6WCqxfxYCZ82FztZpOtdJra/km3MdKne10lczXAPZCRuItUrc5EuqMEpirAg ZFtAobqWcfHkRJEFdh5ipUNlAiyuCnPRAMR9fLvj8bqyDxNrwQMbYhMYNo0OKDug 5kvSfF3gVCGqETT3xnF+MOvsfNEWc6A/WTiykj1HoRAWEf/znYD21qKT8NWNqEkF MtLkYA/9LGaiQgKQ0/7ge75+shxhgDfI7Kjtxo1z8Av+DSrTTchV9JLQ5/dv0IWV hCn3IP1M0GCetMrlajgT+YB7vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLhotXS 4pshd0KwVJSjgnQLhdJ6MB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYq0JxZ0SrzgOdMXs0Z6FRzps7O/PlVSmNWU7vVzIsdl3FjnF1/MmK 0ICCpP82j8AhD85vClcTOHAto3Lr5QaezPPvY80gPyqkHWKKSL3itF6nLxISAN6f s3HB5pbGgb//AQLEn/eCgLqVyKZVmyDewSQv2cygxygjopfaOg91OoVACnfdQU7J DyLcW67my/JogSkH6jZP7M2NRgiJO61VeT0VE/NGTHvhLOLSILHFBf16wktCOWR/ YAEsDqRzHFHaRRuKhkVN/pD7/+zjbLpbHzo/9EJQFUb4fKDRqDlipmGkmWn5Igqs OEs0LMf/F+ozinvCBOWwRkdOa+JaaVkk -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org