$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: FpVlR84H+adXMr5KjzzHba5ibyyfLUwcSgkqsEnFNKw= Subject key identifier: 66:A7:0E:16:08:D7:5D:A1:4C:75:1E:66:A6:F6:6C:44:6F:6B:F4:84 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: 65 Signing time: Sat 23 Nov 2024 04:58:39 +0000 Manifest this update: Sat 23 Nov 2024 04:58:39 +0000 Manifest next update: Sat 30 Nov 2024 04:58:39 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: NZUlGJS6nFNrGKNBwoU+NRwsQi2WaxhWb49ANRiCDOQ=) 2: A6517530169211EFAB613573C4F9AE02.roa (hash: Zxzeh4q4VkESn3Z7raXtN0Zp81DqVYf4hpDfFCFFI9k=) 3: 3A888D52169211EFA5AAE55DC4F9AE02.roa (hash: y5vzdVwz2vO4UUjqXhgJrAbkJMOOhUCaiYsAl7OwvQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Nov 23 04:58:39 2024 GMT Not After : Nov 30 04:58:39 2024 GMT Subject: CN=674160ff-9f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:e9:23:07:35:4f:ae:e2:b0:c9:52:e0:1c: b3:9b:02:08:68:a3:4f:3e:bb:2c:85:c6:e2:56:83: 71:52:5d:b1:d7:c8:61:70:f9:3a:26:de:98:fc:32: a8:27:fe:de:db:c8:c8:22:ea:19:3e:45:37:22:17: ca:0f:d1:dd:f5:9e:2f:5c:d9:61:34:af:03:32:23: 50:ec:8d:68:d4:a6:26:2d:df:5f:4f:a0:ed:a5:a2: 70:e9:08:0a:f6:ca:7d:63:37:4d:01:6f:ca:70:a4: 52:de:d8:ea:be:e3:72:25:56:7d:21:73:4a:8f:56: ae:dc:3d:70:b3:72:70:00:22:0c:e4:12:23:48:26: 6d:be:85:cd:73:ba:f7:15:2a:5d:6c:d4:e4:81:fc: ee:8c:d8:94:34:4e:bb:ca:0b:15:77:76:36:86:1e: d3:fb:aa:0c:ef:2f:3a:7d:68:c9:56:61:8d:8d:8d: 48:40:70:23:13:67:4b:f1:42:cc:8f:04:07:e5:6c: 5c:05:78:0c:0f:4d:3b:3c:47:75:1d:b3:37:de:6d: 1d:84:62:ed:a3:7b:48:25:3d:e7:f7:c3:f9:2c:da: 4c:9e:fc:fe:d9:27:7b:90:e9:d5:77:be:c0:a6:9a: 74:22:02:81:90:53:c2:ce:47:72:c6:b8:9f:4c:1f: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:0E:16:08:D7:5D:A1:4C:75:1E:66:A6:F6:6C:44:6F:6B:F4:84 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:40:e2:0f:d5:55:ea:70:9a:16:11:d9:1a:bb:c0:47:e6: f4:8a:ce:1b:72:88:9a:a6:7b:e5:a7:f1:4b:59:75:02:d5:49: 25:62:6b:6e:83:5e:e1:0c:5d:e9:7c:dd:af:55:b2:57:81:88: 66:21:31:78:fc:de:26:be:8f:01:49:04:6b:5e:c6:35:7e:fb: a5:87:be:a5:a1:09:48:f0:9b:7e:b3:c4:a6:33:d3:a8:8d:05: 1e:70:0f:12:a0:f4:25:3a:6a:d9:26:22:9c:c4:e9:33:4e:0a: 38:96:08:cc:3e:bc:08:0a:78:f4:cc:a9:0d:fa:45:78:b6:e8: 93:04:42:bd:0b:dd:67:b2:f8:1e:ab:5c:73:80:fb:ae:a6:b8: 6d:7a:5e:ea:b2:fc:fd:fb:97:17:99:e5:c5:77:fe:16:cb:b9: 9b:7b:ed:4f:92:7a:01:56:21:e7:8f:57:cc:ab:f6:87:94:92: 3d:1c:78:20:bb:14:8e:76:01:7f:9d:1e:be:9e:35:42:40:06: ae:c7:c4:5f:4e:de:15:87:b1:fd:22:dd:69:de:88:6b:3b:5f: 07:36:ff:f4:f0:1f:c3:06:46:58:6f:0a:dd:51:8b:8b:16:76: b5:f9:68:b8:86:66:3f:f0:06:2a:06:28:7e:24:35:e4:07:e7: 22:cc:bf:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB REQ2NDExMC8GA1UEBRMoRkNBOTM1NUMxQUJFNDA0RjNGM0NGNTE5MkZEMzRCMTI1 QTAwQkYxQjAeFw0yNDExMjMwNDU4MzlaFw0yNDExMzAwNDU4MzlaMBgxFjAUBgNV BAMTDTY3NDE2MGZmLTlmNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDLekjBzVPruKwyVLgHLObAghoo08+uyyFxuJWg3FSXbHXyGFw+Tom3pj8Mqgn /t7byMgi6hk+RTciF8oP0d31ni9c2WE0rwMyI1DsjWjUpiYt319PoO2lonDpCAr2 yn1jN00Bb8pwpFLe2Oq+43IlVn0hc0qPVq7cPXCzcnAAIgzkEiNIJm2+hc1zuvcV Kl1s1OSB/O6M2JQ0TrvKCxV3djaGHtP7qgzvLzp9aMlWYY2NjUhAcCMTZ0vxQsyP BAflbFwFeAwPTTs8R3UdszfebR2EYu2je0glPef3w/ks2kye/P7ZJ3uQ6dV3vsCm mnQiAoGQU8LOR3LGuJ9MH+tVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZqcOFgjX XaFMdR5mpvZsRG9r9IQwHwYDVR0jBBgwFoAU/Kk1XBq+QE8/PPUZL9NLEloAvxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFERDY0LzRFQjJCNDI4MTM0 QjExRUY5NDQyNEQzREM0RjlBRTAyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0trMVhCcS1RRThfUFBVWkw5TkxFbG9BdnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE RDY0LzRFQjJCNDI4MTM0QjExRUY5NDQyNEQzREM0RjlBRTAyL19LazFYQnEtUUU4 X1BQVVpMOU5MRWxvQXZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwFQOIP1VXqcJoWEdkau8BH5vSKzhtyiJqme+Wn8UtZdQLVSSVia26D XuEMXel83a9VsleBiGYhMXj83ia+jwFJBGtexjV++6WHvqWhCUjwm36zxKYz06iN BR5wDxKg9CU6atkmIpzE6TNOCjiWCMw+vAgKePTMqQ36RXi26JMEQr0L3Wey+B6r XHOA+66muG16Xuqy/P37lxeZ5cV3/hbLuZt77U+SegFWIeePV8yr9oeUkj0ceCC7 FI52AX+dHr6eNUJABq7HxF9O3hWHsf0i3WneiGs7Xwc2//TwH8MGRlhvCt1Ri4sW drX5aLiGZj/wBioGKH4kNeQH5yLMv3M= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org