$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: sVvyE7pkSzhzkK1CNBBW5dK+jZONzE/Kdx6L66MlhII= Subject key identifier: 3D:98:B6:F9:2C:A4:DA:02:2F:51:B0:47:7B:DA:CC:7D:42:63:31:3D Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 01F9 Signing time: Sat 23 Nov 2024 01:39:48 +0000 Manifest this update: Sat 23 Nov 2024 01:39:47 +0000 Manifest next update: Sat 30 Nov 2024 01:39:47 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: X8JGbI60PaJfvou6EOHR8FaxtdxJO8gV4Cwp+zuRYwo=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: bzrwDCcFjUbW1ddYfzBH2lmiEyj4Sa0r3rrfjXsh0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Nov 23 01:39:47 2024 GMT Not After : Nov 30 01:39:47 2024 GMT Subject: CN=67413263-9c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:1b:18:72:77:25:94:09:0d:b2:d2:ec:63: ad:91:bb:60:8f:48:aa:bd:3c:11:d8:d3:49:de:ab: e1:59:7f:18:1b:a9:c3:9e:65:93:b2:36:56:71:74: 42:3a:26:e9:74:0d:a5:9c:8c:9b:44:0b:37:76:a1: 7a:e5:ae:eb:44:3f:97:ff:5d:8a:67:93:fb:44:04: d6:3d:67:02:87:c8:51:e4:90:eb:df:a1:6d:0b:bf: 91:49:ce:a0:58:bc:d7:ee:63:df:ec:6d:5d:3f:82: f5:07:af:d2:4b:07:3e:89:64:91:e7:80:d3:2b:0b: ae:de:94:5f:dc:84:69:30:3f:18:19:8a:5a:70:b8: 19:ef:1a:3d:a3:db:80:10:17:ab:f2:31:b9:e6:a1: a8:27:cb:57:f0:69:70:85:a3:33:68:72:93:07:4c: c1:41:0c:7c:51:bf:97:1b:14:68:17:6c:32:21:89: 9a:f1:2f:2e:bb:31:2d:8e:c8:ed:97:98:92:2b:c0: 4d:b0:e8:37:72:be:84:68:15:21:b7:73:00:11:bd: 07:46:7d:0c:c4:3a:8c:3b:35:a2:98:a9:4e:aa:97: a8:76:15:24:df:26:45:2b:b1:db:bd:4d:d6:ea:4b: 1d:a2:95:a3:9f:7f:ba:19:d4:c6:fc:e3:4a:ab:3c: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:B6:F9:2C:A4:DA:02:2F:51:B0:47:7B:DA:CC:7D:42:63:31:3D X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:0d:ea:78:c2:f4:5c:f8:26:40:fb:8b:33:4e:c6:8f:de:10: e6:8e:79:9f:6d:1b:ff:df:99:d6:07:2e:58:d5:f5:a3:7e:41: d1:bc:fc:b5:9c:c7:49:38:e6:c4:30:c1:2c:59:3e:d0:f1:5c: 7e:24:85:3e:cb:36:26:3a:38:34:2b:73:2a:d9:00:f2:f2:cc: 6d:95:db:73:05:a1:ab:df:10:9d:92:c3:9a:e2:ce:53:e8:81: b9:a5:0f:61:73:82:1e:3a:18:23:14:14:8c:69:7d:d2:23:73: b1:1d:fa:43:d8:fd:72:4e:6e:b6:b5:a8:b0:3e:88:bd:d4:45: 48:6b:a9:ed:16:70:ec:12:56:3b:f5:31:93:33:3e:58:7b:1d: 9b:17:41:f7:32:cb:87:6b:df:2a:6c:44:b1:c7:87:dd:96:e4: f4:1a:6c:0d:5b:b2:51:75:a1:22:6e:61:9b:77:8a:37:d6:17: 2c:a3:c2:51:0a:06:b9:b0:c5:71:c8:6b:ec:a8:8e:3b:7d:90: 57:d0:59:34:e9:79:52:e9:eb:8e:c6:ae:b1:a6:2c:cc:58:cf: 90:ef:f3:c8:63:7a:8b:b3:9b:ba:49:11:35:d2:2c:fa:d8:4d: 2c:d4:a8:8c:43:f0:8f:0a:fa:5e:75:2a:e2:b4:8b:7d:33:53: a7:03:6f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjQxMTIzMDEzOTQ3WhcNMjQxMTMwMDEzOTQ3WjAYMRYwFAYD VQQDEw02NzQxMzI2My05YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkcbGHJ3JZQJDbLS7GOtkbtgj0iqvTwR2NNJ3qvhWX8YG6nDnmWTsjZWcXRC OibpdA2lnIybRAs3dqF65a7rRD+X/12KZ5P7RATWPWcCh8hR5JDr36FtC7+RSc6g WLzX7mPf7G1dP4L1B6/SSwc+iWSR54DTKwuu3pRf3IRpMD8YGYpacLgZ7xo9o9uA EBer8jG55qGoJ8tX8GlwhaMzaHKTB0zBQQx8Ub+XGxRoF2wyIYma8S8uuzEtjsjt l5iSK8BNsOg3cr6EaBUht3MAEb0HRn0MxDqMOzWimKlOqpeodhUk3yZFK7HbvU3W 6ksdopWjn3+6GdTG/ONKqzwqAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2Ytvks pNoCL1GwR3vazH1CYzE9MB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDADep4wvRc+CZA+4szTsaP3hDmjnmfbRv/35nWBy5Y1fWjfkHRvPy1 nMdJOObEMMEsWT7Q8Vx+JIU+yzYmOjg0K3Mq2QDy8sxtldtzBaGr3xCdksOa4s5T 6IG5pQ9hc4IeOhgjFBSMaX3SI3OxHfpD2P1yTm62taiwPoi91EVIa6ntFnDsElY7 9TGTMz5Yex2bF0H3MsuHa98qbESxx4fdluT0GmwNW7JRdaEibmGbd4o31hcso8JR Cga5sMVxyGvsqI47fZBX0Fk06XlS6euOxq6xpizMWM+Q7/PIY3qLs5u6SRE10iz6 2E0s1KiMQ/CPCvpedSritIt9M1OnA29H -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org