$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: I5mzIXC9fXWNeV/FnUCGLC+ba6zzHnUXtb7AkcbXJv8= Subject key identifier: B9:FB:12:8B:23:29:AD:FD:D6:E3:FF:76:B4:60:87:B3:70:83:F9:C1 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 71 Signing time: Thu 21 Nov 2024 05:01:23 +0000 Manifest this update: Thu 21 Nov 2024 05:01:22 +0000 Manifest next update: Thu 28 Nov 2024 05:01:22 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: Eg5jO+hMGA1gUpnH+D9Y+Qkptqu9/CjU0CCAibMNK2E=) 2: 62B87A26895B11EFBA2A3B22C4F9AE02.roa (hash: J0gZ5lnYUEPrxIi0V+nZjZbkbZQGWUAh3pz/mPzLVKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Nov 21 05:01:22 2024 GMT Not After : Nov 28 05:01:22 2024 GMT Subject: CN=673ebea2-bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:43:a3:2a:21:c7:88:83:fb:d1:54:ea:42: a3:2a:92:23:b0:ea:a3:0e:4f:8f:1c:63:c0:a7:a4: 1a:7e:84:71:1d:e9:b8:57:86:1e:db:78:87:82:cc: 06:4f:7d:6c:60:ca:44:e7:ee:56:46:1e:51:e0:65: d9:d2:69:0c:7c:47:56:8e:0e:4b:de:1a:94:b6:10: 53:5f:13:38:57:33:27:d5:d2:1c:f5:c7:be:98:d0: 32:df:98:47:53:d4:62:63:0d:2d:23:fe:1e:56:0c: 96:75:0e:30:ea:cc:04:45:ae:82:d0:d5:24:8e:63: b7:63:98:1e:04:56:58:61:ea:a8:b1:c4:57:c2:e9: 13:88:01:93:cc:ed:e5:f2:9b:c8:5d:cd:39:b1:50: 26:dc:95:17:68:86:b9:06:d9:02:3e:a9:c5:72:c8: 37:28:11:06:ab:99:d9:31:dc:a6:08:94:b2:18:39: bc:f0:32:ef:b7:b7:2e:57:6e:54:2a:5b:0c:7b:e3: b3:3d:e7:79:12:b4:2a:85:ff:4d:ee:7b:6a:99:8c: a4:77:7a:d7:72:b4:dd:6e:a8:22:64:66:c3:0c:71: 3b:5c:20:ef:f6:08:96:fd:c1:fd:fe:9e:03:88:04: 55:a3:9c:a7:d8:db:4e:cf:ac:e8:7a:98:3b:7c:f5: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FB:12:8B:23:29:AD:FD:D6:E3:FF:76:B4:60:87:B3:70:83:F9:C1 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:66:1e:26:db:3f:3c:73:fb:c7:a9:21:37:9f:e4:4c:cf:13: 92:da:16:1d:7a:10:85:c1:fe:8d:ba:6f:d9:47:04:b1:09:fe: 82:0c:61:df:1e:5a:42:2e:8b:0e:ff:43:5f:78:bd:87:93:09: 27:17:4d:2e:f1:0f:b8:84:7a:1b:6b:65:35:b6:f8:9a:c7:95: f5:1e:e9:be:75:4a:b5:8a:e1:1c:bd:eb:ad:32:dc:0e:15:78: 96:78:ca:5b:da:1a:a0:b6:a8:35:61:33:d6:98:85:97:d4:6f: 54:0f:02:bc:5d:0c:37:49:f0:02:81:94:22:6e:84:08:1e:90: 9f:7e:51:e4:02:10:c0:9b:d0:e7:ce:20:42:23:76:b0:8d:ca: 9f:ac:c1:98:8b:66:08:fe:dd:21:ed:39:03:0b:85:c6:f0:f0: ff:29:33:fc:61:bf:8f:41:a7:46:d0:9d:44:76:24:5a:77:ca: 43:35:a1:f8:23:ae:40:a7:5b:58:14:9c:fd:45:f2:e5:d3:f3: e2:d3:27:e0:b2:28:ea:85:7b:29:7d:2a:0d:33:23:c9:04:48: 7a:d4:ee:04:b0:eb:25:95:86:9d:9e:ac:0d:5b:a5:82:ab:83: 54:53:cc:60:4e:9c:4b:11:a9:30:7f:d2:2a:91:0b:d2:f8:10: ff:1a:6c:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODBDMjExMC8GA1UEBRMoMkFCQTJBQTNDQjNGOTQ1ODFDNUQzRDkxQkEzNkI4QTlE OEU4REVBRDAeFw0yNDExMjEwNTAxMjJaFw0yNDExMjgwNTAxMjJaMBgxFjAUBgNV BAMTDTY3M2ViZWEyLWJmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTcEOjKiHHiIP70VTqQqMqkiOw6qMOT48cY8CnpBp+hHEd6bhXhh7beIeCzAZP fWxgykTn7lZGHlHgZdnSaQx8R1aODkveGpS2EFNfEzhXMyfV0hz1x76Y0DLfmEdT 1GJjDS0j/h5WDJZ1DjDqzARFroLQ1SSOY7djmB4EVlhh6qixxFfC6ROIAZPM7eXy m8hdzTmxUCbclRdohrkG2QI+qcVyyDcoEQarmdkx3KYIlLIYObzwMu+3ty5XblQq Wwx747M953kStCqF/03ue2qZjKR3etdytN1uqCJkZsMMcTtcIO/2CJb9wf3+ngOI BFWjnKfY207PrOh6mDt89RvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUufsSiyMp rf3W4/92tGCHs3CD+cEwHwYDVR0jBBgwFoAUKroqo8s/lFgcXT2Ruja4qdjo3q0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MEMyLzk4M0U2MTUwMTcx QTExRUY4NjU3NzU0RkM0RjlBRTAyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3JvcW84c19sRmdjWFQyUnVqYTRxZGpvM3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MEMyLzk4M0U2MTUwMTcxQTExRUY4NjU3NzU0RkM0RjlBRTAyL0tyb3FvOHNfbEZn Y1hUMlJ1amE0cWRqbzNxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVmHibbPzxz+8epITef5EzPE5LaFh16EIXB/o26b9lHBLEJ/oIMYd8e WkIuiw7/Q194vYeTCScXTS7xD7iEehtrZTW2+JrHlfUe6b51SrWK4Ry9660y3A4V eJZ4ylvaGqC2qDVhM9aYhZfUb1QPArxdDDdJ8AKBlCJuhAgekJ9+UeQCEMCb0OfO IEIjdrCNyp+swZiLZgj+3SHtOQMLhcbw8P8pM/xhv49Bp0bQnUR2JFp3ykM1ofgj rkCnW1gUnP1F8uXT8+LTJ+CyKOqFeyl9Kg0zI8kESHrU7gSw6yWVhp2erA1bpYKr g1RTzGBOnEsRqTB/0iqRC9L4EP8abDc= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org