$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: JD9w60qsc0awttdBT87fHTbsYaLSQK7v8Wt8/EmZTXI= Subject key identifier: E5:0E:E7:18:83:B7:27:5E:7D:3A:EB:6D:52:39:43:DA:55:89:84:33 Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1068 Signing time: Fri 22 Nov 2024 19:40:54 +0000 Manifest this update: Fri 22 Nov 2024 19:40:54 +0000 Manifest next update: Fri 29 Nov 2024 19:40:54 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: gENbyKpryr29zTvMQVj1EWpnQlWXiiTyLk/KOAPO4qs=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: NM1X988Sf6Y4ByWki+fiiLDu8TbBsX43Xwq0VBDoGuo=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: lo283iVsMsLHbJbz5lAswnspLjcjQrX9MFqmCe7E2UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Nov 22 19:40:54 2024 GMT Not After : Nov 29 19:40:54 2024 GMT Subject: CN=6740de46-2d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:be:58:9d:32:ff:44:79:2b:94:f1:41:43: ac:c2:1d:1b:ef:ba:ee:fc:d8:80:53:f8:2b:24:b3: 3b:af:dc:ce:f3:43:c5:12:2e:0d:98:79:76:11:85: 3c:68:20:64:84:a8:c9:54:3b:10:ae:1d:b1:fd:03: 47:a4:a8:0e:b0:13:bd:33:02:16:45:20:b4:5f:11: 07:ab:9b:55:f0:7d:a7:75:0c:09:67:d3:77:2a:9e: 03:17:2c:2a:8a:b3:8d:e6:55:fe:db:07:21:da:60: 32:41:33:d3:81:55:97:e6:a0:e5:1b:b7:ad:a7:a3: 0b:9b:4a:57:c7:2c:04:2d:03:af:97:df:d2:3b:48: 61:fd:4d:04:a0:d8:e7:f6:77:44:b2:6a:47:72:69: c4:60:e1:cf:49:e3:be:97:6f:bf:58:c7:2e:24:57: 67:b6:68:fe:0c:21:45:3a:52:27:0e:fd:ad:02:02: 51:77:d9:ab:ee:dd:a9:71:fa:e7:89:b8:8c:8c:2f: b3:6c:50:01:98:54:08:bd:a3:dd:59:ef:20:a4:b0: 5a:88:3c:43:d0:67:f7:5d:43:a4:00:95:2c:95:f4: 8d:cc:eb:8d:52:57:72:44:ec:fc:09:76:ed:9d:b1: c1:03:80:a2:b7:61:0f:22:49:a9:d6:3d:37:e0:f3: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:E7:18:83:B7:27:5E:7D:3A:EB:6D:52:39:43:DA:55:89:84:33 X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:17:16:c2:d4:54:be:4b:64:9f:7f:fc:35:01:5d:f8:e5:45: ef:b4:8b:d6:47:28:3b:7d:21:ca:98:c7:64:97:11:6f:2f:07: 3f:14:0b:31:91:f8:cc:a0:a0:b9:cf:ef:b4:7e:dc:44:5b:c2: b3:3d:05:6a:b8:90:44:25:3e:ea:b1:4c:bf:4b:af:92:81:d9: 26:02:3a:e8:33:b2:fe:2c:cb:61:f2:2d:3f:bd:01:00:45:5a: 04:c2:f2:78:18:46:bf:f9:5e:47:47:71:2d:4b:2d:58:9c:d7: 55:b6:b3:7b:35:8e:b3:1b:ee:1d:c6:ff:50:4a:d1:fd:15:90: 0a:75:62:29:d5:76:1f:b6:49:83:3f:1d:ac:58:a6:ed:58:73: 91:5d:24:9c:d9:61:88:75:22:91:08:08:3d:5b:43:a7:9a:0e: 39:18:59:7e:0e:0e:7b:db:01:f6:ba:09:ec:4d:f8:39:e5:e7: 09:e7:31:8a:4e:65:19:2c:f5:d8:30:88:56:b4:0f:b7:4f:f5: fa:63:65:4d:46:d8:5d:75:05:af:33:ff:c8:20:86:c1:a0:f2: 48:24:52:e7:f0:b8:97:6d:f6:72:69:b1:3e:32:47:9e:de:65: 5a:af:f9:38:76:e4:ad:f7:f7:35:d3:96:e3:65:33:b0:56:83: db:e3:66:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjQxMTIyMTk0MDU0WhcNMjQxMTI5MTk0MDU0WjAYMRYwFAYD VQQDEw02NzQwZGU0Ni0yZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRq+WJ0y/0R5K5TxQUOswh0b77ru/NiAU/grJLM7r9zO80PFEi4NmHl2EYU8 aCBkhKjJVDsQrh2x/QNHpKgOsBO9MwIWRSC0XxEHq5tV8H2ndQwJZ9N3Kp4DFywq irON5lX+2wch2mAyQTPTgVWX5qDlG7etp6MLm0pXxywELQOvl9/SO0hh/U0EoNjn 9ndEsmpHcmnEYOHPSeO+l2+/WMcuJFdntmj+DCFFOlInDv2tAgJRd9mr7t2pcfrn ibiMjC+zbFABmFQIvaPdWe8gpLBaiDxD0Gf3XUOkAJUslfSNzOuNUldyROz8CXbt nbHBA4Cit2EPIkmp1j034POdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUO5xiD tydefTrrbVI5Q9pViYQzMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABFxbC1FS+S2Sff/w1AV345UXvtIvWRyg7fSHKmMdklxFvLwc/FAsx kfjMoKC5z++0ftxEW8KzPQVquJBEJT7qsUy/S6+SgdkmAjroM7L+LMth8i0/vQEA RVoEwvJ4GEa/+V5HR3EtSy1YnNdVtrN7NY6zG+4dxv9QStH9FZAKdWIp1XYftkmD Px2sWKbtWHORXSSc2WGIdSKRCAg9W0Onmg45GFl+Dg572wH2ugnsTfg55ecJ5zGK TmUZLPXYMIhWtA+3T/X6Y2VNRthddQWvM//IIIbBoPJIJFLn8LiXbfZyabE+Mkee 3mVar/k4duSt9/c105bjZTOwVoPb42Yq -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org