$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: /y94PrFfg53VgVXuKBsQQm6Lp7WoTE79u6tB1T37VtI= Subject key identifier: 44:3D:56:F7:AF:85:9A:37:9B:14:75:F4:A0:41:BC:73:BB:F4:3A:90 Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 0708 Signing time: Fri 22 Nov 2024 21:29:54 +0000 Manifest this update: Fri 22 Nov 2024 21:29:53 +0000 Manifest next update: Fri 29 Nov 2024 21:29:53 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: V0wx/hdNKwGDdGUajNpIzdJ78riww8yX7Mag/9j70f4=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Nov 22 21:29:53 2024 GMT Not After : Nov 29 21:29:53 2024 GMT Subject: CN=6740f7d1-332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:4e:c0:26:83:17:dd:7f:6f:bf:0c:cb:e1: 50:ad:1f:8a:6e:bb:46:82:d5:84:96:3a:5a:82:f9: c9:7e:ee:31:4f:64:95:8e:34:17:34:6f:d1:43:61: 9d:82:37:14:84:4a:cf:2b:ce:70:7e:75:0a:54:ed: b1:81:c4:7d:82:f5:ab:90:19:a0:33:26:b0:4b:b2: 13:b7:06:f2:97:14:9e:12:60:02:28:27:d8:e1:ff: ba:b1:d7:53:0e:10:8b:52:41:39:04:86:3c:aa:fc: 0a:cd:f9:77:80:1d:d2:a1:c9:f4:34:f2:e9:e4:b5: 86:c4:b3:bd:fc:0b:ca:e2:79:5f:2b:d4:c0:81:c1: 7f:c8:58:7d:b0:1a:55:cd:05:53:5b:ac:15:e4:b6: e7:30:6a:18:a6:5c:62:00:ed:d1:d5:06:66:6c:a6: 9d:ee:7f:10:f0:4b:49:75:72:de:47:54:51:9d:7e: c6:7e:83:02:f0:9e:ce:0d:de:d8:86:96:7b:6f:fb: 32:53:ad:04:e7:f4:bb:cb:dc:5a:00:a4:0a:b2:9e: e6:70:18:b9:42:8a:c9:9d:25:7e:b0:18:6f:55:1d: 38:0c:19:8f:f0:2e:a8:bc:80:24:40:a0:78:36:9a: 1d:47:35:5c:2c:9a:c1:0e:28:6f:36:ad:16:73:2f: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:56:F7:AF:85:9A:37:9B:14:75:F4:A0:41:BC:73:BB:F4:3A:90 X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8b:03:2c:d4:ed:82:ff:37:db:f3:f6:f8:70:d2:93:fb:06: 9a:c9:ba:4d:ad:36:99:2f:f7:97:d9:84:37:59:57:a4:cf:e6: 53:26:06:58:77:22:b2:4b:ce:9e:29:5c:a1:07:fd:47:dc:a4: 43:07:47:59:7a:6a:86:f8:0b:c8:86:47:df:3f:da:6e:cb:6f: de:98:05:61:63:77:06:ad:df:7a:c2:db:40:b6:90:c1:19:7b: aa:6d:91:db:08:8c:5a:a0:ee:cc:62:59:b6:4f:97:70:cf:fc: a8:27:8d:6d:ea:55:99:2c:c3:74:ef:eb:e3:2f:7b:89:55:56: 9d:09:58:80:90:f9:d7:a9:53:48:61:e5:39:b3:1d:fb:73:78: 81:d3:9b:23:42:25:f3:98:66:01:5b:2a:13:11:7b:a7:55:b8: 7f:08:ef:2d:9e:2d:1b:2d:95:93:b7:0c:2c:e8:3d:71:f7:18: f3:34:ad:b1:42:1b:a4:c1:93:5c:35:c2:a7:8a:c7:b9:88:c2: 9f:83:8b:07:75:45:86:21:d1:fc:7f:16:0e:b6:3e:eb:f0:10: f8:40:50:22:09:0e:82:6c:98:8e:77:6f:e6:42:dd:f7:dc:e0: 0c:7d:92:c1:fb:03:ad:67:d9:12:a9:85:10:a4:3f:7a:3d:22: ea:ec:61:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjQxMTIyMjEyOTUzWhcNMjQxMTI5MjEyOTUzWjAYMRYwFAYD VQQDEw02NzQwZjdkMS0zMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukdOwCaDF91/b78My+FQrR+KbrtGgtWEljpagvnJfu4xT2SVjjQXNG/RQ2Gd gjcUhErPK85wfnUKVO2xgcR9gvWrkBmgMyawS7ITtwbylxSeEmACKCfY4f+6sddT DhCLUkE5BIY8qvwKzfl3gB3Socn0NPLp5LWGxLO9/AvK4nlfK9TAgcF/yFh9sBpV zQVTW6wV5LbnMGoYplxiAO3R1QZmbKad7n8Q8EtJdXLeR1RRnX7GfoMC8J7ODd7Y hpZ7b/syU60E5/S7y9xaAKQKsp7mcBi5QorJnSV+sBhvVR04DBmP8C6ovIAkQKB4 NpodRzVcLJrBDihvNq0Wcy+SGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ9Vvev hZo3mxR19KBBvHO79DqQMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeiwMs1O2C/zfb8/b4cNKT+waaybpNrTaZL/eX2YQ3WVekz+ZTJgZY dyKyS86eKVyhB/1H3KRDB0dZemqG+AvIhkffP9puy2/emAVhY3cGrd96wttAtpDB GXuqbZHbCIxaoO7MYlm2T5dwz/yoJ41t6lWZLMN07+vjL3uJVVadCViAkPnXqVNI YeU5sx37c3iB05sjQiXzmGYBWyoTEXunVbh/CO8tni0bLZWTtwws6D1x9xjzNK2x QhukwZNcNcKnise5iMKfg4sHdUWGIdH8fxYOtj7r8BD4QFAiCQ6CbJiOd2/mQt33 3OAMfZLB+wOtZ9kSqYUQpD96PSLq7GGT -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org