$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: F0jRwooU+H2GOQ/fi3+7xqRcYyj6Ra4toKufWMmmAow= Subject key identifier: F7:E9:D7:9F:5F:AC:90:5C:46:62:DE:F9:20:B1:87:DF:19:E5:FA:8D Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0C5F Signing time: Fri 22 Nov 2024 18:08:39 +0000 Manifest this update: Fri 22 Nov 2024 18:08:38 +0000 Manifest next update: Fri 29 Nov 2024 18:08:38 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: xOmuzFXsRTDWmZxxhnBLQF5Y1RW4XIx6MdNe4Rw0kko=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: l70W9C7sKwAcMsRhEuSt7Uvtsib+WwKJgxVKjnT8swQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Nov 22 18:08:38 2024 GMT Not After : Nov 29 18:08:38 2024 GMT Subject: CN=6740c8a7-b326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:01:ef:b9:cd:03:3c:3c:07:90:69:27:ef: ae:29:98:94:af:db:77:8e:f3:c6:2f:66:68:cf:1b: b2:06:bd:10:28:2f:61:27:d7:bf:df:d6:be:38:91: 73:3a:d5:bb:93:30:d1:21:6f:15:ac:ee:ce:62:e1: 8c:5a:90:b9:46:9f:3e:71:2a:48:75:db:86:ef:21: 24:a0:73:2c:29:3b:aa:18:9f:75:39:60:cd:fc:38: db:31:9b:8e:54:36:04:e9:11:d6:f3:b1:cc:54:13: 1a:88:81:67:98:d9:27:55:c5:5a:ee:e1:75:de:b0: f6:06:07:5c:98:da:66:a1:3e:36:b4:af:dd:7b:19: ef:17:03:c6:4a:01:ec:03:a5:75:c5:74:f6:84:16: 66:56:9b:eb:7e:55:64:60:9d:db:c3:a3:cc:c0:6a: 02:22:1d:3b:a2:62:02:3d:a9:63:9c:70:5c:0e:52: 11:1e:11:32:8a:f1:6d:c8:42:bb:9a:93:35:83:43: ec:76:50:a7:39:87:ec:ac:51:57:b2:8d:ed:27:30: e1:18:1a:0e:45:2a:16:2a:ed:e5:88:73:45:eb:10: 14:76:fe:c4:a9:bd:dc:8a:e4:4b:da:20:bf:ed:12: 55:b9:e2:9f:5c:bc:3b:e8:83:b7:7f:3d:fb:68:b6: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E9:D7:9F:5F:AC:90:5C:46:62:DE:F9:20:B1:87:DF:19:E5:FA:8D X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:00:2d:9b:af:cf:d1:c7:c0:5e:c0:f2:6d:dc:f7:cf:b3: e2:fa:53:95:53:cb:94:88:4e:f7:af:4b:45:0e:d1:7c:aa:30: eb:47:8f:3f:44:e6:20:16:60:90:01:a5:9f:22:06:90:59:79: 49:ef:3d:63:b0:dc:a0:32:44:7a:dc:04:46:a8:2d:7a:06:25: 6d:87:64:6b:0c:6a:4d:0e:f1:37:9f:58:42:ea:a5:2b:4e:06: e3:8c:2b:fe:bc:37:67:ac:4b:97:8d:56:6d:e8:ae:0d:ec:24: 58:58:c1:b4:d5:3c:84:3d:ba:aa:75:9b:63:86:3e:0d:e9:f3: 66:16:8c:1e:03:f9:d8:ee:9d:8a:c7:ba:24:0b:46:cf:99:91: 26:a8:45:46:6e:14:9f:f6:55:36:ba:eb:f8:f7:9c:09:4b:9a: 93:f5:87:dd:c9:74:1c:52:c8:c4:b8:41:dc:dd:3c:f6:ec:cc: a0:7f:91:32:2c:b4:3d:4c:be:54:19:ce:78:4c:ce:c1:ca:8f: 69:cb:63:78:fc:89:a7:11:2c:9e:52:13:04:75:c5:74:11:f7: b9:b2:1e:f0:72:0a:27:7a:69:04:1a:0b:54:10:4b:18:99:25: 84:b8:b4:55:11:be:a7:67:04:90:53:d1:46:da:da:6f:a9:7d: 81:75:53:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjQxMTIyMTgwODM4WhcNMjQxMTI5MTgwODM4WjAYMRYwFAYD VQQDEw02NzQwYzhhNy1iMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rUB77nNAzw8B5BpJ++uKZiUr9t3jvPGL2ZozxuyBr0QKC9hJ9e/39a+OJFz OtW7kzDRIW8VrO7OYuGMWpC5Rp8+cSpIdduG7yEkoHMsKTuqGJ91OWDN/DjbMZuO VDYE6RHW87HMVBMaiIFnmNknVcVa7uF13rD2BgdcmNpmoT42tK/dexnvFwPGSgHs A6V1xXT2hBZmVpvrflVkYJ3bw6PMwGoCIh07omICPaljnHBcDlIRHhEyivFtyEK7 mpM1g0PsdlCnOYfsrFFXso3tJzDhGBoORSoWKu3liHNF6xAUdv7Eqb3ciuRL2iC/ 7RJVueKfXLw76IO3fz37aLaG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfp159f rJBcRmLe+SCxh98Z5fqNMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8iQAtm6/P0cfAXsDybdz3z7Pi+lOVU8uUiE73r0tFDtF8qjDrR48/ ROYgFmCQAaWfIgaQWXlJ7z1jsNygMkR63ARGqC16BiVth2RrDGpNDvE3n1hC6qUr TgbjjCv+vDdnrEuXjVZt6K4N7CRYWMG01TyEPbqqdZtjhj4N6fNmFoweA/nY7p2K x7okC0bPmZEmqEVGbhSf9lU2uuv495wJS5qT9YfdyXQcUsjEuEHc3Tz27Mygf5Ey LLQ9TL5UGc54TM7Byo9py2N4/ImnESyeUhMEdcV0Efe5sh7wcgonemkEGgtUEEsY mSWEuLRVEb6nZwSQU9FG2tpvqX2BdVMX -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org