$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: 9FhrpYi5IV3QAqa6avZlO6yLUyTfaW+fjbiA0uKlpeQ= Subject key identifier: 67:4E:95:43:6C:29:4B:D9:D0:43:7C:AE:37:A7:6B:E9:17:7B:CC:05 Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 077B Signing time: Fri 22 Nov 2024 20:54:38 +0000 Manifest this update: Fri 22 Nov 2024 20:54:38 +0000 Manifest next update: Fri 29 Nov 2024 20:54:38 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: dTHSL5VBMW8ZtscgrTmeyc7VPtklvvulfhqH16oA150=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: IS2j0d/zVkxwnqe+1txywwwV0QyYZmwCTkV8FQIqSXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Nov 22 20:54:38 2024 GMT Not After : Nov 29 20:54:38 2024 GMT Subject: CN=6740ef8e-ad3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:fc:aa:f2:39:08:f3:71:82:cc:09:0c:dd: b3:3e:11:de:37:2b:24:c8:5d:01:a3:af:ff:40:f2: 06:a5:e5:2f:a8:0d:68:c2:00:2d:14:a9:b9:d7:d0: 3f:e5:f0:87:9c:57:45:a2:13:2a:9a:1e:e4:cf:4d: b7:35:70:0c:a0:48:8a:27:61:5a:03:4e:f2:f9:9a: 0b:a7:f2:61:b2:06:a6:ae:04:43:a1:d1:40:30:b5: fc:60:43:52:cf:6d:d3:5c:ab:dc:f5:b0:2a:a6:6e: 2c:24:9b:59:f9:32:8d:3a:09:dc:30:a7:29:32:68: c4:b3:93:ea:df:61:c0:f2:43:b7:ad:19:ba:10:bc: 04:d8:51:b8:5d:cc:7e:b6:ef:bb:07:74:7e:3c:89: 1f:de:52:fe:0c:33:59:df:36:ce:4d:ec:a7:55:45: ac:05:9c:51:3e:a8:af:bb:f2:2d:43:02:50:d5:45: a0:37:88:5c:4d:9d:91:01:5b:71:d4:e5:64:60:92: 68:a5:e3:8f:d7:b0:97:b5:c4:1d:d1:48:bd:97:00: fd:cd:21:f5:08:18:bc:d9:8a:89:1e:29:fa:0d:9c: fa:d1:ff:67:ab:55:44:48:cb:20:9d:c4:ae:52:95: 28:11:4b:b1:e1:80:56:a9:c9:29:9a:83:f1:df:b0: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:95:43:6C:29:4B:D9:D0:43:7C:AE:37:A7:6B:E9:17:7B:CC:05 X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:20:d2:9d:d9:ee:0d:ff:32:f7:d4:ff:dc:0a:3c:21:0b:d4: 88:63:cf:c2:4f:c7:13:ea:ed:30:21:54:6c:2b:69:a7:73:9d: 61:76:a8:0c:ab:05:8f:a9:06:0e:0b:b6:d9:ec:c3:ed:84:a1: bb:1f:9d:37:7c:9f:33:1d:37:31:35:5b:cf:3b:b8:10:f9:0c: 40:de:38:f9:ad:2a:f3:56:0a:34:b3:b0:c4:0c:c7:39:ef:51: c1:a6:96:f3:76:20:3b:fe:dd:de:e6:87:5e:65:b1:a6:56:a4: 6b:7e:dc:86:48:ec:c0:1a:94:af:ce:73:48:1c:6a:2b:f9:4b: 93:e4:0a:02:a5:82:24:7d:24:fd:57:db:f4:cb:95:29:55:e1: 3e:8c:13:62:8e:c4:42:9c:1d:12:4f:ec:ef:f2:5f:74:df:4e: c1:83:e0:d1:8c:d2:cc:81:1c:47:83:a4:90:14:e1:3b:3a:5d: 56:12:94:b6:e8:62:94:db:43:d7:16:24:57:0b:3b:77:c9:93: 21:a0:4c:c4:8a:99:f0:5e:87:5a:cf:63:e9:f0:9c:b8:d7:ae: 11:0c:ae:7c:f9:bb:63:40:71:e8:0a:40:21:2c:92:73:11:a8: 81:8c:c5:fd:76:79:83:a0:c8:91:f4:c4:70:90:a1:c8:c8:4f: 94:97:e1:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjQxMTIyMjA1NDM4WhcNMjQxMTI5MjA1NDM4WjAYMRYwFAYD VQQDEw02NzQwZWY4ZS1hZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+z8qvI5CPNxgswJDN2zPhHeNyskyF0Bo6//QPIGpeUvqA1owgAtFKm519A/ 5fCHnFdFohMqmh7kz023NXAMoEiKJ2FaA07y+ZoLp/JhsgamrgRDodFAMLX8YENS z23TXKvc9bAqpm4sJJtZ+TKNOgncMKcpMmjEs5Pq32HA8kO3rRm6ELwE2FG4Xcx+ tu+7B3R+PIkf3lL+DDNZ3zbOTeynVUWsBZxRPqivu/ItQwJQ1UWgN4hcTZ2RAVtx 1OVkYJJopeOP17CXtcQd0Ui9lwD9zSH1CBi82YqJHin6DZz60f9nq1VESMsgncSu UpUoEUux4YBWqckpmoPx37A23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdOlUNs KUvZ0EN8rjena+kXe8wFMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/INKd2e4N/zL31P/cCjwhC9SIY8/CT8cT6u0wIVRsK2mnc51hdqgM qwWPqQYOC7bZ7MPthKG7H503fJ8zHTcxNVvPO7gQ+QxA3jj5rSrzVgo0s7DEDMc5 71HBppbzdiA7/t3e5odeZbGmVqRrftyGSOzAGpSvznNIHGor+UuT5AoCpYIkfST9 V9v0y5UpVeE+jBNijsRCnB0ST+zv8l90307Bg+DRjNLMgRxHg6SQFOE7Ol1WEpS2 6GKU20PXFiRXCzt3yZMhoEzEipnwXodaz2Pp8Jy4164RDK58+btjQHHoCkAhLJJz EaiBjMX9dnmDoMiR9MRwkKHIyE+Ul+Ga -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org