$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: etCGtPsxZzQNJIUStpwdpiI76oXICd0V0S/k5zhgg5k= Subject key identifier: D4:7D:6A:79:C6:1B:93:A4:3C:E5:BE:62:1C:85:BC:F6:0D:55:FC:03 Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: A1 Signing time: Sat 23 Nov 2024 04:20:38 +0000 Manifest this update: Sat 23 Nov 2024 04:20:37 +0000 Manifest next update: Sat 30 Nov 2024 04:20:37 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: GUpeAY6sqRrOuz/PpS8YTZlXeTVdZo2Q+VNGAhimAAA=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: 8bgWpkcwwSpnHyrkYsdyUAYCC4K6G1edvEayFTb1/1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: Nov 23 04:20:37 2024 GMT Not After : Nov 30 04:20:37 2024 GMT Subject: CN=67415816-fd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c2:02:f0:b8:21:44:ed:74:a6:a1:43:39:70: c8:a9:9f:75:91:39:10:89:ae:69:47:f8:d1:57:2a: 9b:f7:4e:32:71:43:20:af:8c:e5:02:ce:11:b2:85: e6:17:32:b7:0e:0e:82:f4:57:f4:3f:eb:42:9b:0b: 50:7c:96:60:ef:26:31:1b:0a:25:30:a3:ef:f2:36: e0:af:ad:1c:5e:45:08:02:75:ae:0b:6c:2f:0c:1f: 48:ee:6d:89:5b:c2:f1:2e:12:ef:65:68:5f:a5:88: 01:42:57:73:24:66:a6:72:3d:90:0c:1f:e9:0c:30: 58:61:53:26:8b:f3:f5:90:a1:2e:99:62:bc:54:d0: 40:f9:ce:be:19:79:c3:a1:1d:ea:d0:2d:d4:e7:47: 2a:d8:96:3a:18:5a:c9:57:d6:26:ba:5e:b7:74:c0: 22:85:5e:57:77:d9:65:f1:d5:84:66:6a:90:7c:3f: d4:30:15:34:2b:ee:17:89:bc:0d:95:69:4a:a3:ce: 88:4d:67:33:2e:39:84:93:68:67:9d:bd:50:af:ad: 66:40:25:ac:bd:69:1d:57:90:80:87:74:bd:a2:b8: 12:94:31:c4:61:a3:35:17:4e:a2:39:6d:34:9f:94: bb:ee:1b:7b:16:c3:96:2e:d4:c6:7d:68:c6:ae:ce: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:6A:79:C6:1B:93:A4:3C:E5:BE:62:1C:85:BC:F6:0D:55:FC:03 X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:38:ae:ba:f4:44:8b:93:26:16:c1:e9:f2:1e:ec:36:ad:e2: 30:32:b2:23:bf:55:78:8f:89:41:d0:37:4e:39:af:4a:1b:ab: a8:ec:60:18:ed:c6:1f:d7:15:ad:57:05:3d:05:4b:d4:da:9b: 61:00:e6:02:be:0f:85:e3:9e:32:dd:c8:ab:83:02:2f:be:01: 62:ca:64:4a:7a:36:05:04:38:e7:02:56:df:72:93:39:88:5b: 17:ab:61:b5:6d:1e:a2:7d:ca:2a:e3:52:99:c7:b7:8c:8d:70: bf:25:a9:11:b5:a5:10:cf:f6:73:00:40:ce:94:80:62:7d:c9: f2:95:34:f0:71:fe:85:d0:95:53:c8:4e:03:cc:c3:17:7d:b2: 30:4e:3c:43:dc:36:5e:a7:b5:1e:d8:b1:8a:53:02:75:32:fd: da:35:0e:d6:79:94:28:ad:e8:1d:48:54:a3:8d:33:f5:f8:5c: 4d:14:69:90:b7:90:20:28:34:4d:3b:1a:d1:63:ed:3f:07:39: 88:4b:b2:ab:f2:bc:3c:68:71:4f:e5:ba:bb:98:b0:b8:05:b7: d9:e9:c7:11:6b:04:14:e5:a4:8d:e6:1c:b7:1c:e1:45:ca:e0: f7:0b:e7:4d:1d:69:57:bc:d3:10:fb:ed:f6:eb:b1:1d:63:44: 82:50:54:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjQxMTIzMDQyMDM3WhcNMjQxMTMwMDQyMDM3WjAYMRYwFAYD VQQDEw02NzQxNTgxNi1mZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sIC8LghRO10pqFDOXDIqZ91kTkQia5pR/jRVyqb904ycUMgr4zlAs4RsoXm FzK3Dg6C9Ff0P+tCmwtQfJZg7yYxGwolMKPv8jbgr60cXkUIAnWuC2wvDB9I7m2J W8LxLhLvZWhfpYgBQldzJGamcj2QDB/pDDBYYVMmi/P1kKEumWK8VNBA+c6+GXnD oR3q0C3U50cq2JY6GFrJV9Ymul63dMAihV5Xd9ll8dWEZmqQfD/UMBU0K+4XibwN lWlKo86ITWczLjmEk2hnnb1Qr61mQCWsvWkdV5CAh3S9orgSlDHEYaM1F06iOW00 n5S77ht7FsOWLtTGfWjGrs6u0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR9annG G5OkPOW+YhyFvPYNVfwDMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSOK669ESLkyYWwenyHuw2reIwMrIjv1V4j4lB0DdOOa9KG6uo7GAY 7cYf1xWtVwU9BUvU2pthAOYCvg+F454y3cirgwIvvgFiymRKejYFBDjnAlbfcpM5 iFsXq2G1bR6ifcoq41KZx7eMjXC/JakRtaUQz/ZzAEDOlIBifcnylTTwcf6F0JVT yE4DzMMXfbIwTjxD3DZep7Ue2LGKUwJ1Mv3aNQ7WeZQoregdSFSjjTP1+FxNFGmQ t5AgKDRNOxrRY+0/BzmIS7Kr8rw8aHFP5bq7mLC4BbfZ6ccRawQU5aSN5hy3HOFF yuD3C+dNHWlXvNMQ++3267EdY0SCUFSB -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org