$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: eryKHvpMLM8izbBWi1Obx1zO+jvp+5Y2YQ/s3ymgKUo= Subject key identifier: F5:3B:96:01:51:85:A0:91:F3:75:B0:48:F1:2A:38:9A:B4:2E:28:96 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 1087 Signing time: Fri 22 Nov 2024 19:35:37 +0000 Manifest this update: Fri 22 Nov 2024 19:35:37 +0000 Manifest next update: Fri 29 Nov 2024 19:35:37 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: l9Zgy2JIr2ZK6DkByGVWEcDOUW0k3P7dV6ou537/TJE=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Nov 22 19:35:37 2024 GMT Not After : Nov 29 19:35:37 2024 GMT Subject: CN=6740dd09-1434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:4d:1d:f4:db:f7:2d:c8:42:98:a9:04:15: 94:90:01:f6:2a:3a:ac:55:4e:f3:ea:a5:a2:77:ea: 70:aa:08:2b:50:81:0b:b0:ed:30:fc:e0:3e:fd:6a: 30:bb:6b:10:5a:6d:d6:62:da:46:ff:11:21:df:f3: dc:90:f7:e8:e9:a4:63:29:12:ad:79:39:b1:35:c9: a9:ee:01:48:2b:36:1e:a5:d5:d9:ac:96:83:39:1b: fc:42:e3:11:91:f0:49:34:01:2d:99:be:50:90:90: e6:e1:ea:c1:d0:25:af:48:41:e3:52:e2:d4:ac:e6: f8:92:a4:b4:05:e5:5d:ac:4d:3c:40:b5:1f:3a:2e: 7e:6d:23:82:c1:88:aa:a3:b4:05:67:10:9c:84:97: 9c:5d:d5:27:49:09:d8:20:58:c6:69:61:a7:b1:45: 18:a8:73:30:d0:62:ed:37:27:f9:0b:ab:6a:21:ee: c4:51:13:5c:64:51:b6:9e:2b:9a:9f:68:2b:6a:fe: df:69:58:34:68:12:89:cb:fe:ff:e4:b2:da:df:11: 7d:83:35:2d:60:87:00:4d:0e:66:55:49:b9:1f:60: 95:f3:ca:3d:86:1f:4b:fd:a5:87:fa:42:b8:04:1d: 34:41:4b:43:59:2b:2c:72:94:58:27:1d:67:90:12: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3B:96:01:51:85:A0:91:F3:75:B0:48:F1:2A:38:9A:B4:2E:28:96 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b8:00:2e:cd:1e:23:ce:a6:b6:2e:8c:10:34:23:2b:ec:c8: 87:d6:cb:a2:d5:39:f2:40:20:f5:07:e1:da:10:e6:32:5e:9e: 65:f2:f5:f5:36:76:41:eb:aa:4c:24:4b:9d:0e:46:94:5e:b9: ba:3a:a2:49:a8:a6:d5:56:f2:eb:48:6c:34:92:65:8b:ef:84: 2f:6c:00:89:f3:3f:e4:ef:b3:6e:eb:d7:93:0a:16:f5:f4:b5: e5:83:c6:75:d5:35:bc:e5:6b:d2:9b:4b:0b:a3:73:89:a3:ac: f3:e7:30:5f:8b:c5:e5:b0:c9:eb:ef:b6:2f:12:51:7a:cd:b5: 9a:99:2c:97:24:12:50:ed:1b:4a:c0:b7:6e:7f:83:96:ad:3a: cb:65:cc:3c:70:81:33:61:54:46:79:0e:47:ab:bb:37:c3:eb: 8d:f0:d3:a4:1e:70:8c:05:16:d2:70:a8:33:cf:8a:a1:23:0b: 1b:5b:1f:4d:52:48:03:d9:86:ab:2a:3f:f1:55:f5:60:15:62: 27:a2:2a:16:c9:1a:38:f9:38:66:94:62:41:aa:32:e5:bb:85: 47:29:f9:04:0f:e3:79:4a:b1:2c:33:b3:5e:c0:ba:f4:09:5b: c0:2a:4b:e0:80:f1:5f:80:9f:bb:6a:96:32:cd:26:cb:62:ad: a0:db:63:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjQxMTIyMTkzNTM3WhcNMjQxMTI5MTkzNTM3WjAYMRYwFAYD VQQDEw02NzQwZGQwOS0xNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fZNHfTb9y3IQpipBBWUkAH2KjqsVU7z6qWid+pwqggrUIELsO0w/OA+/Wow u2sQWm3WYtpG/xEh3/PckPfo6aRjKRKteTmxNcmp7gFIKzYepdXZrJaDORv8QuMR kfBJNAEtmb5QkJDm4erB0CWvSEHjUuLUrOb4kqS0BeVdrE08QLUfOi5+bSOCwYiq o7QFZxCchJecXdUnSQnYIFjGaWGnsUUYqHMw0GLtNyf5C6tqIe7EURNcZFG2niua n2grav7faVg0aBKJy/7/5LLa3xF9gzUtYIcATQ5mVUm5H2CV88o9hh9L/aWH+kK4 BB00QUtDWSsscpRYJx1nkBLB/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU7lgFR haCR83WwSPEqOJq0LiiWMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPuAAuzR4jzqa2LowQNCMr7MiH1sui1TnyQCD1B+HaEOYyXp5l8vX1 NnZB66pMJEudDkaUXrm6OqJJqKbVVvLrSGw0kmWL74QvbACJ8z/k77Nu69eTChb1 9LXlg8Z11TW85WvSm0sLo3OJo6zz5zBfi8XlsMnr77YvElF6zbWamSyXJBJQ7RtK wLduf4OWrTrLZcw8cIEzYVRGeQ5Hq7s3w+uN8NOkHnCMBRbScKgzz4qhIwsbWx9N UkgD2YarKj/xVfVgFWInoioWyRo4+ThmlGJBqjLlu4VHKfkED+N5SrEsM7NewLr0 CVvAKkvggPFfgJ+7apYyzSbLYq2g22OT -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org