$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: pjU1G70xKwOXhkMhA3j2snYlK7B8YVEQhbJcz3dMVzc= Subject key identifier: B9:4E:14:86:DF:27:FC:AF:55:3F:FA:E0:FC:8E:71:D9:AB:D9:3A:B2 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: B2 Signing time: Sat 23 Nov 2024 04:09:44 +0000 Manifest this update: Sat 23 Nov 2024 04:09:43 +0000 Manifest next update: Sat 30 Nov 2024 04:09:43 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: mbGFZo2b74v0/R++k3T5JFT5NJGUMvIefAZ28a3bVqY=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: rw3mF1kHVwPA57QAQF/xTH8uLt+cmuP9Gixunh3VrxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Nov 23 04:09:43 2024 GMT Not After : Nov 30 04:09:43 2024 GMT Subject: CN=67415588-5e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:79:aa:67:6d:89:f7:73:93:77:da:dc:0c: 39:a6:65:ba:64:73:62:00:15:47:eb:c6:c8:7c:98: f4:2d:fd:c7:6d:69:cb:28:61:c5:1a:5d:77:c9:dd: c4:6d:28:63:87:f4:bf:7d:8c:59:b2:52:6c:25:e5: b9:19:ba:67:41:41:58:ce:68:8e:c0:ce:76:7d:97: 01:4e:80:56:55:3e:03:26:94:9f:ff:90:ba:fe:01: f2:64:71:43:4b:07:76:d9:ec:a3:27:06:f5:e5:6a: e1:25:29:07:fd:b9:a0:d9:bd:90:12:b6:3b:25:d9: 3a:3c:5d:b4:0d:f6:3e:ed:b0:dc:e7:18:21:5b:06: 9f:d2:a6:5f:f1:61:5c:b4:e9:b7:99:b0:11:40:4f: 8a:01:a9:fc:74:82:f8:d3:12:b9:fc:9b:07:f4:56: ba:df:08:c2:86:80:75:bd:60:b9:ca:3b:82:55:76: a8:d5:82:8f:3f:23:62:bf:0c:b8:b4:af:6a:6d:6b: 6a:0d:ea:fd:cf:a2:a5:2e:c1:80:ba:af:b9:de:76: 40:6d:c7:f3:28:5b:cc:1e:8f:d0:5d:29:30:e6:da: c5:7b:ff:84:da:a8:c4:aa:be:43:fe:57:86:93:39: dc:dc:e8:d3:f8:76:5d:b6:9b:ac:f6:c7:7c:15:b3: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:14:86:DF:27:FC:AF:55:3F:FA:E0:FC:8E:71:D9:AB:D9:3A:B2 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b1:58:50:71:38:67:6a:dc:30:80:03:a7:21:b1:cb:27:f8: 68:a8:fb:7d:a3:7f:1b:0b:d9:1e:a3:18:00:f9:b2:06:b3:6a: 46:e2:36:dc:df:52:a3:ed:39:5f:0a:6e:88:71:04:b1:7a:b3: ec:24:dc:05:c8:3e:52:c2:ec:72:56:a9:28:a8:64:ab:b0:eb: 30:8c:a9:0d:4c:a8:55:73:46:fa:c8:a4:b3:ba:3b:54:2b:9e: 8f:6b:ca:b4:a5:ee:66:2f:8a:0a:09:33:f2:9f:41:99:b2:86: 1e:2a:2c:25:60:11:05:6b:62:da:06:cd:ee:01:5c:48:7e:b9: a1:5b:a3:f4:bd:b1:5a:c3:0e:77:ed:1d:46:a1:ae:85:e0:0f: d1:2e:27:a5:e5:6f:dc:a5:52:bf:16:b2:7c:18:18:09:b8:42: 59:ce:7f:a2:79:90:e2:29:99:03:75:3d:53:08:f9:05:f5:d1: 32:1e:e9:41:e8:8a:a3:31:73:42:b7:54:d3:36:76:50:b1:81: 31:55:ea:7d:b0:6f:58:5d:32:26:70:73:5f:dc:58:ce:93:42: 2f:86:e8:a5:5b:4d:0f:9f:6f:8f:59:b4:a3:8e:37:7f:62:34: 5c:5e:0d:37:00:4f:a6:24:ac:2d:6e:7b:19:b2:42:25:68:f9: ab:f8:74:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjQxMTIzMDQwOTQzWhcNMjQxMTMwMDQwOTQzWjAYMRYwFAYD VQQDEw02NzQxNTU4OC01ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNx5qmdtifdzk3fa3Aw5pmW6ZHNiABVH68bIfJj0Lf3HbWnLKGHFGl13yd3E bShjh/S/fYxZslJsJeW5GbpnQUFYzmiOwM52fZcBToBWVT4DJpSf/5C6/gHyZHFD Swd22eyjJwb15WrhJSkH/bmg2b2QErY7Jdk6PF20DfY+7bDc5xghWwaf0qZf8WFc tOm3mbARQE+KAan8dIL40xK5/JsH9Fa63wjChoB1vWC5yjuCVXao1YKPPyNivwy4 tK9qbWtqDer9z6KlLsGAuq+53nZAbcfzKFvMHo/QXSkw5trFe/+E2qjEqr5D/leG kznc3OjT+HZdtpus9sd8FbMULQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlOFIbf J/yvVT/64PyOcdmr2TqyMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0sVhQcThnatwwgAOnIbHLJ/hoqPt9o38bC9keoxgA+bIGs2pG4jbc 31Kj7TlfCm6IcQSxerPsJNwFyD5SwuxyVqkoqGSrsOswjKkNTKhVc0b6yKSzujtU K56Pa8q0pe5mL4oKCTPyn0GZsoYeKiwlYBEFa2LaBs3uAVxIfrmhW6P0vbFaww53 7R1Goa6F4A/RLiel5W/cpVK/FrJ8GBgJuEJZzn+ieZDiKZkDdT1TCPkF9dEyHulB 6IqjMXNCt1TTNnZQsYExVep9sG9YXTImcHNf3FjOk0IvhuilW00Pn2+PWbSjjjd/ YjRcXg03AE+mJKwtbnsZskIlaPmr+HRq -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org