$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: wqO6fNcXX6LefMhzeFy2rlTGt63woTdunSz+TocUqIg= Subject key identifier: 2F:52:9A:B2:99:28:83:A0:EC:5A:5E:EC:69:58:DD:72:BB:85:CA:7E Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 94 Signing time: Mon 25 Nov 2024 04:25:22 +0000 Manifest this update: Mon 25 Nov 2024 04:25:21 +0000 Manifest next update: Mon 02 Dec 2024 04:25:21 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: ZoFo4tPkhGplr44IOVs4ygzZPOTPNXhw09rxG2UfLhs=) 2: FDC8E95AC95411EEAF356F5BC4F9AE02.roa (hash: rhY7D8mGpDIXxA7UIL7HVpAUImsoeRI+4jGrb3Ziyio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Nov 25 04:25:21 2024 GMT Not After : Dec 2 04:25:21 2024 GMT Subject: CN=6743fc31-9489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:33:91:5e:2c:e6:d9:81:77:16:46:07:9d: f3:bb:8a:c6:95:05:28:ae:34:e5:94:d9:82:ee:49: 08:e1:e7:32:bd:da:e2:a0:84:d2:04:75:79:b0:bc: c2:0e:84:27:fc:b8:3a:af:58:94:45:4c:ab:06:88: 60:81:1b:d7:1c:e8:ab:5a:80:31:49:1b:34:ff:c0: 99:a0:fd:a2:65:da:75:38:12:87:d7:91:b0:f9:13: 82:30:fc:61:25:28:4a:0d:dc:87:0a:44:b9:7c:11: 05:56:65:42:2a:80:41:9c:3b:8c:96:0a:07:12:df: 68:22:a8:8d:41:75:64:93:d0:0f:ed:0b:a3:c2:36: 7c:2b:a1:2f:ea:dd:33:57:f5:86:44:d4:29:9f:c4: 03:b8:de:e7:ec:f1:28:b2:a6:e8:85:eb:bd:34:3b: bd:18:b5:ed:ca:2d:c7:58:55:ec:1e:4a:e0:37:8e: a7:b4:61:d4:fc:d8:93:24:6a:ad:03:a9:54:77:1c: 47:c6:45:8e:50:b0:c0:23:e7:13:cc:4b:16:a5:ac: 9c:7c:ca:19:46:8b:9f:29:3c:c8:76:1b:d2:06:8d: 46:1f:e7:05:f7:2d:d9:df:25:3f:e7:d3:82:88:70: c5:ba:f5:81:ed:20:31:98:fe:a8:6c:06:17:7e:82: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:9A:B2:99:28:83:A0:EC:5A:5E:EC:69:58:DD:72:BB:85:CA:7E X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:31:3d:5f:e8:56:fb:f6:54:b3:d9:9e:4e:29:01:c1:ed:b7: 9c:dc:25:85:a3:6a:a4:b7:d6:76:ae:f8:63:a1:45:83:8b:16: 4e:17:5b:d0:e4:89:13:89:b9:95:f0:ad:72:af:e0:72:b3:a3: 44:f7:92:4b:2d:78:71:9a:f1:1c:ea:47:32:93:93:2d:d9:ac: 0b:d4:0c:17:00:06:bd:e2:8c:e7:a6:54:4d:a4:d2:bf:ea:21: 2f:6c:58:58:70:cf:c0:b2:96:02:a6:d9:39:a9:7e:8a:b4:71: 8e:c4:84:09:15:92:dd:3e:b0:a6:6c:b9:65:af:75:79:2b:77: 79:a5:4a:20:5a:b7:95:04:2c:0c:82:3e:7d:6d:0b:38:b1:96: 83:0c:35:b0:0a:8f:74:b7:f3:8d:27:d1:10:c0:c9:41:1c:7d: fe:54:ab:a5:4a:da:67:bd:34:a2:3f:1b:c8:f1:ac:ac:f5:fe: be:f2:24:ce:0b:d3:ec:92:0f:d6:0d:23:d2:6d:c8:8d:98:b6: 7c:a6:ba:77:bd:87:9a:b3:0c:5f:9e:b3:37:c7:cd:ae:42:d3: 92:e4:e1:1e:54:ec:d2:f1:bf:e0:af:4f:9a:5a:e9:0a:c3:ad: de:d3:1c:93:c2:bb:4c:9c:bf:1b:8e:cc:b6:35:7e:e4:61:f7: bc:28:95:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjQxMTI1MDQyNTIxWhcNMjQxMjAyMDQyNTIxWjAYMRYwFAYD VQQDEw02NzQzZmMzMS05NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZczkV4s5tmBdxZGB53zu4rGlQUorjTllNmC7kkI4ecyvdrioITSBHV5sLzC DoQn/Lg6r1iURUyrBohggRvXHOirWoAxSRs0/8CZoP2iZdp1OBKH15Gw+ROCMPxh JShKDdyHCkS5fBEFVmVCKoBBnDuMlgoHEt9oIqiNQXVkk9AP7QujwjZ8K6Ev6t0z V/WGRNQpn8QDuN7n7PEosqboheu9NDu9GLXtyi3HWFXsHkrgN46ntGHU/NiTJGqt A6lUdxxHxkWOULDAI+cTzEsWpaycfMoZRoufKTzIdhvSBo1GH+cF9y3Z3yU/59OC iHDFuvWB7SAxmP6obAYXfoIZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9SmrKZ KIOg7Fpe7GlY3XK7hcp+MB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOMT1f6Fb79lSz2Z5OKQHB7bec3CWFo2qkt9Z2rvhjoUWDixZOF1vQ 5IkTibmV8K1yr+Bys6NE95JLLXhxmvEc6kcyk5Mt2awL1AwXAAa94oznplRNpNK/ 6iEvbFhYcM/AspYCptk5qX6KtHGOxIQJFZLdPrCmbLllr3V5K3d5pUogWreVBCwM gj59bQs4sZaDDDWwCo90t/ONJ9EQwMlBHH3+VKulStpnvTSiPxvI8ays9f6+8iTO C9Pskg/WDSPSbciNmLZ8prp3vYeaswxfnrM3x82uQtOS5OEeVOzS8b/gr0+aWukK w63e0xyTwrtMnL8bjsy2NX7kYfe8KJUi -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:16 2024 by rpki-client on console-ams.rpki-client.org