$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: xd7c10xBCyya+8KjobCmD0yM2oAazTfWoHS3rOVwr2U= Subject key identifier: B6:7F:9D:0A:74:15:E1:D1:0A:DA:95:76:66:E3:DD:CC:AE:CF:3C:6B Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 3459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 3449 Signing time: Fri 22 Nov 2024 14:23:20 +0000 Manifest this update: Fri 22 Nov 2024 14:23:19 +0000 Manifest next update: Fri 29 Nov 2024 14:23:19 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: G9uBHt/KMDHAwc1xfO1mUZDVSMLYZS/ogCU95Qu4kBo=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: xRVsw1KmS2w+1EDgE8BbroBgIAZxNI85/W3Lxxz+NyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Nov 22 14:23:19 2024 GMT Not After : Nov 29 14:23:19 2024 GMT Subject: CN=674093d7-d81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:e3:43:b4:4d:d4:7e:d6:06:84:1d:53:9f: 67:e3:37:7a:b5:3b:06:91:55:6c:4f:ec:03:90:09: 94:84:f8:cb:7e:39:32:c1:b4:f5:e6:8c:11:20:70: 84:e7:62:77:6b:f8:ea:15:6d:ce:7f:2c:21:4a:cf: 54:ad:3c:67:6c:47:0a:cc:64:7f:d2:00:2d:52:66: 13:de:df:82:58:b3:9c:e0:f2:09:43:74:89:75:f9: 67:4c:6b:aa:9e:27:ce:66:2f:7f:44:65:24:0a:90: 2f:a7:4b:55:e6:66:ea:a5:15:bf:f5:c1:99:f2:32: 56:34:12:35:80:14:45:24:d5:12:aa:86:c4:40:75: f2:d9:e3:f3:31:14:d2:45:7a:fb:6f:58:d4:aa:08: 59:4b:cc:76:38:51:ad:77:cb:7f:f0:cd:ac:de:a9: b2:93:48:5e:1a:43:41:ca:c5:83:4f:2e:2e:60:0b: 47:71:f8:88:5c:71:d2:46:73:f9:70:36:2e:74:53: 45:76:88:f2:31:6c:24:81:e6:42:0b:6c:92:b5:5a: 60:0f:23:39:f4:1b:47:8e:24:7c:15:17:a8:88:c0: e4:13:8a:de:d2:b7:c0:1f:bc:26:47:3d:19:51:3c: a8:08:4d:b7:db:ce:ef:fc:9e:8d:df:54:91:99:0e: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7F:9D:0A:74:15:E1:D1:0A:DA:95:76:66:E3:DD:CC:AE:CF:3C:6B X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4e:46:bc:2a:05:ad:0f:ca:b2:53:16:f7:aa:45:07:81:40: ba:e2:24:97:92:9e:c3:d8:29:81:2e:1c:3c:b5:25:c5:69:16: b8:92:a7:48:76:8f:f1:cb:9d:23:c1:6a:b8:cd:07:22:16:58: 7a:6c:81:d2:90:fc:51:22:70:08:82:b3:1f:6e:2a:83:de:81: 1e:d8:0a:0f:a3:c4:af:35:05:24:90:ae:0d:7c:db:b8:9b:6d: 3b:ee:a1:00:4a:54:12:60:4c:9b:25:db:e8:87:41:00:c4:b4: 5e:b4:8f:5f:19:49:2e:6c:ea:9b:23:2b:88:a8:19:d0:ae:60: 96:1e:c6:8e:57:84:b0:d4:61:f0:06:40:f1:d3:9a:03:15:e3: 56:4a:d7:f5:6c:f7:3b:a6:be:1e:e8:1e:01:1f:8e:f7:75:8c: 56:56:19:da:86:a5:40:4e:fd:1a:d0:9a:cc:0e:39:88:61:01: b3:40:9c:62:be:04:56:de:71:af:84:94:bd:2e:09:2e:85:c6: 29:68:34:26:73:ed:cf:70:ea:0d:0c:5b:55:b8:05:6d:53:4a: 82:17:29:91:17:4c:ab:ea:1e:9d:0a:2a:d2:2e:f8:6c:be:9b: 41:b2:5b:20:78:08:33:ff:ce:2a:95:21:3e:d2:fc:4d:25:85: 25:31:98:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjQxMTIyMTQyMzE5WhcNMjQxMTI5MTQyMzE5WjAYMRYwFAYD VQQDEw02NzQwOTNkNy1kODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GHjQ7RN1H7WBoQdU59n4zd6tTsGkVVsT+wDkAmUhPjLfjkywbT15owRIHCE 52J3a/jqFW3OfywhSs9UrTxnbEcKzGR/0gAtUmYT3t+CWLOc4PIJQ3SJdflnTGuq nifOZi9/RGUkCpAvp0tV5mbqpRW/9cGZ8jJWNBI1gBRFJNUSqobEQHXy2ePzMRTS RXr7b1jUqghZS8x2OFGtd8t/8M2s3qmyk0heGkNBysWDTy4uYAtHcfiIXHHSRnP5 cDYudFNFdojyMWwkgeZCC2yStVpgDyM59BtHjiR8FReoiMDkE4re0rfAH7wmRz0Z UTyoCE23287v/J6N31SRmQ5UVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ/nQp0 FeHRCtqVdmbj3cyuzzxrMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Tka8KgWtD8qyUxb3qkUHgUC64iSXkp7D2CmBLhw8tSXFaRa4kqdI do/xy50jwWq4zQciFlh6bIHSkPxRInAIgrMfbiqD3oEe2AoPo8SvNQUkkK4NfNu4 m2077qEASlQSYEybJdvoh0EAxLRetI9fGUkubOqbIyuIqBnQrmCWHsaOV4Sw1GHw BkDx05oDFeNWStf1bPc7pr4e6B4BH473dYxWVhnahqVATv0a0JrMDjmIYQGzQJxi vgRW3nGvhJS9LgkuhcYpaDQmc+3PcOoNDFtVuAVtU0qCFymRF0yr6h6dCirSLvhs vptBslsgeAgz/84qlSE+0vxNJYUlMZjP -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org