$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: BSCTwg7v2/1fi6JN976az7rqRDdk38lOYxvS6/JhlrQ= Subject key identifier: 1E:3F:C0:AD:EF:FA:12:B9:54:77:CC:24:58:DF:1D:D0:20:A2:13:A3 Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 0593 Signing time: Wed 20 Nov 2024 16:02:18 +0000 Manifest this update: Wed 20 Nov 2024 16:02:17 +0000 Manifest next update: Wed 27 Nov 2024 16:02:17 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: M7llgWSWWSol0+U2UlIww1VT56a9jSC08AsTpyfIuDU=) 2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: EST3lTlCsBscnNbAgJCoSC2X1l7CJ5xbYo0Sib0cuM0=) 3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: pliS+rwU3LbaprEyjV5mUgwfJirBs3RzVR6whO1ItwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Nov 20 16:02:17 2024 GMT Not After : Nov 27 16:02:17 2024 GMT Subject: CN=673e080a-f0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8e:a4:83:ff:46:ec:8f:c5:f3:eb:cd:8b:54: 79:d1:26:b4:bb:e6:86:c4:f3:b7:04:1e:ec:1d:42: da:6f:fc:e3:29:a2:4a:46:69:97:73:bb:ae:85:2c: 4a:9f:57:e4:ab:03:97:ed:f5:5c:24:a7:5e:84:b5: 53:69:4b:e7:49:12:e2:52:f7:b8:72:67:44:0a:19: e2:50:1b:62:1e:95:5e:0a:e3:ff:13:80:a0:ea:0e: b8:3c:08:29:a2:fe:1c:58:43:ae:85:60:f5:bd:10: 0c:f0:b2:a9:37:27:a1:7c:a1:07:d3:b1:10:4a:f0: a8:4d:c3:50:f1:f1:7e:46:87:92:96:0a:80:2e:9e: 66:84:77:88:38:59:7c:6e:3c:1e:5f:71:e3:e6:e5: 7f:f1:12:cc:ec:b1:52:f3:e7:91:a4:ee:31:d2:40: ae:de:da:90:28:fd:ec:f4:9a:a2:7d:00:e7:74:e7: a4:31:a5:94:0a:6d:f6:83:5b:22:ef:2d:7f:79:ff: 16:42:30:e7:25:b6:5e:a3:12:f2:ae:e5:04:da:bf: d2:9b:16:3c:51:e0:49:e8:c4:7c:61:60:6b:0f:ff: 91:24:eb:07:5f:ad:fb:00:9c:d1:ad:09:3a:d9:78: ec:7c:ec:7d:75:c7:e1:56:18:f3:c0:c5:35:aa:db: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3F:C0:AD:EF:FA:12:B9:54:77:CC:24:58:DF:1D:D0:20:A2:13:A3 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:0e:66:7d:43:af:30:1a:7a:84:23:7c:55:69:f0:6a:6f: 24:bf:59:0e:6b:95:d0:d0:fb:26:59:e8:69:ce:8d:e0:d8:cb: 9f:8b:fd:78:1d:64:7d:11:0d:f5:4d:ee:c7:89:a6:84:d4:f3: a9:0c:5e:2f:a9:e9:13:8f:a8:94:d6:76:5c:9e:4f:76:5f:a5: 19:6f:0e:db:49:a4:4f:39:59:63:dc:34:ee:4b:78:22:bf:eb: 70:26:f8:0d:1c:12:53:66:a4:b9:f6:72:e6:35:16:30:5c:bc: 5c:7a:e1:b0:b8:48:54:8d:1e:46:23:bc:21:82:56:df:94:1e: f4:ce:a4:73:43:35:52:d0:d0:43:8a:bb:91:fa:5f:ca:06:ee: ba:b3:fd:c6:1a:b1:b5:be:67:71:3e:45:ca:93:40:66:59:5e: 54:a6:73:6c:31:36:a9:cd:31:3c:e5:17:b7:ab:36:b8:63:42: 6a:c1:ed:ce:69:ad:f4:e2:fd:27:86:62:37:2b:90:b9:98:32: 92:b4:ef:02:a0:7f:fd:df:43:91:9b:bb:94:b6:41:97:45:55: 86:fd:5d:49:6b:71:60:35:c3:8c:68:4d:bf:69:ba:4e:23:7b: a6:11:bb:a1:2e:ad:a3:7b:25:b3:f5:36:2d:8c:4e:79:65:fd: de:64:f7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjQxMTIwMTYwMjE3WhcNMjQxMTI3MTYwMjE3WjAYMRYwFAYD VQQDEw02NzNlMDgwYS1mMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Y6kg/9G7I/F8+vNi1R50Sa0u+aGxPO3BB7sHULab/zjKaJKRmmXc7uuhSxK n1fkqwOX7fVcJKdehLVTaUvnSRLiUve4cmdEChniUBtiHpVeCuP/E4Cg6g64PAgp ov4cWEOuhWD1vRAM8LKpNyehfKEH07EQSvCoTcNQ8fF+RoeSlgqALp5mhHeIOFl8 bjweX3Hj5uV/8RLM7LFS8+eRpO4x0kCu3tqQKP3s9JqifQDndOekMaWUCm32g1si 7y1/ef8WQjDnJbZeoxLyruUE2r/SmxY8UeBJ6MR8YWBrD/+RJOsHX637AJzRrQk6 2XjsfOx9dcfhVhjzwMU1qtuFjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4/wK3v +hK5VHfMJFjfHdAgohOjMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu3g5mfUOvMBp6hCN8VWnwam8kv1kOa5XQ0PsmWehpzo3g2Mufi/14 HWR9EQ31Te7HiaaE1POpDF4vqekTj6iU1nZcnk92X6UZbw7bSaRPOVlj3DTuS3gi v+twJvgNHBJTZqS59nLmNRYwXLxceuGwuEhUjR5GI7whglbflB70zqRzQzVS0NBD iruR+l/KBu66s/3GGrG1vmdxPkXKk0BmWV5UpnNsMTapzTE85Re3qza4Y0Jqwe3O aa304v0nhmI3K5C5mDKStO8CoH/930ORm7uUtkGXRVWG/V1Ja3FgNcOMaE2/abpO I3umEbuhLq2jeyWz9TYtjE55Zf3eZPfj -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:12 2024 by rpki-client on console-ams.rpki-client.org