$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: 2kiOoU7LhA3/v3QEV91P/WiZA9MCVWRIj4W16PomXVw= Subject key identifier: 02:9C:29:64:DE:4F:3F:EB:28:07:05:EB:E7:CA:A5:1D:B6:BC:B3:76 Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 0380 Signing time: Sat 23 Nov 2024 00:24:41 +0000 Manifest this update: Sat 23 Nov 2024 00:24:41 +0000 Manifest next update: Sat 30 Nov 2024 00:24:41 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: ry8BZ2kKkv02Sj7C+vuXP5o60w1YmpTOILKaqrTdLtc=) 2: A3E1285880EA11EC9B13735BC4F9AE02.roa (hash: auLsvpyLRgjjhrC/dtzTDNak13fW4h7mYDoTdQuzyQQ=) 3: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: x++ow/ozKQNuOOe+dOBuvM0MJl4sFaxWwuESx1Sn7Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Nov 23 00:24:41 2024 GMT Not After : Nov 30 00:24:41 2024 GMT Subject: CN=674120c9-cba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:75:88:bf:44:82:4e:b1:e9:db:8a:4d:a9: a2:99:23:61:db:8f:46:82:13:81:e4:9f:5a:a3:8f: 74:2a:fc:13:b8:45:57:00:3c:b9:b4:10:e5:38:ff: ec:36:e7:1d:13:c8:32:0b:22:e8:b5:31:36:9d:9f: c2:21:f3:51:7e:e4:b5:45:55:44:8f:ed:c2:c0:1d: f6:73:9d:01:21:a3:13:f8:51:03:f4:34:c2:80:66: 44:06:3d:64:c0:78:c3:47:b5:92:a5:a9:fd:53:13: b3:c3:a5:8c:e8:e3:cd:5c:75:d9:ee:bd:cc:14:d8: 8c:27:c2:18:43:a7:70:45:1e:7b:91:0e:4e:e4:5a: ae:7d:b1:0b:35:06:ea:24:3b:7d:a0:74:c8:29:88: 95:a5:5a:35:68:b6:76:5e:6f:30:bf:5d:c6:3f:07: 0e:e7:17:d7:f0:1c:75:33:aa:28:61:8e:87:7b:e1: b2:7f:81:3d:b7:90:52:c8:7d:f3:79:fd:de:4d:dd: 71:21:b6:13:6f:c6:b5:13:6b:39:f0:4f:01:d6:3b: 15:02:2f:7c:a0:40:a3:df:51:c3:04:c2:b1:fa:c3: aa:f7:08:dc:3e:29:2b:07:47:6f:2d:84:22:57:85: 32:1f:ec:81:92:47:87:18:e0:92:67:5e:90:d9:ec: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:29:64:DE:4F:3F:EB:28:07:05:EB:E7:CA:A5:1D:B6:BC:B3:76 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:88:da:db:44:81:57:81:8e:c0:a3:d5:46:6e:29:01:6a:81: d5:7c:7e:15:86:4f:af:2f:16:90:ea:57:c0:13:4c:75:0b:88: 54:19:58:1c:e9:78:67:9b:71:b9:d6:85:6b:56:86:55:8b:28: 1c:a5:0c:af:d0:70:b6:81:59:eb:83:db:2b:cf:70:03:e0:30: e6:35:4c:6c:d8:b1:1a:0a:5f:49:3e:c4:2f:69:b2:a1:22:33: 15:64:d7:74:78:d4:93:c2:ef:48:61:b2:d6:f3:a4:8f:31:58: 9e:77:26:70:7a:15:e7:3e:98:cd:2d:21:d9:e9:7d:9f:55:dc: 5f:58:b1:5e:f3:c4:b9:b4:ce:2a:a0:ab:61:17:ea:ed:72:e4: 06:34:2f:bb:8c:7d:91:70:70:cf:78:fd:94:6b:c6:6e:e0:fd: 6d:e3:da:4d:0b:85:54:7c:6f:3a:71:83:ac:58:aa:c7:83:02: 8e:97:4c:bb:85:f2:af:2b:d3:46:71:ee:0e:c8:91:3d:a0:d5: 73:e9:b6:85:5b:23:42:d9:1c:cc:61:87:69:f8:fd:b2:75:83: 74:e8:20:11:c0:fe:0a:c2:e7:9b:4f:07:13:e7:e9:be:c9:dd: d9:b9:b6:dd:38:1c:b2:2f:52:e9:f8:fb:4c:17:9a:2c:c1:cc: 52:09:e5:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjQxMTIzMDAyNDQxWhcNMjQxMTMwMDAyNDQxWjAYMRYwFAYD VQQDEw02NzQxMjBjOS1jYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB11iL9Egk6x6duKTamimSNh249GghOB5J9ao490KvwTuEVXADy5tBDlOP/s NucdE8gyCyLotTE2nZ/CIfNRfuS1RVVEj+3CwB32c50BIaMT+FED9DTCgGZEBj1k wHjDR7WSpan9UxOzw6WM6OPNXHXZ7r3MFNiMJ8IYQ6dwRR57kQ5O5FqufbELNQbq JDt9oHTIKYiVpVo1aLZ2Xm8wv13GPwcO5xfX8Bx1M6ooYY6He+Gyf4E9t5BSyH3z ef3eTd1xIbYTb8a1E2s58E8B1jsVAi98oECj31HDBMKx+sOq9wjcPikrB0dvLYQi V4UyH+yBkkeHGOCSZ16Q2eyh8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKcKWTe Tz/rKAcF6+fKpR22vLN2MB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9iNrbRIFXgY7Ao9VGbikBaoHVfH4Vhk+vLxaQ6lfAE0x1C4hUGVgc 6Xhnm3G51oVrVoZViygcpQyv0HC2gVnrg9srz3AD4DDmNUxs2LEaCl9JPsQvabKh IjMVZNd0eNSTwu9IYbLW86SPMViedyZwehXnPpjNLSHZ6X2fVdxfWLFe88S5tM4q oKthF+rtcuQGNC+7jH2RcHDPeP2Ua8Zu4P1t49pNC4VUfG86cYOsWKrHgwKOl0y7 hfKvK9NGce4OyJE9oNVz6baFWyNC2RzMYYdp+P2ydYN06CARwP4KwuebTwcT5+m+ yd3ZubbdOByyL1Lp+PtMF5oswcxSCeXS -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org