$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: +Typ1Z5aBW3V5/JSy63/rcAof9B1jyYoGeDLRPMQWuk= Subject key identifier: 45:24:21:FD:03:65:29:A7:86:D6:92:B7:EB:86:DA:D9:64:29:40:28 Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 017C Signing time: Sun 19 May 2024 04:45:36 +0000 Manifest this update: Sun 19 May 2024 04:45:36 +0000 Manifest next update: Sun 26 May 2024 04:45:36 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: 2fozoYs30ViFGLvR8NOHyb8CkowiHba3hy6DAH+zJDU=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: W+6IpaXFr5YBfsdhkiPj4CEvAOLvCx+9bSgI1khGFtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: May 19 04:45:36 2024 GMT Not After : May 26 04:45:36 2024 GMT Subject: CN=664983f0-9b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:39:4f:64:fe:2a:b3:c2:3f:ce:1a:cb:9b: 25:13:be:d3:f2:4c:97:13:62:f7:8d:12:02:4c:9d: 11:c3:1e:a2:8d:01:c7:5a:be:5b:fb:13:0a:af:41: fc:e2:32:bb:45:8e:16:00:19:32:8c:3b:e7:5f:ad: a7:72:7f:40:6e:a1:6d:b7:14:9e:9f:a3:0b:6b:0a: 70:49:42:3d:8d:9a:e3:96:ea:56:dd:06:f8:da:17: bf:26:1d:b4:f8:a8:df:88:57:d1:b0:c5:53:4e:be: c1:af:ce:69:35:1f:be:79:1d:23:9d:d8:d5:9e:6f: a7:f1:f6:9e:2f:83:cc:47:5a:11:09:40:c2:cf:c3: a5:45:2b:c7:03:dc:c5:07:82:be:bf:8b:6f:7b:01: da:bd:93:77:6c:6a:c4:ed:47:46:9b:0d:6b:7e:89: 80:7a:4a:51:8a:fe:0d:0a:07:37:cd:c0:6a:90:61: f8:dd:b6:d3:d6:2a:76:bf:37:67:aa:a5:f0:d0:03: 02:83:8b:1e:a9:4d:55:9c:39:84:a6:0a:b1:21:c5: 29:40:45:2d:50:7c:7f:47:39:21:2a:ee:dd:ee:3f: 01:50:9f:73:9f:fd:11:f9:0b:21:17:80:1f:67:da: da:b9:ff:7d:e8:6b:a6:fd:14:eb:ee:8d:d8:48:0c: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:21:FD:03:65:29:A7:86:D6:92:B7:EB:86:DA:D9:64:29:40:28 X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e4:25:1e:9f:76:7c:ad:1d:b9:51:e5:90:95:9d:fa:f0:a6: 03:e7:f3:0f:da:84:78:32:77:09:9a:1f:f0:67:5d:d8:24:91: 68:27:8e:ea:66:7b:5a:a3:b0:42:99:87:44:86:4c:38:b9:ad: 11:a7:15:ca:6e:8d:65:21:12:36:80:57:66:eb:19:4c:3a:22: 19:75:16:2e:d8:e1:89:81:89:8f:26:ed:33:84:af:89:cf:75: f4:44:e5:26:5e:dd:ac:f5:ad:55:52:44:76:db:5d:b7:f5:4c: 04:e7:d2:49:30:ac:38:37:dc:3c:e2:e7:21:00:b8:7c:16:b5: ab:30:71:7e:52:b5:d5:33:ba:b8:5b:31:eb:e6:33:31:7a:5f: 01:91:bd:e6:0a:7b:d5:41:b9:1f:1e:96:fa:9c:e3:4a:77:a0: 2a:7d:00:6b:4d:7c:af:70:5c:91:9e:94:ca:d4:d8:73:b8:d0: f7:a1:8a:05:ea:76:db:a7:64:89:0c:78:22:01:11:b5:91:d2: dc:a7:3d:03:05:3e:43:05:5b:e2:f9:37:3b:03:60:c1:b9:0e: 84:fa:82:13:4d:11:18:51:7d:bf:44:7b:a1:f9:40:6a:88:ea: 49:52:c6:50:73:4b:66:e8:ea:3c:2b:86:d5:a1:11:5c:7e:96: 9e:8b:0b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjQwNTE5MDQ0NTM2WhcNMjQwNTI2MDQ0NTM2WjAYMRYwFAYD VQQDEw02NjQ5ODNmMC05YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j45T2T+KrPCP84ay5slE77T8kyXE2L3jRICTJ0Rwx6ijQHHWr5b+xMKr0H8 4jK7RY4WABkyjDvnX62ncn9AbqFttxSen6MLawpwSUI9jZrjlupW3Qb42he/Jh20 +KjfiFfRsMVTTr7Br85pNR++eR0jndjVnm+n8faeL4PMR1oRCUDCz8OlRSvHA9zF B4K+v4tvewHavZN3bGrE7UdGmw1rfomAekpRiv4NCgc3zcBqkGH43bbT1ip2vzdn qqXw0AMCg4seqU1VnDmEpgqxIcUpQEUtUHx/RzkhKu7d7j8BUJ9zn/0R+QshF4Af Z9rauf996Gum/RTr7o3YSAwLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUkIf0D ZSmnhtaSt+uG2tlkKUAoMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG5CUen3Z8rR25UeWQlZ368KYD5/MP2oR4MncJmh/wZ13YJJFoJ47q Zntao7BCmYdEhkw4ua0RpxXKbo1lIRI2gFdm6xlMOiIZdRYu2OGJgYmPJu0zhK+J z3X0ROUmXt2s9a1VUkR221239UwE59JJMKw4N9w84uchALh8FrWrMHF+UrXVM7q4 WzHr5jMxel8Bkb3mCnvVQbkfHpb6nONKd6AqfQBrTXyvcFyRnpTK1NhzuND3oYoF 6nbbp2SJDHgiARG1kdLcpz0DBT5DBVvi+Tc7A2DBuQ6E+oITTREYUX2/RHuh+UBq iOpJUsZQc0tm6Oo8K4bVoRFcfpaeiwtH -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org