$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: gIQ2aIk/nFIHcr/APJpJdRZNegJRJWlmmfFAKg7dhys= Subject key identifier: D0:E1:8A:44:F1:6F:F6:C2:90:61:90:E9:A5:A9:DA:22:82:20:23:4B Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 05FA Signing time: Sat 18 May 2024 23:58:27 +0000 Manifest this update: Sat 18 May 2024 23:58:27 +0000 Manifest next update: Sat 25 May 2024 23:58:27 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: NV3VMHessY+P04vO/qPBOf9XKhbUWCA2vMYLPYAPCGg=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: GAGLq3SP9PmEM2RBds+zOMxapkoPAz1iFLEjpssH9QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: May 18 23:58:27 2024 GMT Not After : May 25 23:58:27 2024 GMT Subject: CN=664940a3-c8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:d7:88:ef:f0:23:83:18:3e:45:38:96:e1: de:23:2f:65:fd:47:87:37:ac:30:8d:1b:ff:ac:33: c0:97:47:75:15:f2:00:34:42:fa:50:7d:cb:c8:fb: e6:6a:76:73:18:44:51:a9:48:d6:71:ae:df:b5:1c: e2:49:bd:f9:34:2b:b4:74:a8:be:a3:94:f0:76:09: 3e:84:fa:bb:69:95:30:02:c1:65:45:db:13:d5:53: f4:32:64:cc:f4:b9:b8:7d:2a:50:8c:0d:9a:9b:79: 1d:fa:31:68:15:fa:1c:d4:8a:5d:28:16:ff:75:65: 8f:29:38:67:fd:d4:f5:dd:db:ad:bb:ca:af:a4:c3: cc:76:79:5e:eb:38:08:f6:69:09:98:76:bd:46:69: c1:63:fc:1c:a1:3e:39:2c:47:1b:b8:86:48:05:d3: 04:8a:a2:d1:38:d0:d7:b2:d5:c8:67:3c:85:4d:df: 81:09:7f:26:38:c9:d1:4c:68:3a:7e:f3:41:c9:ca: 91:fd:e6:53:f2:4a:9d:41:6d:9c:5f:f2:d5:0d:60: 8b:ab:a6:94:f6:50:79:69:4e:61:5d:dc:b0:b4:5c: cb:5a:a4:45:42:ce:a0:7f:68:7d:04:f4:98:6e:8e: 58:ca:8d:ab:7e:a6:51:83:3f:96:9f:29:15:cb:d2: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E1:8A:44:F1:6F:F6:C2:90:61:90:E9:A5:A9:DA:22:82:20:23:4B X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:b6:7f:7d:24:9b:c7:fa:2e:2e:0c:a1:1f:cf:b7:81:4b: 4f:17:83:1b:b4:96:9f:a2:fb:8f:95:33:31:9e:54:7a:b0:ce: e0:b2:eb:8c:e7:80:f5:5b:fc:24:b0:7a:fb:e3:33:12:d9:b5: 98:31:fd:de:6a:bd:4a:72:df:5e:23:e7:90:2f:82:b4:c5:d0: b4:47:e4:03:31:2c:4e:25:a4:dd:20:2d:1e:23:46:4b:42:24: 39:fe:d9:f7:34:4b:8a:fd:3a:c5:71:42:37:f3:e4:1c:2e:a7: fb:9a:e6:36:b9:3d:50:a8:2b:9b:3b:8f:d4:73:72:97:73:d6: 0f:cc:44:0e:12:b7:78:f2:29:0d:f6:5b:93:8c:59:c3:fa:24: 01:b7:95:3b:7b:0e:ea:d2:a9:fd:fc:14:8e:1a:07:93:7c:63: e4:f8:3f:be:a1:a5:bf:40:0b:82:0a:f2:e0:f4:6a:95:5a:ea: cd:5e:71:05:80:e4:f9:b1:ac:cf:62:1b:56:93:18:9d:88:ca: 95:ed:2d:0e:5b:01:a4:9d:7d:64:34:7a:ac:77:db:5f:3e:3b: de:d7:de:69:e2:bc:bc:17:b8:b5:53:33:cf:d5:4d:dd:fe:90: c4:58:d2:e9:b1:95:46:08:2c:83:ff:08:45:39:9f:ab:40:98: 1a:f3:2f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjQwNTE4MjM1ODI3WhcNMjQwNTI1MjM1ODI3WjAYMRYwFAYD VQQDEw02NjQ5NDBhMy1jOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuvXiO/wI4MYPkU4luHeIy9l/UeHN6wwjRv/rDPAl0d1FfIANEL6UH3LyPvm anZzGERRqUjWca7ftRziSb35NCu0dKi+o5Twdgk+hPq7aZUwAsFlRdsT1VP0MmTM 9Lm4fSpQjA2am3kd+jFoFfoc1IpdKBb/dWWPKThn/dT13dutu8qvpMPMdnle6zgI 9mkJmHa9RmnBY/wcoT45LEcbuIZIBdMEiqLRONDXstXIZzyFTd+BCX8mOMnRTGg6 fvNBycqR/eZT8kqdQW2cX/LVDWCLq6aU9lB5aU5hXdywtFzLWqRFQs6gf2h9BPSY bo5Yyo2rfqZRgz+WnykVy9J+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDhikTx b/bCkGGQ6aWp2iKCICNLMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjnLZ/fSSbx/ouLgyhH8+3gUtPF4MbtJafovuPlTMxnlR6sM7gsuuM 54D1W/wksHr74zMS2bWYMf3ear1Kct9eI+eQL4K0xdC0R+QDMSxOJaTdIC0eI0ZL QiQ5/tn3NEuK/TrFcUI38+QcLqf7muY2uT1QqCubO4/Uc3KXc9YPzEQOErd48ikN 9luTjFnD+iQBt5U7ew7q0qn9/BSOGgeTfGPk+D++oaW/QAuCCvLg9GqVWurNXnEF gOT5sazPYhtWkxidiMqV7S0OWwGknX1kNHqsd9tfPjve195p4ry8F7i1UzPP1U3d /pDEWNLpsZVGCCyD/whFOZ+rQJga8y/w -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org