$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: 4xw5CTylxDppX7/DeaePx4ebb2CDdT01aNHshfvaRKk= Subject key identifier: 70:A5:05:EC:B9:20:0B:44:E7:35:A1:0D:8F:BF:4F:EE:39:69:4F:85 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 094D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0948 Signing time: Fri 31 May 2024 21:46:29 +0000 Manifest this update: Fri 31 May 2024 21:46:29 +0000 Manifest next update: Fri 07 Jun 2024 21:46:29 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: Lg2MWF7mXSQjqYXNhnyiLmwrXPm5xaVnnNR7HR2gG3o=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: pVSiDxsUhJwrE6xbN2uDbGSIus/DmtvNhRjR701jL88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2381 (0x94d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: May 31 21:46:29 2024 GMT Not After : Jun 7 21:46:29 2024 GMT Subject: CN=665a4535-5d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:a2:ca:7a:9c:e6:8f:23:1f:5b:7d:2d:1e: f0:72:c3:f4:14:5f:7a:2b:19:8d:46:67:85:c0:f7: 33:c9:6b:29:d3:45:b9:d1:77:0d:ed:9c:cb:a1:df: 1e:04:1d:4d:c2:fd:a7:39:51:f5:31:d3:93:c1:89: 96:02:ab:21:45:69:ed:ff:e1:f4:2a:d0:48:4e:1e: a9:b2:1d:3d:33:ab:d8:7f:b1:a9:ac:86:df:1f:1b: 11:f9:b8:47:ba:74:e9:59:77:5f:7b:da:11:f9:9f: 99:15:1e:88:df:60:40:ea:4d:82:04:1d:d8:37:1d: 8e:48:72:93:2e:16:95:55:9c:06:b2:88:75:7a:d4: 6c:87:47:1a:c9:a1:4f:79:0d:4c:2d:12:21:bb:80: d1:f5:08:ea:8d:5c:37:d2:23:1d:c9:d9:15:9c:ca: 8e:5a:0c:25:bb:5b:c7:79:48:84:70:4a:e7:21:07: 51:8e:db:7a:d7:32:55:f5:a6:76:a3:41:27:3f:05: fb:47:59:54:ba:c8:32:b6:19:91:60:85:27:d7:3c: 15:4d:cf:b9:9d:2f:7e:46:19:c2:03:4b:4f:76:48: f9:cb:9c:51:1a:8f:63:a7:85:ae:fb:53:03:71:c9: 05:1b:18:a0:91:66:06:a8:c0:ca:f5:03:c9:64:a6: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A5:05:EC:B9:20:0B:44:E7:35:A1:0D:8F:BF:4F:EE:39:69:4F:85 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:31:97:95:77:ed:3d:fa:9f:9f:7d:3a:54:36:ff:23:14:72: 8e:3d:9b:10:e8:1d:e2:16:7f:01:27:7a:fd:7e:b4:3c:0f:97: 58:ce:74:c5:8d:59:2b:c3:76:c6:a4:b4:f2:57:35:3d:2b:cc: e0:22:c7:1a:55:2a:60:16:cd:f4:b6:b5:f8:71:e4:b7:5e:42: b5:74:1e:ca:39:bf:38:a5:7e:b4:9e:23:05:82:0d:81:9d:9a: b9:be:32:21:0e:a0:1d:33:01:6a:12:70:fa:e2:19:4c:19:81: 66:71:f9:b5:e4:7b:12:d1:2b:d4:5d:b4:cc:26:9e:7c:79:ae: b7:93:1d:7c:68:f6:c8:52:14:73:69:2d:16:da:27:30:d7:b0: cc:4e:d5:d2:4e:44:e1:98:fd:fe:0e:51:af:e0:8b:7d:2c:78: 81:97:91:c6:4c:1f:5f:95:fa:24:54:ca:91:37:07:a6:0f:20: e5:b1:f8:a0:22:5f:4c:6d:68:fe:98:b0:68:f8:d5:95:a4:90: 47:37:d6:85:77:58:79:a4:dc:cd:98:b9:e8:03:af:7f:8c:43: dc:75:b5:91:f3:c1:55:59:c2:38:08:b6:8b:ff:e7:7d:aa:a3: 09:ab:38:d8:df:7b:47:4e:b6:8b:91:32:0c:88:ee:e8:69:c3: 13:eb:83:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjQwNTMxMjE0NjI5WhcNMjQwNjA3MjE0NjI5WjAYMRYwFAYD VQQDEw02NjVhNDUzNS01ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt82iynqc5o8jH1t9LR7wcsP0FF96KxmNRmeFwPczyWsp00W50XcN7ZzLod8e BB1Nwv2nOVH1MdOTwYmWAqshRWnt/+H0KtBITh6psh09M6vYf7GprIbfHxsR+bhH unTpWXdfe9oR+Z+ZFR6I32BA6k2CBB3YNx2OSHKTLhaVVZwGsoh1etRsh0cayaFP eQ1MLRIhu4DR9QjqjVw30iMdydkVnMqOWgwlu1vHeUiEcErnIQdRjtt61zJV9aZ2 o0EnPwX7R1lUusgythmRYIUn1zwVTc+5nS9+RhnCA0tPdkj5y5xRGo9jp4Wu+1MD cckFGxigkWYGqMDK9QPJZKY/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHClBey5 IAtE5zWhDY+/T+45aU+FMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6MZeVd+09+p+ffTpUNv8jFHKOPZsQ6B3iFn8BJ3r9frQ8D5dYznTF jVkrw3bGpLTyVzU9K8zgIscaVSpgFs30trX4ceS3XkK1dB7KOb84pX60niMFgg2B nZq5vjIhDqAdMwFqEnD64hlMGYFmcfm15HsS0SvUXbTMJp58ea63kx18aPbIUhRz aS0W2icw17DMTtXSTkThmP3+DlGv4It9LHiBl5HGTB9flfokVMqRNwemDyDlsfig Il9MbWj+mLBo+NWVpJBHN9aFd1h5pNzNmLnoA69/jEPcdbWR88FVWcI4CLaL/+d9 qqMJqzjY33tHTraLkTIMiO7oacMT64Mr -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org