$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: 5IOM76p8p+dVJdDkxoOZdr/RP1XCvjUTZpfkxYyrxx0= Subject key identifier: 65:9A:B5:61:B8:13:4B:35:AA:88:E4:F5:E0:E1:A6:06:7F:91:EA:51 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 0485 Signing time: Sun 19 May 2024 01:38:43 +0000 Manifest this update: Sun 19 May 2024 01:38:43 +0000 Manifest next update: Sun 26 May 2024 01:38:43 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: lVee+JxVWXPBED8n5JI86unsfAUzNvR64fIeTobPObk=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: xDOP2UJve02vyF5meHGaC2ZZRzQVk68R72yk6cvo904=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: May 19 01:38:43 2024 GMT Not After : May 26 01:38:43 2024 GMT Subject: CN=66495823-50cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:8d:8e:1b:9d:34:b4:82:13:72:86:01:c4: 43:88:d4:d0:62:09:c1:03:ef:e5:ef:3d:3c:0f:77: a7:17:67:bc:12:02:d9:8c:2e:cc:e5:48:5b:08:32: ce:47:ff:d9:03:a5:14:c7:32:a3:4e:b6:0f:96:b3: 60:f8:71:0e:fb:72:2c:04:34:97:dc:a2:3d:2a:03: 2e:bd:ce:25:4b:12:7a:de:07:61:6d:fb:92:ed:e2: 3a:e9:97:a3:df:c1:0d:76:28:9d:1e:1e:d6:6a:95: fa:22:a2:81:28:7a:67:f9:82:7f:e7:6e:6b:e0:ba: ae:14:76:f1:ae:d9:34:1a:f5:dd:5f:ce:73:d0:c5: 23:67:f3:e7:e6:e1:ad:94:c1:13:cc:42:db:90:74: 37:3f:72:e3:7f:5b:cf:4e:d4:16:7c:eb:c3:24:e4: 41:e7:18:57:7b:0a:ea:41:36:5d:7c:3f:ad:9a:3e: d1:95:7e:7c:9e:66:64:ed:19:0b:cc:4f:58:86:a4: b9:58:40:90:01:38:e0:63:cc:03:c8:4d:ac:03:87: 05:3a:7d:0e:c4:3f:b9:43:da:60:09:b4:61:94:21: a1:5b:c0:49:cd:94:52:f8:6b:6e:43:b5:5d:78:bd: a8:9b:17:b0:69:f7:1f:37:cf:ab:f6:72:2d:dc:e2: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:B5:61:B8:13:4B:35:AA:88:E4:F5:E0:E1:A6:06:7F:91:EA:51 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:12:16:5a:65:69:30:05:e3:11:a2:2d:10:4b:46:57:41: 77:3c:5e:ff:1b:b6:15:13:4b:5b:0b:90:1a:70:9f:33:f6:66: ce:6a:63:7d:f0:a0:63:f9:dd:2c:9e:0c:4d:be:c6:7c:e7:72: 25:4b:29:19:81:df:93:ab:b2:70:4c:98:01:0a:05:04:6b:72: 3d:49:92:9b:25:35:97:98:81:21:c6:02:4c:95:7f:0a:85:e3: 25:37:92:bd:2b:e0:41:4d:c2:99:c6:eb:28:fd:f1:ea:76:36: e8:5d:53:db:85:22:ae:71:7a:bb:4a:99:23:09:db:f2:24:ca: 80:81:10:58:18:4f:8a:97:c9:ce:64:c0:4b:76:3d:4b:b8:0f: d2:f8:28:fc:78:ee:01:06:d3:a6:b6:d4:4c:ae:bf:89:4f:9c: f5:b5:2f:8e:67:83:2d:5a:62:f7:15:9f:c2:9c:7b:dc:92:c6: 36:66:82:fc:9d:2a:e0:97:28:c2:ef:80:42:8d:65:05:8b:75: 68:ed:01:2c:5c:bb:c4:0c:1d:94:96:1d:b3:a6:91:c4:e9:67: 8e:8f:d4:ca:70:a4:89:8e:46:68:5b:0a:9f:81:1a:db:e5:6f: ca:ba:ad:db:65:d8:eb:45:44:7d:43:95:02:b5:c9:ce:31:f2: f2:ff:e0:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjQwNTE5MDEzODQzWhcNMjQwNTI2MDEzODQzWjAYMRYwFAYD VQQDEw02NjQ5NTgyMy01MGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXONjhudNLSCE3KGAcRDiNTQYgnBA+/l7z08D3enF2e8EgLZjC7M5UhbCDLO R//ZA6UUxzKjTrYPlrNg+HEO+3IsBDSX3KI9KgMuvc4lSxJ63gdhbfuS7eI66Zej 38ENdiidHh7WapX6IqKBKHpn+YJ/525r4LquFHbxrtk0GvXdX85z0MUjZ/Pn5uGt lMETzELbkHQ3P3Ljf1vPTtQWfOvDJORB5xhXewrqQTZdfD+tmj7RlX58nmZk7RkL zE9YhqS5WECQATjgY8wDyE2sA4cFOn0OxD+5Q9pgCbRhlCGhW8BJzZRS+GtuQ7Vd eL2omxewafcfN8+r9nIt3OL0JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWatWG4 E0s1qojk9eDhpgZ/kepRMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0RIWWmVpMAXjEaItEEtGV0F3PF7/G7YVE0tbC5AacJ8z9mbOamN9 8KBj+d0sngxNvsZ853IlSykZgd+Tq7JwTJgBCgUEa3I9SZKbJTWXmIEhxgJMlX8K heMlN5K9K+BBTcKZxuso/fHqdjboXVPbhSKucXq7SpkjCdvyJMqAgRBYGE+Kl8nO ZMBLdj1LuA/S+Cj8eO4BBtOmttRMrr+JT5z1tS+OZ4MtWmL3FZ/CnHvcksY2ZoL8 nSrglyjC74BCjWUFi3Vo7QEsXLvEDB2Ulh2zppHE6WeOj9TKcKSJjkZoWwqfgRrb 5W/Kuq3bZdjrRUR9Q5UCtcnOMfLy/+A4 -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org