$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: s2JJM3vFvqZWOhhmexRGiSKG8MbCSBF3KzuB0XnFzjs= Subject key identifier: 71:89:09:9C:98:88:6F:FD:F9:1A:FE:DD:2E:14:1A:75:8C:4E:DA:DC Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 06AA Signing time: Sat 01 Jun 2024 00:05:53 +0000 Manifest this update: Sat 01 Jun 2024 00:05:52 +0000 Manifest next update: Sat 08 Jun 2024 00:05:52 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: QuJHQDq5ygu9P4/X5xMJ9T5eK1LFRFd5AX3AQegNe18=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: 6O8csL9rEmKpGA0+g6+1hX4YH6tXwN3WNyqAyDg62Rk=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: D6LW0lHvJZ2QNOTyemz9aNxZKdOYYCFmrW4bdydyxQw=) 4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: hjbGiC9tNJEkFKnIMNevejeQRVm3trPrZNT8kiV/az8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Jun 1 00:05:52 2024 GMT Not After : Jun 8 00:05:52 2024 GMT Subject: CN=665a65e0-a777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:da:35:dd:a3:c0:c4:05:28:6a:35:4d:89: 89:92:29:8d:9a:05:3a:1d:4e:48:b3:1a:59:40:f6: 7e:47:27:01:92:f6:44:4b:71:eb:c5:7e:5f:49:2b: ae:28:7a:e2:0e:33:6b:26:7f:fc:39:ea:92:1e:cf: 38:92:d5:a5:d3:34:08:f0:44:9b:55:41:11:29:59: d3:7f:c5:62:27:69:04:46:3d:8a:74:aa:0c:93:1b: d0:1f:d3:7f:c2:7e:11:14:fe:11:cd:69:8f:3b:71: ef:e0:87:4d:73:bc:fc:cc:0f:dc:48:e4:31:bb:33: 26:08:3f:94:28:ae:ef:36:52:5e:51:cc:d4:60:cb: 0e:e1:8c:c1:c9:64:f9:cc:fa:1f:04:42:5a:43:3d: 0c:a6:fa:88:17:fd:b5:04:38:29:16:ce:99:4d:7b: 7e:e0:70:ff:aa:8f:a4:19:56:fe:7a:52:e8:06:89: 20:c5:91:59:76:12:f2:6a:34:11:ba:42:75:8c:df: ca:60:67:9c:47:7a:65:02:18:4f:91:27:4e:1c:76: e8:07:4a:6d:e3:3c:64:94:98:ea:7b:e1:4d:6d:ce: aa:67:b9:11:91:34:6f:8b:1e:ff:45:8c:2d:fd:04: e5:33:62:c1:aa:d1:84:37:2b:6c:3c:d8:35:f8:18: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:09:9C:98:88:6F:FD:F9:1A:FE:DD:2E:14:1A:75:8C:4E:DA:DC X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e5:c6:da:6d:80:cb:60:a3:64:8c:24:b7:14:ab:e7:4f:64: d1:cc:cf:65:76:9a:8a:9b:69:a4:1b:40:2d:2f:0f:aa:64:e9: 85:91:29:95:85:d2:a3:39:13:be:6f:f9:27:d7:ad:5d:a6:2a: b0:5d:5b:2a:58:f1:48:66:24:36:e1:33:54:86:83:e7:81:9f: c6:45:a7:20:1f:6c:e0:84:cf:df:37:09:1a:96:8a:1b:4c:42: 69:e9:fe:5c:49:31:36:de:87:a7:ca:38:74:1d:dd:c5:37:55: a2:b0:00:bd:80:31:60:a3:e2:f9:df:f2:61:61:17:7e:9c:66: b2:44:f5:57:6f:41:50:13:72:30:db:9c:a7:13:8a:2c:e8:b3: 3b:f3:a1:b3:28:da:32:5e:4a:d1:02:9e:a5:42:0d:fe:11:6b: fe:c4:74:3c:31:10:b8:0c:25:6c:b2:43:e7:d7:53:2e:16:eb: 97:d9:eb:18:57:c9:59:ee:56:71:ee:90:4b:fe:e0:56:f9:e8: e3:7e:3d:fe:64:57:79:2b:f6:c0:00:bb:9a:f0:65:d2:23:cf: ec:33:d1:ee:40:d3:42:d7:a3:f7:56:07:f5:f6:a0:43:a4:d5: 0f:f9:29:8a:0e:6f:19:72:04:e1:a9:7e:cd:32:a7:fb:4d:3e: fe:7e:d2:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjQwNjAxMDAwNTUyWhcNMjQwNjA4MDAwNTUyWjAYMRYwFAYD VQQDEw02NjVhNjVlMC1hNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDzaNd2jwMQFKGo1TYmJkimNmgU6HU5IsxpZQPZ+RycBkvZES3HrxX5fSSuu KHriDjNrJn/8OeqSHs84ktWl0zQI8ESbVUERKVnTf8ViJ2kERj2KdKoMkxvQH9N/ wn4RFP4RzWmPO3Hv4IdNc7z8zA/cSOQxuzMmCD+UKK7vNlJeUczUYMsO4YzByWT5 zPofBEJaQz0MpvqIF/21BDgpFs6ZTXt+4HD/qo+kGVb+elLoBokgxZFZdhLyajQR ukJ1jN/KYGecR3plAhhPkSdOHHboB0pt4zxklJjqe+FNbc6qZ7kRkTRvix7/RYwt /QTlM2LBqtGENytsPNg1+BidYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGJCZyY iG/9+Rr+3S4UGnWMTtrcMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX5cbabYDLYKNkjCS3FKvnT2TRzM9ldpqKm2mkG0AtLw+qZOmFkSmV hdKjORO+b/kn161dpiqwXVsqWPFIZiQ24TNUhoPngZ/GRacgH2zghM/fNwkaloob TEJp6f5cSTE23oenyjh0Hd3FN1WisAC9gDFgo+L53/JhYRd+nGayRPVXb0FQE3Iw 25ynE4os6LM786GzKNoyXkrRAp6lQg3+EWv+xHQ8MRC4DCVsskPn11MuFuuX2esY V8lZ7lZx7pBL/uBW+ejjfj3+ZFd5K/bAALua8GXSI8/sM9HuQNNC16P3Vgf19qBD pNUP+SmKDm8ZcgThqX7NMqf7TT7+ftIU -----END CERTIFICATE-----Generated at Sat Jun 1 00:32:58 2024 by rpki-client on console-fra.rpki-client.org