$ rpki-client -vvf rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft File: kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft (raw, json) Hash identifier: C705Gvhb8qumU1NGNa4moJxuKt9vaBgivGB6AfHYkes= Subject key identifier: 5C:9B:E0:F5:3F:CF:08:BF:AB:BC:B7:F3:4D:47:39:D4:D7:CE:17:19 Authority key identifier: 92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E Certificate issuer: /CN=A911D5F1/serialNumber=92E848E71F7008DCC777B8E23F73DA9278C9A50E Certificate serial: 0F2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft Manifest number: 0F20 Signing time: Sat 18 May 2024 18:13:34 +0000 Manifest this update: Sat 18 May 2024 18:13:33 +0000 Manifest next update: Sat 25 May 2024 18:13:33 +0000 Files and hashes: 1: kuhI5x9wCNzHd7jiP3PaknjJpQ4.crl (hash: NWLps0E3e279I9bmC0btSTUdwgNb8+DBEfsIRN2H7G4=) 2: F2C7080CE17A11EC93AB7473C4F9AE02.roa (hash: XexnyfwA0CtniI2Ujd9ZJAthg40KLsIk/EQefN1sYwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.crl rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3882 (0xf2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D5F1/serialNumber=92E848E71F7008DCC777B8E23F73DA9278C9A50E Validity Not Before: May 18 18:13:33 2024 GMT Not After : May 25 18:13:33 2024 GMT Subject: CN=6648efce-58d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:1d:b1:73:30:a9:b4:59:39:f2:52:e1:6d: 13:7b:64:60:fd:f0:06:2c:0e:38:01:db:da:77:50: 43:f1:3d:07:1c:f4:e0:e7:3d:71:09:6e:32:fa:6b: 2d:c8:1c:a3:fe:4b:92:ac:50:3f:71:e5:5f:11:98: 57:ed:9d:cd:4f:1b:7d:87:51:b6:3c:a5:5f:8b:78: 97:bf:b8:53:f4:b3:2c:5e:6d:bd:3c:b6:f4:94:47: bc:55:20:a8:35:ec:e8:8b:55:66:94:35:f7:b6:a2: 46:d6:a9:71:6d:39:43:7e:ea:1b:10:77:57:2a:9f: 90:a0:21:ad:ee:92:1d:98:e0:5c:c5:5e:ea:33:0e: da:b1:30:df:df:84:40:6b:9e:e4:15:6f:d3:e9:96: 72:69:a6:f4:bf:d0:14:e3:d8:6a:07:13:53:4b:d5: 1a:e1:a0:1c:21:0c:77:30:25:a9:f7:99:8e:7c:dd: 1b:51:c9:7b:4f:ca:27:c9:01:3e:95:98:73:78:2d: 1d:8a:6f:4e:9a:96:42:38:5e:fb:4d:87:de:96:e3: 89:ca:59:20:58:fd:2c:0c:c0:c5:01:a6:21:cd:e0: 11:c9:e9:cd:4c:46:a4:c1:fe:4d:77:4a:48:e0:90: 61:14:a6:0d:a5:fd:bd:32:6c:cc:e4:09:ca:e0:14: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9B:E0:F5:3F:CF:08:BF:AB:BC:B7:F3:4D:47:39:D4:D7:CE:17:19 X509v3 Authority Key Identifier: keyid:92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b2:14:60:be:d4:da:96:dd:76:5c:be:7c:57:2f:4a:79:70: 72:0f:1c:5b:f1:05:8a:97:9f:6d:f1:f2:3c:d1:eb:5c:46:9f: 8d:d9:38:e3:f8:64:2f:bd:69:99:6c:5f:c3:d4:fe:f4:d5:d5: 89:2d:7a:b1:57:e8:d7:ce:5f:f6:ca:50:5b:6b:33:43:3a:a2: ca:67:22:42:c0:9e:82:dc:60:f5:86:f2:a9:e4:db:ac:90:f6: 08:ae:e8:40:c9:71:e8:a9:83:82:a4:99:96:8a:17:72:ef:8c: 02:7f:45:82:10:1d:15:94:b3:46:3c:ea:7e:16:1d:0b:91:24: d7:4b:f8:c4:1c:7e:d2:fd:f0:81:00:ff:d5:b5:b6:bb:ca:64: 3a:f6:e5:20:37:71:ec:a9:32:ee:15:8c:b3:33:d1:7d:bf:94: eb:7c:ff:27:5c:78:c5:ea:6c:ee:c1:11:b2:69:13:e1:36:d8: f6:a6:db:8e:13:42:e4:42:02:f6:70:8c:33:54:a5:99:08:fe: 2f:ed:4b:fd:08:58:46:92:81:3d:b2:60:32:c0:bb:08:86:47: c6:9e:61:d8:36:3d:cc:aa:0c:ad:a8:84:65:f3:69:4d:8a:c2: fc:a2:a5:f8:e3:ec:90:74:4c:69:bb:32:f6:96:d3:29:ed:00: 0f:83:e8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1RjExMTAvBgNVBAUTKDkyRTg0OEU3MUY3MDA4RENDNzc3QjhFMjNGNzNEQTky NzhDOUE1MEUwHhcNMjQwNTE4MTgxMzMzWhcNMjQwNTI1MTgxMzMzWjAYMRYwFAYD VQQDEw02NjQ4ZWZjZS01OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIcdsXMwqbRZOfJS4W0Te2Rg/fAGLA44Advad1BD8T0HHPTg5z1xCW4y+mst yByj/kuSrFA/ceVfEZhX7Z3NTxt9h1G2PKVfi3iXv7hT9LMsXm29PLb0lEe8VSCo Nezoi1VmlDX3tqJG1qlxbTlDfuobEHdXKp+QoCGt7pIdmOBcxV7qMw7asTDf34RA a57kFW/T6ZZyaab0v9AU49hqBxNTS9Ua4aAcIQx3MCWp95mOfN0bUcl7T8onyQE+ lZhzeC0dim9OmpZCOF77TYfeluOJylkgWP0sDMDFAaYhzeARyenNTEakwf5Nd0pI 4JBhFKYNpf29MmzM5AnK4BRfHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyb4PU/ zwi/q7y3801HOdTXzhcZMB8GA1UdIwQYMBaAFJLoSOcfcAjcx3e44j9z2pJ4yaUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDVGMS9BOTVFNkMwMjUw NjIxMUU5QkZDQjRDODdDNEY5QUUwMi9rdWhJNXg5d0NOekhkN2ppUDNQYWtuakpw UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1aEk1eDl3Q056SGQ3amlQM1Bha25qSnBRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDVGMS9BOTVFNkMwMjUwNjIxMUU5QkZDQjRDODdDNEY5QUUwMi9rdWhJNXg5d0NO ekhkN2ppUDNQYWtuakpwUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApshRgvtTalt12XL58Vy9KeXByDxxb8QWKl59t8fI80etcRp+N2Tjj +GQvvWmZbF/D1P701dWJLXqxV+jXzl/2ylBbazNDOqLKZyJCwJ6C3GD1hvKp5Nus kPYIruhAyXHoqYOCpJmWihdy74wCf0WCEB0VlLNGPOp+Fh0LkSTXS/jEHH7S/fCB AP/Vtba7ymQ69uUgN3HsqTLuFYyzM9F9v5TrfP8nXHjF6mzuwRGyaRPhNtj2ptuO E0LkQgL2cIwzVKWZCP4v7Uv9CFhGkoE9smAywLsIhkfGnmHYNj3MqgytqIRl82lN isL8oqX44+yQdExpuzL2ltMp7QAPg+i7 -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org