$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: YcJ83hH+2l2qMd47v8iFYRw+74M+G0ePkpcwE9wfkgU= Subject key identifier: 2C:64:3D:4A:99:F7:F4:B1:B1:83:C0:2B:47:F6:38:3C:ED:0E:16:06 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0557 Signing time: Sat 18 May 2024 23:15:28 +0000 Manifest this update: Sat 18 May 2024 23:15:28 +0000 Manifest next update: Sat 25 May 2024 23:15:28 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: wWrwm6Sbazrnl1HwZGIOKS09cOGMDsZoj1CxR7kV88Q=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: oVudccPOaDYuUIVgempDTFWRQaGpPoQZX7ZN4yh9LeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: May 18 23:15:28 2024 GMT Not After : May 25 23:15:28 2024 GMT Subject: CN=66493690-68f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f7:8e:c7:9d:f9:7a:cf:5f:89:7d:3d:ea:5e: 0c:2a:20:9f:a6:68:66:b0:f3:57:04:ef:cc:fc:0e: 7c:27:d4:d8:67:8e:e8:1a:8c:06:02:79:f4:35:ea: 77:db:32:75:57:f0:17:05:18:ec:33:1e:d4:d9:15: 1d:b6:1f:56:d2:71:d6:a0:93:e3:01:7d:a5:a1:ce: bf:31:2a:c9:cf:5e:c1:94:62:f2:9f:df:ab:da:95: 64:73:68:aa:d2:76:8d:61:73:a0:dc:7b:15:f6:60: 95:95:ba:f8:18:b2:87:9d:07:c2:c4:89:0e:74:da: 8f:83:f1:ad:10:d5:b4:31:35:98:5f:4d:c1:a2:59: 8c:79:54:e7:74:cf:67:d6:7d:b3:13:b0:d6:e1:fe: bd:ea:33:07:25:e2:89:a3:06:e7:f7:a1:d5:2e:0b: 73:36:4b:d8:d9:d1:aa:10:06:a5:82:b2:2e:03:f1: e8:a2:72:10:3a:c9:53:86:82:6b:64:50:df:07:36: 49:cf:31:1d:28:65:67:d1:99:ed:29:e3:6f:05:10: 00:4b:89:48:34:7e:ec:be:59:82:db:be:52:1b:61: 87:39:a9:8f:d3:ce:ae:f1:41:e4:4f:2e:93:fa:4c: 9a:1e:66:cd:83:1f:89:be:9d:4c:ab:61:c8:4d:58: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:64:3D:4A:99:F7:F4:B1:B1:83:C0:2B:47:F6:38:3C:ED:0E:16:06 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:36:8c:b4:43:4c:92:5c:e7:59:af:25:a4:94:ae:3c:ed:e6: e4:5b:7d:04:06:30:fe:34:cf:8e:b1:3a:a5:9e:1e:70:c1:f2: 07:ea:7e:ef:ad:71:ea:95:63:ca:da:13:9c:5c:bd:10:55:14: 73:73:db:37:c9:02:07:a2:c3:a8:86:73:e6:da:ec:78:91:53: a3:3d:b7:f5:bf:d5:22:c9:e6:e2:ee:0c:4b:01:fb:41:91:e2: 2c:d2:10:2c:d8:8a:46:3d:b9:20:f4:cc:fa:a0:fe:f2:7a:51: b3:42:ab:98:72:31:d7:5f:25:ae:5b:3c:df:75:3d:95:0a:3a: 57:91:13:ee:89:ea:41:87:1c:93:c4:c7:df:87:66:4b:b9:b7: 57:04:33:8a:18:6d:1a:02:c1:1c:b1:81:bb:80:9f:9b:20:fc: f4:25:66:28:19:55:d5:fc:79:8f:09:e0:9d:88:4f:cd:4a:7f: 4d:84:b7:df:91:91:84:aa:18:26:44:50:d1:20:0c:41:35:00: b2:70:2e:78:04:d9:69:3f:a0:96:31:84:6e:17:1c:0a:64:aa: 5c:8c:ff:33:9f:20:ff:9e:d9:ec:90:52:05:26:44:c5:47:cc: 17:9d:4f:0a:79:7d:3a:62:8e:18:f7:6a:c6:52:b8:c2:7f:c5: 62:a7:00:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjQwNTE4MjMxNTI4WhcNMjQwNTI1MjMxNTI4WjAYMRYwFAYD VQQDEw02NjQ5MzY5MC02OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1veOx535es9fiX096l4MKiCfpmhmsPNXBO/M/A58J9TYZ47oGowGAnn0Nep3 2zJ1V/AXBRjsMx7U2RUdth9W0nHWoJPjAX2loc6/MSrJz17BlGLyn9+r2pVkc2iq 0naNYXOg3HsV9mCVlbr4GLKHnQfCxIkOdNqPg/GtENW0MTWYX03BolmMeVTndM9n 1n2zE7DW4f696jMHJeKJowbn96HVLgtzNkvY2dGqEAalgrIuA/HoonIQOslThoJr ZFDfBzZJzzEdKGVn0ZntKeNvBRAAS4lINH7svlmC275SG2GHOamP086u8UHkTy6T +kyaHmbNgx+Jvp1Mq2HITVh+wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxkPUqZ 9/SxsYPAK0f2ODztDhYGMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPNoy0Q0ySXOdZryWklK487ebkW30EBjD+NM+OsTqlnh5wwfIH6n7v rXHqlWPK2hOcXL0QVRRzc9s3yQIHosOohnPm2ux4kVOjPbf1v9Uiyebi7gxLAftB keIs0hAs2IpGPbkg9Mz6oP7yelGzQquYcjHXXyWuWzzfdT2VCjpXkRPuiepBhxyT xMffh2ZLubdXBDOKGG0aAsEcsYG7gJ+bIPz0JWYoGVXV/HmPCeCdiE/NSn9NhLff kZGEqhgmRFDRIAxBNQCycC54BNlpP6CWMYRuFxwKZKpcjP8znyD/ntnskFIFJkTF R8wXnU8KeX06Yo4Y92rGUrjCf8VipwDR -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org