$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: 0D6AKvcPumPsFj1/UIwzuygmO5UHbCv0/QH+40YIJKY= Subject key identifier: AA:4C:9D:F5:8C:AF:F7:38:FF:01:9F:F6:49:35:92:F8:18:0A:55:5B Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 0553 Signing time: Sun 19 May 2024 00:50:27 +0000 Manifest this update: Sun 19 May 2024 00:50:26 +0000 Manifest next update: Sun 26 May 2024 00:50:26 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: g+XHVZ6rCDc6Roe9YDVo/Z9EkJCiFgLZ7hkadFVjxBw=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: DD3W62iXqfM6WVvA6ioa/M9Aja29c1MxBPKpE9uTGH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: May 19 00:50:26 2024 GMT Not After : May 26 00:50:26 2024 GMT Subject: CN=66494cd3-a252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:c3:b3:69:ce:ce:88:dd:af:36:96:90:35: 1e:d7:1c:8f:30:db:8e:aa:04:60:d9:c9:47:06:a8: 5d:b6:0e:04:e9:55:19:94:5c:fa:ee:06:08:f5:b8: 3f:9e:7f:eb:61:22:0f:fa:49:2b:65:1b:b3:87:b6: 8b:6d:a6:c3:34:12:9f:b1:db:35:a2:7c:e5:35:f7: c8:02:d6:80:4e:e1:ff:b1:bc:7b:a0:a6:b7:1f:5c: c4:55:8b:f3:4d:16:42:68:fa:54:03:7f:54:9b:c9: 56:6e:f4:af:b6:cd:88:7b:ea:cb:dd:60:7d:f7:e0: 00:42:b4:e7:04:dd:43:e6:32:ed:dd:b9:07:26:25: dc:d8:d4:a0:9a:96:44:6c:59:32:c7:fe:5e:2f:12: ff:96:47:ef:b4:63:20:6c:f5:c6:29:3b:6c:1c:35: f7:2b:c1:25:f1:cb:d9:97:0b:9d:b2:9a:7a:83:5f: 54:c3:bf:3f:82:5c:22:e8:71:d5:f6:f5:c2:c3:9a: ef:d7:17:3f:08:0e:95:44:de:95:27:a3:28:39:3a: 66:b9:34:e4:15:45:8e:e7:a4:62:00:55:6d:b7:f6: de:fe:ea:0a:95:cd:36:70:f8:0a:91:6a:36:79:59: b3:6b:e6:09:c1:2d:2a:5b:22:10:49:a4:43:66:51: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:9D:F5:8C:AF:F7:38:FF:01:9F:F6:49:35:92:F8:18:0A:55:5B X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:83:74:49:f6:05:10:c4:d6:60:c8:68:37:83:d6:b6:ce:c8: 32:5c:ef:01:01:e9:6f:40:ae:b5:15:95:3a:a2:93:6f:f5:5d: a7:bb:37:39:a2:be:66:32:9e:49:83:97:b7:f4:da:d8:69:6f: c8:0c:df:36:db:33:c4:2f:72:07:0b:07:b3:57:38:84:78:38: 1f:c5:13:d3:72:b9:e9:1f:73:72:65:73:b7:43:92:3a:88:aa: 8b:ca:d9:d4:e1:72:c9:6e:15:39:6f:54:95:66:9d:d7:57:65: 6f:95:fd:2f:3f:30:60:60:93:55:01:78:0d:71:a0:fe:97:a3: a7:48:ae:ee:7e:fe:39:8b:5d:cd:d3:82:68:f7:1a:1b:2b:33: 04:ca:97:5f:5f:e3:3b:13:77:c7:b9:fb:ab:39:49:57:04:e7: 26:18:26:7b:36:c0:06:86:f9:32:c6:36:f5:df:a1:12:bf:de: 0b:40:d0:1f:bd:fd:a3:bd:d6:2d:af:2a:1a:bb:f7:5c:67:a1: c5:ea:0a:52:b7:a5:fb:5a:01:97:81:55:0b:ff:18:00:f1:b1: 65:c2:0a:7e:b5:fe:d7:fd:32:13:23:6f:72:57:f1:76:55:3a: d2:81:79:29:11:52:7d:19:33:d6:a3:6a:5f:e6:a8:7e:cb:7e: 43:0b:77:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjQwNTE5MDA1MDI2WhcNMjQwNTI2MDA1MDI2WjAYMRYwFAYD VQQDEw02NjQ5NGNkMy1hMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OTDs2nOzojdrzaWkDUe1xyPMNuOqgRg2clHBqhdtg4E6VUZlFz67gYI9bg/ nn/rYSIP+kkrZRuzh7aLbabDNBKfsds1onzlNffIAtaATuH/sbx7oKa3H1zEVYvz TRZCaPpUA39Um8lWbvSvts2Ie+rL3WB99+AAQrTnBN1D5jLt3bkHJiXc2NSgmpZE bFkyx/5eLxL/lkfvtGMgbPXGKTtsHDX3K8El8cvZlwudspp6g19Uw78/glwi6HHV 9vXCw5rv1xc/CA6VRN6VJ6MoOTpmuTTkFUWO56RiAFVtt/be/uoKlc02cPgKkWo2 eVmza+YJwS0qWyIQSaRDZlGOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpMnfWM r/c4/wGf9kk1kvgYClVbMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcg3RJ9gUQxNZgyGg3g9a2zsgyXO8BAelvQK61FZU6opNv9V2nuzc5 or5mMp5Jg5e39NrYaW/IDN822zPEL3IHCwezVziEeDgfxRPTcrnpH3NyZXO3Q5I6 iKqLytnU4XLJbhU5b1SVZp3XV2Vvlf0vPzBgYJNVAXgNcaD+l6OnSK7ufv45i13N 04Jo9xobKzMEypdfX+M7E3fHufurOUlXBOcmGCZ7NsAGhvkyxjb136ESv94LQNAf vf2jvdYtryoau/dcZ6HF6gpSt6X7WgGXgVUL/xgA8bFlwgp+tf7X/TITI29yV/F2 VTrSgXkpEVJ9GTPWo2pf5qh+y35DC3d0 -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org