$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: uTXcQ6EnWaiGc8QtF8SlZFGIbOTNvnTENwRsqbI8vPI= Subject key identifier: EF:84:CE:F0:2F:8E:80:47:4F:71:E0:05:3B:4E:A0:42:C9:D0:8C:7B Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0116 Signing time: Sat 25 May 2024 05:34:17 +0000 Manifest this update: Sat 25 May 2024 05:34:17 +0000 Manifest next update: Sat 01 Jun 2024 05:34:17 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: 8JRdBwys+wS5DsACqVqRqEhYKOVus9m5hmc5xgxk4Ug=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: eUbBDdkLdeYenUKLmnUljE7SJrGekXVsi4VKV+9PjNg=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: cjNUYQjWGv/e65WJQWAvWr4YkFxgRoVsK4Q0fFl+Aec=) 4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 8POm2P67+br1AW6EfcB6Tl6WMfM8KsW8mz0RMDZzK4w=) 5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: XH5unmWwWCdLbJdTx9XdtxFjo8wHLicd3InDS3kED1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 25 05:34:17 2024 GMT Not After : Jun 1 05:34:17 2024 GMT Subject: CN=66517859-8d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:c9:0a:ba:3a:81:ab:d9:2b:bf:9c:6c:08: e7:f6:09:27:f4:c9:63:99:7e:a3:34:c5:53:8c:0c: e8:ff:07:cb:fd:e2:5c:c9:8b:be:f2:ec:cf:c1:62: a7:8e:58:f9:72:90:8a:1c:95:31:47:a4:f7:78:39: 9e:43:ed:28:af:0c:4e:0c:55:08:a3:87:ce:20:5a: cd:67:42:8e:9b:43:bd:7d:02:d8:70:0e:d4:db:83: 69:e8:ff:75:6c:79:e8:e6:de:15:39:80:80:53:e8: 6d:bc:a0:98:08:9c:70:86:22:0f:29:b4:34:dc:48: 3b:52:58:b9:2a:e6:e0:83:aa:0f:81:ab:1d:d9:26: 46:ce:9e:96:8d:f6:3d:d4:49:21:3d:2e:b9:42:f5: 29:dd:20:f3:6d:0e:21:25:d5:2e:26:d0:b8:b1:3f: cf:9a:98:a5:25:cd:f8:e2:94:3b:b3:9e:62:a3:35: 99:8c:ed:c5:12:d9:49:e1:25:c8:b2:8b:e9:c4:b3: b6:7f:79:92:a1:32:01:89:6a:19:45:fe:d4:c2:4a: 30:56:96:50:56:8e:6c:0c:c8:7d:17:e5:dd:4d:a9: 0f:f5:cd:d0:a3:a5:38:49:59:d1:4d:17:72:8f:46: e1:1c:0c:79:9b:08:a2:46:7a:12:ea:04:97:e9:34: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:84:CE:F0:2F:8E:80:47:4F:71:E0:05:3B:4E:A0:42:C9:D0:8C:7B X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4c:d3:f4:4c:26:14:98:ce:c9:08:cc:46:08:9c:53:b4:2f: 69:3a:f2:ef:c3:a5:19:97:14:52:ab:5e:f3:ad:7e:f2:68:82: 6c:2b:11:07:19:5d:8b:3e:f9:2e:fa:36:28:28:0b:ac:97:b0: 27:fe:13:f3:14:b7:41:0f:43:c7:59:7e:c1:30:2e:ef:c8:db: a1:91:b2:70:83:56:e3:fa:1e:65:00:9e:80:6d:e0:68:0e:9d: b9:30:29:44:09:57:ae:3f:a4:8e:75:57:32:69:26:b0:b4:d8: e1:c7:2d:5a:13:23:65:5f:34:83:4c:cb:7b:23:7f:61:b5:5f: 5f:3e:9b:a8:d1:75:f6:05:33:54:da:38:af:f7:05:e9:7b:ab: e8:87:32:61:8a:dc:25:9c:a5:6c:b1:4b:bb:cc:39:89:10:88: 0b:41:9a:3c:c9:9d:f5:83:88:78:2d:2a:f7:84:44:02:5e:e6: 8b:8c:ed:52:d9:e0:44:d3:46:82:86:9a:ba:07:30:d5:f3:f1: ed:7a:c1:d7:b4:94:0f:c1:13:da:9f:62:6a:58:f3:64:d0:89: 96:5e:b7:3f:8f:4c:0e:82:13:4b:94:48:c0:3c:23:8d:82:0d: ac:54:9e:b9:74:02:85:24:cd:4d:a0:55:4b:11:b5:f0:a6:1c: bf:8f:c1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjQwNTI1MDUzNDE3WhcNMjQwNjAxMDUzNDE3WjAYMRYwFAYD VQQDEw02NjUxNzg1OS04ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mTJCro6gavZK7+cbAjn9gkn9MljmX6jNMVTjAzo/wfL/eJcyYu+8uzPwWKn jlj5cpCKHJUxR6T3eDmeQ+0orwxODFUIo4fOIFrNZ0KOm0O9fQLYcA7U24Np6P91 bHno5t4VOYCAU+htvKCYCJxwhiIPKbQ03Eg7Uli5Kubgg6oPgasd2SZGzp6WjfY9 1EkhPS65QvUp3SDzbQ4hJdUuJtC4sT/PmpilJc344pQ7s55iozWZjO3FEtlJ4SXI sovpxLO2f3mSoTIBiWoZRf7UwkowVpZQVo5sDMh9F+XdTakP9c3Qo6U4SVnRTRdy j0bhHAx5mwiiRnoS6gSX6TQ3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+EzvAv joBHT3HgBTtOoELJ0Ix7MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTNP0TCYUmM7JCMxGCJxTtC9pOvLvw6UZlxRSq17zrX7yaIJsKxEH GV2LPvku+jYoKAusl7An/hPzFLdBD0PHWX7BMC7vyNuhkbJwg1bj+h5lAJ6AbeBo Dp25MClECVeuP6SOdVcyaSawtNjhxy1aEyNlXzSDTMt7I39htV9fPpuo0XX2BTNU 2jiv9wXpe6vohzJhitwlnKVssUu7zDmJEIgLQZo8yZ31g4h4LSr3hEQCXuaLjO1S 2eBE00aChpq6BzDV8/HtesHXtJQPwRPan2JqWPNk0ImWXrc/j0wOghNLlEjAPCON gg2sVJ65dAKFJM1NoFVLEbXwphy/j8Hu -----END CERTIFICATE-----Generated at Sat May 25 06:26:52 2024 by rpki-client on console-fra.rpki-client.org