$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: x5zEaNiaYKBHx9qEkSji33kA+3DM0KPDfS88zdBkJhA= Subject key identifier: C6:BA:A4:5F:79:79:7A:59:33:B2:C7:29:DD:9D:8E:9A:08:81:66:68 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 73 Signing time: Fri 31 May 2024 08:19:23 +0000 Manifest this update: Fri 31 May 2024 08:19:22 +0000 Manifest next update: Fri 07 Jun 2024 08:19:22 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: iHFLEdAqO+aKPy/d7sXtK3KxEBkoFgeWfGjms2wNx6U=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: jLuoO4jztXMtmwVyxaQwn3jD87jKwwbWVckT3n58bSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: May 31 08:19:22 2024 GMT Not After : Jun 7 08:19:22 2024 GMT Subject: CN=6659880b-79ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:30:92:97:f7:7e:fc:e6:29:41:d4:69:de: 46:f7:2c:35:53:5c:64:2c:b0:74:72:bc:88:2b:6d: 62:a2:0c:0d:66:c0:b3:cf:de:a5:e4:a5:b7:42:9b: ad:ba:97:f1:e8:65:1d:6a:da:30:a3:26:7e:b5:52: 31:0d:a4:70:72:f1:a0:4b:7c:cc:74:b5:4e:77:18: 6e:ff:6a:98:b3:2e:91:76:a4:d8:48:4d:69:8d:d1: 02:e4:8f:47:af:aa:bc:27:15:21:2a:04:75:16:f9: 02:08:59:04:dc:8d:5d:20:ac:57:58:b0:a5:fa:2e: 98:4d:22:ed:32:1f:7f:9c:fc:f9:21:8e:df:ee:b9: 29:18:d7:2a:7e:13:f1:5f:70:c8:87:18:7f:42:19: 4d:d7:5e:48:98:65:8f:70:b2:5f:83:a3:0d:35:97: 70:76:39:6f:9c:ea:eb:5a:1e:2c:9a:26:c1:54:24: 7b:eb:0d:71:de:9e:71:bc:96:16:13:6d:bd:5b:a4: 0b:19:2e:ed:29:b5:b9:b7:d0:63:4f:4e:c4:0e:f0: dc:84:a8:1a:98:ee:e6:8b:d7:98:06:93:21:12:61: db:fb:1a:00:5a:23:f3:5c:76:9a:a6:bf:98:10:bd: c1:92:9b:81:7f:5d:b4:ce:39:73:c4:3f:fb:fa:f1: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:A4:5F:79:79:7A:59:33:B2:C7:29:DD:9D:8E:9A:08:81:66:68 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d4:3d:7d:c6:bc:3e:0b:0c:db:dd:88:21:6c:a2:d3:3b:a7: 26:9f:17:9a:14:b1:5f:d3:23:c4:02:54:b4:f9:79:63:35:15: b8:4f:c0:32:29:5d:9d:8e:65:3a:41:7b:d2:af:2f:22:da:40: a6:a7:9a:f5:f4:a1:1e:16:f3:7b:16:33:dd:2b:29:25:d8:5b: 4b:4e:de:b2:e3:68:fa:f1:12:91:1e:62:3a:f2:8c:28:ff:0e: db:e6:d4:92:f4:ec:2a:97:24:be:66:f1:37:ff:be:f5:8f:92: 4c:d5:de:11:ca:8e:5b:6b:2f:5f:9d:84:bf:0e:36:e9:ba:00: 6a:15:f9:bb:07:37:7b:8c:88:e0:8c:46:f1:27:f8:00:e1:61: 2b:9f:4d:e8:7c:a6:30:b8:85:23:ca:3c:f3:8b:9c:54:d4:94: 4d:34:1b:ff:8f:d1:4f:80:dd:f5:96:b0:b0:2e:93:d8:f0:f5: 70:12:23:a5:e3:e0:e7:86:f9:99:a7:9d:9c:6a:92:fa:fd:10: 2e:bd:f9:1d:56:e1:6e:98:c0:e4:62:1c:9a:24:c3:7a:71:15: a8:4c:55:ec:9a:fb:17:87:99:ba:67:9d:9e:18:c2:db:1a:12: 4b:a1:46:6a:18:35:0a:ce:e4:0c:54:89:86:9f:f9:d0:0a:44: 04:bb:2f:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDhDOTExMC8GA1UEBRMoOTBGNjgwRkNBN0M5MzBGRDFGREM1MzM2NzUzODVBRTkw RkI0MTY3MjAeFw0yNDA1MzEwODE5MjJaFw0yNDA2MDcwODE5MjJaMBgxFjAUBgNV BAMTDTY2NTk4ODBiLTc5YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2JjCSl/d+/OYpQdRp3kb3LDVTXGQssHRyvIgrbWKiDA1mwLPP3qXkpbdCm626 l/HoZR1q2jCjJn61UjENpHBy8aBLfMx0tU53GG7/apizLpF2pNhITWmN0QLkj0ev qrwnFSEqBHUW+QIIWQTcjV0grFdYsKX6LphNIu0yH3+c/Pkhjt/uuSkY1yp+E/Ff cMiHGH9CGU3XXkiYZY9wsl+Dow01l3B2OW+c6utaHiyaJsFUJHvrDXHennG8lhYT bb1bpAsZLu0ptbm30GNPTsQO8NyEqBqY7uaL15gGkyESYdv7GgBaI/Ncdpqmv5gQ vcGSm4F/XbTOOXPEP/v68bzvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxrqkX3l5 elkzsscp3Z2OmgiBZmgwHwYDVR0jBBgwFoAUkPaA/KfJMP0f3FM2dTha6Q+0FnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OEM5L0EwNTVCNUIyNkVF RDExRUVCQzFBQUI1M0M0RjlBRTAyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1BhQV9LZkpNUDBmM0ZNMmRUaGE2US0wRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OEM5L0EwNTVCNUIyNkVFRDExRUVCQzFBQUI1M0M0RjlBRTAyL2tQYUFfS2ZKTVAw ZjNGTTJkVGhhNlEtMEZuSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvUPX3GvD4LDNvdiCFsotM7pyafF5oUsV/TI8QCVLT5eWM1FbhPwDIp XZ2OZTpBe9KvLyLaQKanmvX0oR4W83sWM90rKSXYW0tO3rLjaPrxEpEeYjryjCj/ Dtvm1JL07CqXJL5m8Tf/vvWPkkzV3hHKjltrL1+dhL8ONum6AGoV+bsHN3uMiOCM RvEn+ADhYSufTeh8pjC4hSPKPPOLnFTUlE00G/+P0U+A3fWWsLAuk9jw9XASI6Xj 4OeG+ZmnnZxqkvr9EC69+R1W4W6YwORiHJokw3pxFahMVeya+xeHmbpnnZ4Ywtsa EkuhRmoYNQrO5AxUiYaf+dAKRAS7L+s= -----END CERTIFICATE-----Generated at Fri May 31 10:42:19 2024 by rpki-client on console-fra.rpki-client.org