$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: fRDbOJ7cwrHqYuhVM4xV1yqonL2WOjVm0YcNOYFCMY0= Subject key identifier: 9E:A7:DF:2F:F3:41:08:1E:A8:51:2D:E4:B2:2C:66:04:C8:3C:41:EA Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 45 Signing time: Fri 31 May 2024 08:30:53 +0000 Manifest this update: Fri 31 May 2024 08:30:52 +0000 Manifest next update: Fri 07 Jun 2024 08:30:52 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: gUd6KtahsT61S2+CO8JHElmrfLy5AOHMmbxvNzbO7l0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: May 31 08:30:52 2024 GMT Not After : Jun 7 08:30:52 2024 GMT Subject: CN=66598abd-8834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:bb:9d:20:38:88:ea:36:e2:df:54:2e:9d: 7c:d9:9c:bc:bd:32:00:f8:06:fc:56:62:10:98:b5: fe:69:65:c3:79:44:b0:2a:95:94:81:63:08:0d:92: be:5e:e0:22:9b:20:b0:a0:4e:f4:f1:33:05:60:a5: bb:08:26:11:00:a9:e4:8a:f2:7a:09:8d:59:49:4e: b0:9c:23:25:10:2a:fe:f8:9d:dd:74:30:81:83:79: 6c:d3:f3:b7:55:79:2c:19:80:78:9e:ff:3d:8f:27: 70:b5:67:6b:c6:da:fd:d3:9d:52:9b:9f:4e:1e:64: 97:22:48:6f:d9:40:a9:ed:e6:a2:f2:a2:9a:ff:f3: 2f:76:41:bd:17:41:e3:0f:fc:a1:22:66:9a:38:17: e6:e8:fc:78:80:ff:04:f1:f6:eb:b7:c5:8c:ed:16: e5:4b:04:ee:18:c1:20:ff:a3:2b:1f:ad:19:19:b1: f5:ff:0e:6e:db:a2:c6:a8:5c:32:c6:74:ad:bd:a8: 45:5d:23:9a:4b:b6:9a:e5:19:1a:17:f9:d1:bf:46: f5:f2:57:07:ef:40:c9:86:7e:0b:03:0a:27:14:66: 10:d3:67:1a:ac:c0:42:3a:be:67:e4:4d:69:4f:4f: 68:ba:38:ea:48:cc:2f:90:45:4b:7d:ec:da:fd:b7: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:DF:2F:F3:41:08:1E:A8:51:2D:E4:B2:2C:66:04:C8:3C:41:EA X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c4:dc:ab:b5:a9:f7:6a:b4:80:03:3f:d2:8e:9e:7c:ff:7b: 37:cd:5a:7b:be:74:40:a6:7f:55:3a:ec:23:0b:a0:ef:8d:4e: 50:1e:4c:95:5c:28:e4:99:03:75:af:54:77:84:76:a4:d3:ed: 97:50:3f:20:54:13:e4:73:3f:7e:e6:76:0a:fc:a8:96:79:c4: d4:72:bb:c6:0c:b6:d3:87:22:a5:12:af:f9:ba:d5:41:f5:7c: c3:9f:1f:c1:73:61:45:61:d5:84:47:d9:dd:92:8a:96:c6:ce: da:29:82:94:04:a7:33:db:24:86:77:20:0e:30:03:f4:e4:81: 32:80:58:9b:89:d4:61:3a:ff:b1:7b:e1:df:2d:92:52:3f:a1: 43:2d:7e:bc:aa:81:70:cd:5d:4a:03:84:1d:cf:5b:2d:7f:25: 1d:cd:a3:28:4a:5f:26:ca:34:df:88:30:45:0f:bd:32:2b:cf: 8f:b3:aa:95:f8:53:cb:5a:22:67:9e:c1:ca:79:a9:75:6f:39: 3d:f0:45:ba:b4:2a:b8:a8:ef:48:f9:1a:9e:81:6c:47:8b:eb: fe:f1:8f:4c:cb:d0:67:de:8f:32:5e:15:2b:98:9c:e6:c6:1f: 1c:2c:39:f1:1a:97:60:02:5e:c7:15:98:8a:02:63:b4:48:f3: 18:3a:2c:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjM4NzExMC8GA1UEBRMoMjgxODhDMTZFRUM5MDc0MjcxNzI3OEMyODlDRjgyRjUw NEYyNUFBOTAeFw0yNDA1MzEwODMwNTJaFw0yNDA2MDcwODMwNTJaMBgxFjAUBgNV BAMTDTY2NTk4YWJkLTg4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyVrudIDiI6jbi31QunXzZnLy9MgD4BvxWYhCYtf5pZcN5RLAqlZSBYwgNkr5e 4CKbILCgTvTxMwVgpbsIJhEAqeSK8noJjVlJTrCcIyUQKv74nd10MIGDeWzT87dV eSwZgHie/z2PJ3C1Z2vG2v3TnVKbn04eZJciSG/ZQKnt5qLyopr/8y92Qb0XQeMP /KEiZpo4F+bo/HiA/wTx9uu3xYztFuVLBO4YwSD/oysfrRkZsfX/Dm7bosaoXDLG dK29qEVdI5pLtprlGRoX+dG/RvXyVwfvQMmGfgsDCicUZhDTZxqswEI6vmfkTWlP T2i6OOpIzC+QRUt97Nr9tyxJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnqffL/NB CB6oUS3ksixmBMg8QeowHwYDVR0jBBgwFoAUKBiMFu7JB0JxcnjCic+C9QTyWqkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMzg3L0ZFNEQ3OEUyQjVD MTExRUU5NUI1ODM0MUM0RjlBRTAyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS0JpTUZ1N0pCMEp4Y25qQ2ljLUM5UVR5V3FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Mzg3L0ZFNEQ3OEUyQjVDMTExRUU5NUI1ODM0MUM0RjlBRTAyL0tCaU1GdTdKQjBK eGNuakNpYy1DOVFUeVdxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrE3Ku1qfdqtIADP9KOnnz/ezfNWnu+dECmf1U67CMLoO+NTlAeTJVc KOSZA3WvVHeEdqTT7ZdQPyBUE+RzP37mdgr8qJZ5xNRyu8YMttOHIqUSr/m61UH1 fMOfH8FzYUVh1YRH2d2SipbGztopgpQEpzPbJIZ3IA4wA/TkgTKAWJuJ1GE6/7F7 4d8tklI/oUMtfryqgXDNXUoDhB3PWy1/JR3NoyhKXybKNN+IMEUPvTIrz4+zqpX4 U8taImeewcp5qXVvOT3wRbq0Krio70j5Gp6BbEeL6/7xj0zL0GfejzJeFSuYnObG HxwsOfEal2ACXscVmIoCY7RI8xg6LBI= -----END CERTIFICATE-----Generated at Fri May 31 10:42:20 2024 by rpki-client on console-fra.rpki-client.org