$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: QHMArnRqwf6t8omQOHBWxLZjd6bKo77nPTRwN+/k0yg= Subject key identifier: CF:8A:6A:1C:F7:48:B2:29:4E:B2:85:53:A4:01:59:58:76:31:48:68 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 37 Signing time: Sun 19 May 2024 08:18:27 +0000 Manifest this update: Sun 19 May 2024 08:18:27 +0000 Manifest next update: Sun 26 May 2024 08:18:27 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: 1eb8wvXJ2nSVNOmFrECdWBj8M+4J7mBrBdOr044iJwY=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: YI2srcnz/6DwUPS7c8IQ+7Hr1uygrottBvqwJQtIlR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: May 19 08:18:27 2024 GMT Not After : May 26 08:18:27 2024 GMT Subject: CN=6649b5d3-dc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:dd:79:ac:2b:43:f9:0a:92:6b:86:20:2b: e9:9c:59:67:14:13:3d:25:a7:9f:d0:c5:97:0d:e0: 64:bd:72:2f:4d:16:c8:6f:92:e3:d1:a2:fe:c8:ed: 72:b7:01:f4:23:a0:0d:f8:8b:ed:46:5b:2d:97:3d: ae:57:cc:18:66:5f:c2:fd:04:a9:23:20:42:60:09: 88:79:81:b2:5e:e4:f9:18:d3:a5:06:0c:46:f7:70: 93:65:1c:bf:11:fb:5b:84:c1:87:0d:f8:a7:de:c6: cb:1a:a8:35:ce:c8:97:08:35:ab:b3:b9:99:bd:be: a0:64:cc:3a:55:7f:ff:b6:10:0d:e1:56:df:af:56: 5d:03:b1:28:20:a6:54:7a:89:e6:94:08:4a:db:03: 29:fa:41:da:af:21:df:42:e1:f5:18:8c:ad:c5:29: b8:dc:c6:cb:b0:37:16:f5:3d:20:71:96:27:b9:1a: dc:b5:db:c0:1c:46:bf:83:b2:7c:a2:66:db:9b:f1: c4:b1:f6:c7:a0:de:e8:8c:74:79:3a:3c:0f:bf:d2: a4:e9:dc:54:b9:ad:10:47:05:9a:7e:f7:b8:b1:a7: 60:ce:62:43:27:6f:05:f8:86:c5:33:94:5d:82:26: 18:da:7d:6f:40:9b:5e:6a:de:4d:e4:a8:26:41:29: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:6A:1C:F7:48:B2:29:4E:B2:85:53:A4:01:59:58:76:31:48:68 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d9:65:51:1c:c1:91:93:a6:9b:0d:87:95:81:e9:62:8d:c7: 7a:b9:cc:34:51:4b:3c:05:1d:16:eb:4f:9e:40:ae:da:9d:fa: a1:99:06:dd:cd:b8:0f:81:c7:8c:52:c5:1c:a6:0c:83:9c:37: 11:52:cb:94:af:c7:eb:53:ca:56:46:92:09:a2:3e:1a:7a:c8: 12:e2:31:1d:e8:4a:11:6d:57:5c:f0:a7:59:50:c9:01:c1:4d: 59:ff:ad:4f:25:ce:21:1c:1e:07:90:6b:25:0b:6c:34:1e:8d: 95:56:29:5f:c9:ac:f8:15:d5:07:85:8e:64:19:62:01:f6:64: ce:8d:23:a0:9b:56:c1:1b:5e:2b:e9:ea:d9:97:88:40:49:78: aa:d2:2b:4f:e8:17:31:58:cf:c4:39:a1:11:4f:2b:47:e9:39: 48:c3:7a:f3:50:2c:23:bb:4c:8f:b4:62:91:f1:7d:61:50:28: 5f:20:ae:fe:71:ba:f5:ef:f0:41:0f:62:b9:57:a6:91:ec:0e: 9c:94:61:a7:59:3f:e9:49:90:4b:26:c5:80:04:b3:b2:8b:3e: 37:f4:1e:08:47:1d:04:57:a7:65:1b:e5:d0:6a:65:b3:e1:3e: 9b:c4:5a:f8:c0:b0:07:ea:e7:9d:2b:ad:1f:5f:d3:d2:91:94: d3:1d:d1:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE5RjExMC8GA1UEBRMoMkFDRTk0MEI1REMzMDMzN0QyRTU0MjE3MjIxOTFBQjky M0FBNzVDNzAeFw0yNDA1MTkwODE4MjdaFw0yNDA1MjYwODE4MjdaMBgxFjAUBgNV BAMTDTY2NDliNWQzLWRjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWHd15rCtD+QqSa4YgK+mcWWcUEz0lp5/QxZcN4GS9ci9NFshvkuPRov7I7XK3 AfQjoA34i+1GWy2XPa5XzBhmX8L9BKkjIEJgCYh5gbJe5PkY06UGDEb3cJNlHL8R +1uEwYcN+KfexssaqDXOyJcINauzuZm9vqBkzDpVf/+2EA3hVt+vVl0DsSggplR6 ieaUCErbAyn6QdqvId9C4fUYjK3FKbjcxsuwNxb1PSBxlie5Gty128AcRr+Dsnyi Ztub8cSx9seg3uiMdHk6PA+/0qTp3FS5rRBHBZp+97ixp2DOYkMnbwX4hsUzlF2C JhjafW9Am15q3k3kqCZBKdW5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz4pqHPdI silOsoVTpAFZWHYxSGgwHwYDVR0jBBgwFoAUKs6UC13DAzfS5UIXIhkauSOqdccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTlGLzgyQzY3RUE2QzU2 RDExRUVCMjc4NTM0QUM0RjlBRTAyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS3M2VUMxM0RBemZTNVVJWEloa2F1U09xZGNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTlGLzgyQzY3RUE2QzU2RDExRUVCMjc4NTM0QUM0RjlBRTAyL0tzNlVDMTNEQXpm UzVVSVhJaGthdVNPcWRjYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLZZVEcwZGTppsNh5WB6WKNx3q5zDRRSzwFHRbrT55Artqd+qGZBt3N uA+Bx4xSxRymDIOcNxFSy5Svx+tTylZGkgmiPhp6yBLiMR3oShFtV1zwp1lQyQHB TVn/rU8lziEcHgeQayULbDQejZVWKV/JrPgV1QeFjmQZYgH2ZM6NI6CbVsEbXivp 6tmXiEBJeKrSK0/oFzFYz8Q5oRFPK0fpOUjDevNQLCO7TI+0YpHxfWFQKF8grv5x uvXv8EEPYrlXppHsDpyUYadZP+lJkEsmxYAEs7KLPjf0HghHHQRXp2Ub5dBqZbPh PpvEWvjAsAfq550rrR9f09KRlNMd0cs= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org