$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json) Hash identifier: mEzWc64iScTYlMnloQGFnV254byf0AwILIfknC4CM40= Subject key identifier: B3:43:34:C8:D9:45:90:93:5E:5B:41:C8:71:E1:45:AA:81:88:AF:6D Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft Manifest number: 053F Signing time: Wed 29 May 2024 01:16:55 +0000 Manifest this update: Wed 29 May 2024 01:16:55 +0000 Manifest next update: Wed 05 Jun 2024 01:16:55 +0000 Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: TtOHyJ7ZCwqQOgtK9U4iK1FjCgmDjGRqMa7kd++cvxg=) 2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: XwrfJzBigjNV7r095BgmzZrchD0Deh4NsLwbBugq+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Validity Not Before: May 29 01:16:55 2024 GMT Not After : Jun 5 01:16:55 2024 GMT Subject: CN=66568207-ce6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:91:14:31:08:81:79:0d:bd:95:dc:a2:ac: 66:1a:11:93:89:b1:83:96:96:58:2b:bb:33:e2:ef: 9b:f2:06:52:86:7f:36:4e:a5:8c:30:55:ed:3f:95: 9d:d3:0e:e9:34:8e:94:51:3c:91:97:a7:c1:c9:21: 90:3e:9c:fc:e4:3e:92:88:9d:2d:51:6a:20:c8:a4: 33:be:18:b2:2b:83:a3:f8:a8:35:3f:1d:6f:61:30: 05:e0:c1:24:c7:2d:80:49:e9:4a:de:ea:2c:e7:47: 14:9a:95:a2:5b:80:a7:d2:c9:4d:ca:0b:b8:ce:be: 77:69:d0:82:e3:76:eb:52:50:9a:ca:52:23:31:2c: 98:b1:f1:e0:af:39:07:e9:31:89:28:d7:21:30:8a: 88:80:32:5f:cc:61:23:01:c4:8b:05:d0:a3:b9:b6: 3e:82:76:9a:79:f6:fb:f3:a0:b3:77:62:63:05:1c: d8:d0:88:ad:ba:be:e0:e6:11:ee:d8:ab:9e:a7:b7: 28:e5:e6:cd:3b:32:91:77:16:69:94:e6:bd:26:78: e3:ba:fe:ae:ee:f7:e8:b6:06:24:3a:8a:d6:bd:51: 0e:cf:c1:16:4f:ae:e4:5b:c8:b6:31:2e:5e:b5:e1: 39:da:ff:87:4e:72:c7:11:52:27:1d:5d:2f:67:ba: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:34:C8:D9:45:90:93:5E:5B:41:C8:71:E1:45:AA:81:88:AF:6D X509v3 Authority Key Identifier: keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:db:e0:8b:05:51:ae:5d:60:75:2c:d0:3f:70:c0:d6:3c:b4: aa:bb:a8:3b:14:81:51:50:08:c1:6c:fd:06:47:46:17:0f:9c: 9d:95:0f:bc:11:79:24:6f:ce:1a:52:0e:3b:ff:60:dd:dd:fb: ac:d0:72:de:e0:0b:7c:cc:b6:54:8d:cb:46:f2:ae:84:d2:f0: d0:46:53:ba:f9:ee:e5:7a:25:d9:7f:e0:d9:89:ee:0b:66:ea: c2:ac:31:25:e7:a9:ed:06:70:c3:a8:95:40:8c:f3:2c:ad:86: 52:b9:ea:49:b0:f2:23:7b:e6:ca:45:a2:97:7d:5e:06:e3:fb: cd:9e:bc:c2:1d:6a:02:73:cd:93:56:f7:9f:94:8a:61:de:f7: 1e:bc:08:4f:3a:c7:f1:c3:81:b5:c0:8f:cb:76:1f:bd:a6:b4: c0:01:a0:c2:8e:d3:91:8e:e6:e9:36:04:ed:80:ea:7b:f9:7e: d3:5b:3d:17:aa:39:b4:a4:9c:cc:c8:60:c3:af:5d:da:d7:fe: ea:dd:8b:ca:17:c1:ea:fa:5b:44:a5:6e:9a:4d:7e:12:12:3d: 95:59:73:a8:6c:c5:36:79:88:58:57:46:4f:c8:bf:83:06:d6: 4b:ae:ab:73:78:b9:9a:da:6e:ae:5d:8f:d9:29:d6:48:3a:a9: dc:3d:2d:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky MTY2ODBDQ0MwHhcNMjQwNTI5MDExNjU1WhcNMjQwNjA1MDExNjU1WjAYMRYwFAYD VQQDEw02NjU2ODIwNy1jZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY2RFDEIgXkNvZXcoqxmGhGTibGDlpZYK7sz4u+b8gZShn82TqWMMFXtP5Wd 0w7pNI6UUTyRl6fBySGQPpz85D6SiJ0tUWogyKQzvhiyK4Oj+Kg1Px1vYTAF4MEk xy2ASelK3uos50cUmpWiW4Cn0slNygu4zr53adCC43brUlCaylIjMSyYsfHgrzkH 6TGJKNchMIqIgDJfzGEjAcSLBdCjubY+gnaaefb786Czd2JjBRzY0Iitur7g5hHu 2Kuep7co5ebNOzKRdxZplOa9Jnjjuv6u7vfotgYkOorWvVEOz8EWT67kW8i2MS5e teE52v+HTnLHEVInHV0vZ7oB+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNDNMjZ RZCTXltByHHhRaqBiK9tMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ2+CLBVGuXWB1LNA/cMDWPLSqu6g7FIFRUAjBbP0GR0YXD5ydlQ+8 EXkkb84aUg47/2Dd3fus0HLe4At8zLZUjctG8q6E0vDQRlO6+e7leiXZf+DZie4L ZurCrDEl56ntBnDDqJVAjPMsrYZSuepJsPIje+bKRaKXfV4G4/vNnrzCHWoCc82T VveflIph3vcevAhPOsfxw4G1wI/Ldh+9prTAAaDCjtORjubpNgTtgOp7+X7TWz0X qjm0pJzMyGDDr13a1/7q3YvKF8Hq+ltEpW6aTX4SEj2VWXOobMU2eYhYV0ZPyL+D BtZLrqtzeLma2m6uXY/ZKdZIOqncPS32 -----END CERTIFICATE-----Generated at Wed May 29 02:49:53 2024 by rpki-client on console-fra.rpki-client.org