$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: N5syesKHWsTp+6TgscWUilfvP84MFnahLPaCdvWy1nc= Subject key identifier: 72:55:03:4A:A2:32:D8:3A:73:23:A3:41:D3:15:4F:36:69:A4:A6:63 Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 50 Signing time: Fri 31 May 2024 08:51:50 +0000 Manifest this update: Fri 31 May 2024 08:51:49 +0000 Manifest next update: Fri 07 Jun 2024 08:51:49 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: 67+9mM+b4rCWEjE42xCnHSYopcoQyB6OMMkvOUpAOVU=) 2: 2F7E2A8EB52B11EEA348EB68C4F9AE02.roa (hash: ihaSoYaPFhS3Sy5AHLHtoSRx16uB3PQ9B5P2ZbTCdy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: May 31 08:51:49 2024 GMT Not After : Jun 7 08:51:49 2024 GMT Subject: CN=66598fa5-e0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:d8:bf:60:13:be:98:5d:f9:93:04:35:0f: ee:8e:25:ed:86:e4:33:38:63:0b:58:d4:98:f7:a2: 20:b1:58:f6:aa:d6:ed:79:f8:d4:5e:64:dd:f7:f9: 54:9c:7d:5a:0b:11:40:d0:6d:e2:90:c4:a7:37:dd: 18:bc:26:4b:bb:83:de:39:47:51:af:ee:6e:6a:8a: 12:47:c4:e4:82:7e:f0:d1:1a:e3:ad:29:cb:b4:a0: 73:3f:97:0b:b5:90:61:49:a3:61:c1:e7:ef:51:8c: 46:b3:bc:7a:5e:03:6b:07:0f:00:14:c3:0f:b5:d0: 34:37:f8:96:63:89:84:f8:8a:1f:46:bf:9b:29:c8: 85:5f:0d:d8:5d:4c:2c:b5:29:c1:85:ed:fc:62:43: d7:d6:65:ad:37:07:cf:26:c2:07:d7:a0:51:00:89: a4:69:82:0e:96:96:a2:cf:c7:02:39:33:79:d4:60: a9:42:56:be:30:f3:80:ca:65:15:ed:e3:9f:c9:4d: a7:5a:5b:11:af:7f:9e:8f:16:2a:56:c2:d0:99:1e: c1:f3:53:d3:1d:ae:79:2b:8d:c8:40:9e:64:3b:79: e3:b1:d3:ed:34:c1:6f:f1:6f:42:77:b9:ce:a6:af: e2:ab:4c:5c:61:43:55:24:12:23:15:34:10:27:08: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:03:4A:A2:32:D8:3A:73:23:A3:41:D3:15:4F:36:69:A4:A6:63 X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d4:02:3e:1d:c9:d3:34:b7:25:10:4d:56:5f:2f:90:ce:41: 25:5c:94:11:bf:5e:1a:fe:62:61:46:74:77:1c:aa:99:c9:c4: 17:75:71:d5:5f:25:86:79:93:39:3e:75:79:db:db:65:ae:b1: c0:92:69:16:5e:99:b6:26:aa:ca:65:33:eb:ca:94:c0:54:6d: de:8e:51:8f:61:3e:df:17:1b:ce:3e:92:56:5e:ee:bc:78:5a: 83:ac:c1:5b:ae:d9:12:5a:74:b1:2e:fb:e5:c7:10:54:93:e2: 73:b4:12:68:b0:d0:0e:6b:77:e2:15:0a:e3:1e:32:25:01:bc: d6:9e:0a:81:b1:2d:0c:ff:34:01:1b:c5:30:f0:de:0a:e6:12: a3:3b:c4:16:4f:a8:fa:85:75:d1:c2:39:11:b9:05:6c:9d:e5: e5:28:b9:53:2c:84:4e:26:80:14:9d:ce:1e:19:dd:f3:c7:e8: 84:fb:75:de:b2:17:38:ff:95:0e:ae:90:4f:a4:58:f0:63:a3: c9:19:a0:bc:b9:24:62:12:fc:d7:75:2d:55:ea:42:e2:5d:49: 83:b4:c7:30:68:e4:10:f1:f5:3b:11:d8:36:29:9e:67:a0:c7: 0f:6d:c6:61:23:32:b7:9e:30:05:2c:0b:f5:05:3b:e0:a4:44: 18:52:16:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzAwMjExMC8GA1UEBRMoOTI0QTIwMTc1NjRBREFGQjIyMzZBMjBGQkY3M0FEQTFC OTZCRkYzMzAeFw0yNDA1MzEwODUxNDlaFw0yNDA2MDcwODUxNDlaMBgxFjAUBgNV BAMTDTY2NTk4ZmE1LWUwYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFo9i/YBO+mF35kwQ1D+6OJe2G5DM4YwtY1Jj3oiCxWPaq1u15+NReZN33+VSc fVoLEUDQbeKQxKc33Ri8Jku7g945R1Gv7m5qihJHxOSCfvDRGuOtKcu0oHM/lwu1 kGFJo2HB5+9RjEazvHpeA2sHDwAUww+10DQ3+JZjiYT4ih9Gv5spyIVfDdhdTCy1 KcGF7fxiQ9fWZa03B88mwgfXoFEAiaRpgg6WlqLPxwI5M3nUYKlCVr4w84DKZRXt 45/JTadaWxGvf56PFipWwtCZHsHzU9MdrnkrjchAnmQ7eeOx0+00wW/xb0J3uc6m r+KrTFxhQ1UkEiMVNBAnCF1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUclUDSqIy 2DpzI6NB0xVPNmmkpmMwHwYDVR0jBBgwFoAUkkogF1ZK2vsiNqIPv3Otoblr/zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDMDAyL0MwMUQwQzBDQTky NTExRUVBQzRCREI1N0M0RjlBRTAyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tvZ0YxWksydnNpTnFJUHYzT3RvYmxyX3pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD MDAyL0MwMUQwQzBDQTkyNTExRUVBQzRCREI1N0M0RjlBRTAyL2trb2dGMVpLMnZz aU5xSVB2M090b2Jscl96TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/UAj4dydM0tyUQTVZfL5DOQSVclBG/Xhr+YmFGdHccqpnJxBd1cdVf JYZ5kzk+dXnb22WuscCSaRZembYmqsplM+vKlMBUbd6OUY9hPt8XG84+klZe7rx4 WoOswVuu2RJadLEu++XHEFST4nO0Emiw0A5rd+IVCuMeMiUBvNaeCoGxLQz/NAEb xTDw3grmEqM7xBZPqPqFddHCORG5BWyd5eUouVMshE4mgBSdzh4Z3fPH6IT7dd6y Fzj/lQ6ukE+kWPBjo8kZoLy5JGIS/Nd1LVXqQuJdSYO0xzBo5BDx9TsR2DYpnmeg xw9txmEjMreeMAUsC/UFO+CkRBhSFns= -----END CERTIFICATE-----Generated at Fri May 31 10:42:21 2024 by rpki-client on console-fra.rpki-client.org