$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: vyhsztX4QLBS31QOkvvdHsHXDkrVcRxYDf/pE9ZbqAE= Subject key identifier: 4C:1C:18:F1:50:87:64:7C:14:A2:7B:4B:7E:9C:00:A2:D4:EC:FA:8E Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 198C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1975 Signing time: Fri 31 May 2024 17:03:14 +0000 Manifest this update: Fri 31 May 2024 17:03:13 +0000 Manifest next update: Fri 07 Jun 2024 17:03:13 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: Hpeb90LA/FxibgNVZZc7kt4el/vdd2NohutC8m2cmcQ=) 2: 111CB904BA6F11EEAF6A8E21C4F9AE02.roa (hash: qopvz81D7UUGVN5aXhYELD3KSiFdRUNadXM92lOJm8o=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 9Yic7ZudnM+/3y+rGwCOY5Ix5lQBB7EQE64c16elJaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6540 (0x198c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: May 31 17:03:13 2024 GMT Not After : Jun 7 17:03:13 2024 GMT Subject: CN=665a02d1-45e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8d:8e:76:6a:8f:28:d7:0d:75:a6:fd:28:c0: 01:87:70:12:eb:b4:6b:cc:c9:87:4b:3f:bc:8c:a4: 45:02:be:fb:3a:17:6a:43:91:f4:85:26:a3:34:da: 8d:f2:e8:ce:00:76:43:0c:98:f4:d5:de:1f:71:d4: 96:a7:40:9b:39:4b:b7:6a:a2:c0:b9:cf:3f:b1:6b: 34:3a:d1:00:48:4f:44:63:c5:c3:13:76:17:d8:2a: ff:b0:a9:4a:05:c7:77:b5:e6:5c:1f:1f:dc:18:81: b8:07:63:79:81:ac:f8:07:fa:ae:b6:8d:5d:43:35: ba:b3:72:31:9d:b1:13:c7:21:c3:a1:10:69:1d:ad: 25:39:a0:0b:d3:ba:ad:e1:85:26:ce:b3:5c:4c:7b: 78:2b:4f:ff:0b:91:ea:c3:8c:3b:3b:48:f6:2e:3f: a7:72:8c:cf:a5:52:fc:da:cf:8b:55:0b:f2:b1:f3: 94:7b:66:68:2f:88:46:92:29:91:1b:52:9b:76:43: 39:b6:fa:4a:78:bb:81:39:42:54:5d:6d:cd:25:cb: 4b:7a:eb:45:d6:7e:fc:ce:23:13:2c:ca:19:33:d7: 85:3f:54:c5:25:aa:88:ab:56:09:16:a4:b4:63:1a: 72:d0:ce:34:2b:b1:f1:74:44:d7:02:2b:5c:17:88: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1C:18:F1:50:87:64:7C:14:A2:7B:4B:7E:9C:00:A2:D4:EC:FA:8E X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:64:c0:f2:9d:66:e5:2c:87:7d:13:b4:43:78:89:76:95: bc:36:90:39:e8:6d:b0:2c:b8:27:5d:6e:60:02:c7:54:2a:4f: 3e:cc:f5:6e:7a:9a:bf:a2:46:6b:ce:6f:ad:34:d0:49:16:6c: fa:1e:53:f0:49:10:33:fd:84:a3:72:7e:4c:fc:2c:cc:cf:4c: c3:ad:9c:50:2f:43:c4:25:8a:2c:6e:de:4d:03:1d:84:b2:14: 01:e4:59:fc:f5:b7:a2:65:2c:56:17:41:dd:72:01:75:f1:fe: 10:54:6a:78:d7:de:47:32:46:d3:77:4f:86:5f:04:90:c2:87: e2:f7:e4:72:bb:35:5c:c2:7d:39:2b:59:87:9e:80:73:b5:75: 52:37:e9:37:3f:19:17:3e:40:f9:8d:8b:c5:f1:9a:b7:09:cb: 66:d3:f8:9a:43:ae:af:99:41:dc:7d:73:76:32:c1:89:69:a9: b5:75:61:20:1d:d0:57:d9:5a:69:da:19:bc:38:a9:6e:42:ea: cc:4f:a3:1d:c1:47:d5:f3:3e:29:95:3d:01:51:75:5f:4f:de: 6c:3f:fd:82:6b:ea:3f:a6:13:2b:b0:fd:9b:da:e1:12:4d:e0: ab:79:e7:24:14:7f:7e:79:67:cf:ed:7f:c0:8d:a3:f4:36:d8: 57:01:43:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjQwNTMxMTcwMzEzWhcNMjQwNjA3MTcwMzEzWjAYMRYwFAYD VQQDEw02NjVhMDJkMS00NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8I2OdmqPKNcNdab9KMABh3AS67RrzMmHSz+8jKRFAr77OhdqQ5H0hSajNNqN 8ujOAHZDDJj01d4fcdSWp0CbOUu3aqLAuc8/sWs0OtEASE9EY8XDE3YX2Cr/sKlK Bcd3teZcHx/cGIG4B2N5gaz4B/quto1dQzW6s3IxnbETxyHDoRBpHa0lOaAL07qt 4YUmzrNcTHt4K0//C5Hqw4w7O0j2Lj+ncozPpVL82s+LVQvysfOUe2ZoL4hGkimR G1KbdkM5tvpKeLuBOUJUXW3NJctLeutF1n78ziMTLMoZM9eFP1TFJaqIq1YJFqS0 Yxpy0M40K7HxdETXAitcF4jyXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwcGPFQ h2R8FKJ7S36cAKLU7PqOMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7aWTA8p1m5SyHfRO0Q3iJdpW8NpA56G2wLLgnXW5gAsdUKk8+zPVu epq/okZrzm+tNNBJFmz6HlPwSRAz/YSjcn5M/CzMz0zDrZxQL0PEJYosbt5NAx2E shQB5Fn89beiZSxWF0HdcgF18f4QVGp4195HMkbTd0+GXwSQwofi9+RyuzVcwn05 K1mHnoBztXVSN+k3PxkXPkD5jYvF8Zq3Cctm0/iaQ66vmUHcfXN2MsGJaam1dWEg HdBX2Vpp2hm8OKluQurMT6MdwUfV8z4plT0BUXVfT95sP/2Ca+o/phMrsP2b2uES TeCreeckFH9+eWfP7X/AjaP0NthXAUOp -----END CERTIFICATE-----Generated at Fri May 31 17:44:23 2024 by rpki-client on console-fra.rpki-client.org