$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: Ye5Fq2m3U3hT5AknJsDeh/Iy4qbiuUquBvYaIGyLBjs= Subject key identifier: D8:BD:BE:93:03:B9:13:79:A3:AB:70:CE:63:5B:C0:5D:7D:9B:B6:B8 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 33CA Signing time: Thu 30 May 2024 14:52:28 +0000 Manifest this update: Thu 30 May 2024 14:52:28 +0000 Manifest next update: Thu 06 Jun 2024 14:52:28 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: DQJsohVqtVtae8C0zDy/V9AmNKs079z1ObZ0wHcGLpM=) 2: 362219222CA111ED86813324C4F9AE02.roa (hash: EmByI/hEDGbR7l0yLVunkRdjktgi7lvL3op9RMavJr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 14:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: May 30 14:52:28 2024 GMT Not After : Jun 6 14:52:28 2024 GMT Subject: CN=665892ac-2c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:69:cc:72:79:ff:3d:b2:3d:ba:b5:18:44: 48:98:be:6a:67:83:45:a1:3b:7f:7a:6b:62:68:16: 6f:c6:6f:4e:a8:e1:a7:98:64:45:d6:c9:d6:d6:8d: 20:28:fc:70:ea:8f:32:ad:ea:47:5a:f1:cc:95:9f: 8d:f2:46:7e:1a:fb:a0:2e:68:eb:12:dc:49:a6:b5: 31:7f:bc:44:1a:9a:bf:96:c5:c6:c7:4d:ab:81:e4: dd:98:06:aa:86:d5:11:c9:11:99:40:e7:91:d4:30: 82:80:5e:14:86:92:f9:2a:92:e1:99:f6:83:ae:05: b0:48:4f:cb:0a:db:9e:1d:81:53:0f:ff:8e:3b:fb: 7b:c3:95:04:f1:e4:c7:74:b5:9e:98:9c:1c:5c:5e: dd:6d:96:02:bf:5f:77:b6:41:eb:d4:ca:83:30:4b: c3:59:70:bf:58:32:39:41:34:24:30:78:72:32:41: ee:64:e5:e7:b8:4f:60:61:24:f2:ec:5d:46:54:fd: 2c:e1:bc:60:1f:46:d0:62:9e:61:4c:40:53:6b:36: 0c:68:c1:4c:c6:84:ed:6a:d2:24:7e:98:dd:05:64: bf:e7:37:dd:65:a1:1b:95:14:ec:a0:23:4b:0c:50: e2:a6:a2:5d:41:e4:7d:22:fc:66:4f:4f:e1:2f:58: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BD:BE:93:03:B9:13:79:A3:AB:70:CE:63:5B:C0:5D:7D:9B:B6:B8 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:ad:7c:51:e0:22:f9:84:57:8d:35:2b:a6:08:65:b5:47: a7:39:b7:80:45:51:b7:db:30:a6:d4:49:2d:20:ba:53:a7:3f: 7e:67:33:47:5d:59:f1:21:6a:93:dd:ea:e8:27:d5:70:e0:36: 91:af:e0:5c:33:c5:3f:e0:0d:31:9a:43:67:ec:d5:16:e6:0b: b3:f9:3d:87:c8:53:4b:89:b7:f5:a7:8d:a1:7d:66:41:5b:49: d9:fa:53:3f:58:6c:81:32:40:f8:0f:54:1e:21:ba:cb:e5:fa: 61:9e:33:2b:1a:b6:03:5e:57:85:f5:01:83:5e:bf:95:9e:59: e9:86:38:2c:81:82:f6:51:9d:31:54:b5:ad:57:7d:a2:01:4f: 09:5c:21:76:ae:ed:53:72:2f:4d:6f:c1:ca:a9:0f:10:55:a6: 15:2a:ce:1f:0a:fb:08:2b:a8:53:ef:0b:fc:a9:4a:b3:07:7f: a2:f6:0f:d3:1b:2b:39:9d:c9:23:71:58:cf:b8:db:d5:6b:09: 7a:e7:81:63:0f:55:8b:3e:56:5b:a1:ab:a0:1e:0e:f3:ee:2e: 0c:82:47:d6:00:bf:db:39:c2:cf:e9:ad:51:7c:37:94:80:db: 58:89:5a:98:cf:09:bb:e7:0c:1b:a4:4c:7c:42:94:79:3d:2d: 10:5b:ef:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjQwNTMwMTQ1MjI4WhcNMjQwNjA2MTQ1MjI4WjAYMRYwFAYD VQQDEw02NjU4OTJhYy0yYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RBpzHJ5/z2yPbq1GERImL5qZ4NFoTt/emtiaBZvxm9OqOGnmGRF1snW1o0g KPxw6o8yrepHWvHMlZ+N8kZ+GvugLmjrEtxJprUxf7xEGpq/lsXGx02rgeTdmAaq htURyRGZQOeR1DCCgF4UhpL5KpLhmfaDrgWwSE/LCtueHYFTD/+OO/t7w5UE8eTH dLWemJwcXF7dbZYCv193tkHr1MqDMEvDWXC/WDI5QTQkMHhyMkHuZOXnuE9gYSTy 7F1GVP0s4bxgH0bQYp5hTEBTazYMaMFMxoTtatIkfpjdBWS/5zfdZaEblRTsoCNL DFDipqJdQeR9IvxmT0/hL1gnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi9vpMD uRN5o6twzmNbwF19m7a4MB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYE618UeAi+YRXjTUrpghltUenObeARVG32zCm1EktILpTpz9+ZzNH XVnxIWqT3eroJ9Vw4DaRr+BcM8U/4A0xmkNn7NUW5guz+T2HyFNLibf1p42hfWZB W0nZ+lM/WGyBMkD4D1QeIbrL5fphnjMrGrYDXleF9QGDXr+VnlnphjgsgYL2UZ0x VLWtV32iAU8JXCF2ru1Tci9Nb8HKqQ8QVaYVKs4fCvsIK6hT7wv8qUqzB3+i9g/T Gys5nckjcVjPuNvVawl654FjD1WLPlZboaugHg7z7i4MgkfWAL/bOcLP6a1RfDeU gNtYiVqYzwm75wwbpEx8QpR5PS0QW+9h -----END CERTIFICATE-----Generated at Thu May 30 16:04:44 2024 by rpki-client on console-fra.rpki-client.org