$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: 2BAM/PnBqBUWvbvH4oJW2rzUM/9kV9wrJYwJrwppQfw= Subject key identifier: 55:A5:05:F3:65:95:5C:F2:B9:D2:65:13:3A:91:D1:21:78:BD:03:9D Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 5E Signing time: Wed 29 May 2024 08:28:06 +0000 Manifest this update: Wed 29 May 2024 08:28:06 +0000 Manifest next update: Wed 05 Jun 2024 08:28:06 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: 7iq1A2mKzLOMZ4VSz0It243WwBF1MzVVhc1FwmZBDiM=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: 3QR/UvKzS+sKKfIIK9uHF2so+MGpUcPtji7e/5xzyuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: May 29 08:28:06 2024 GMT Not After : Jun 5 08:28:06 2024 GMT Subject: CN=6656e716-7b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:17:c8:99:99:90:df:ee:d7:4d:4b:9b:62: 41:88:1a:88:68:7d:e4:11:18:ce:d8:98:a1:e4:84: fc:ec:04:e9:ae:a1:a1:6e:8d:15:58:d1:a5:31:45: 88:3a:6f:36:7c:91:d1:f0:76:e6:7a:24:05:cc:a0: 90:8e:4f:8a:26:46:8a:2e:4b:02:67:35:17:2e:ac: 19:01:5a:50:bb:8d:d9:25:ae:80:6c:3c:6c:56:06: 61:b7:2f:2f:43:92:af:59:53:45:66:d8:fe:d5:26: 92:f6:13:09:99:89:68:1f:48:a5:8f:cf:af:eb:ab: 60:8d:fe:f8:be:e8:a7:d2:14:b1:18:5b:14:90:95: 69:5d:fc:16:9b:a8:a0:22:c0:91:ed:3c:74:a0:8f: 2a:49:e8:fe:f0:99:e6:a0:2c:d9:2e:a9:b5:16:08: 1b:f3:f9:85:35:d0:ac:ca:37:82:33:e0:74:c3:d0: 8f:72:70:59:03:88:7f:7a:7c:de:39:25:bf:8e:9a: 5b:f1:fd:77:83:12:b4:fe:19:da:6a:87:3b:6f:c4: e9:0a:1f:64:80:d9:5b:7e:49:c1:9c:6d:7d:90:73: da:b9:f4:d2:7d:ea:d5:15:ad:54:b1:56:e3:a2:f0: a0:40:72:72:2f:66:54:03:56:c5:c0:66:12:b6:e4: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A5:05:F3:65:95:5C:F2:B9:D2:65:13:3A:91:D1:21:78:BD:03:9D X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:18:6f:58:ca:df:a3:8e:bc:08:7b:81:1a:6e:23:0d:c5:9b: b0:ff:13:65:fd:97:09:fd:5e:e3:dd:6c:36:65:83:8c:f4:6c: b2:6f:94:15:7d:a1:f6:e8:75:ed:10:99:29:d5:3a:5d:99:75: 5c:96:9e:e9:3e:87:4c:0a:ba:77:9e:aa:31:9e:3d:54:2f:94: 19:30:c0:5e:f6:7b:9f:2a:f4:fb:29:53:26:75:6c:20:a8:dd: 73:3e:cd:c2:6d:f0:4e:5d:f1:74:ae:54:6a:a1:0d:47:f1:66: 6c:e1:e1:8d:ea:bc:c1:84:0e:2c:8a:be:c8:ab:ee:c5:18:48: e4:5e:39:2d:11:6f:6d:aa:bc:6e:13:0d:7f:30:2e:73:24:ea: 76:2b:51:5b:75:e4:a6:1e:d7:01:18:f6:b3:ce:ef:a8:24:30: 35:d2:b5:63:c4:6a:0f:ca:87:c9:e9:06:e2:34:d1:9f:74:dc: 92:64:ed:b6:83:7e:68:73:4d:bc:c6:2e:ce:12:96:39:a8:54: 6e:87:d4:34:8c:82:fa:d3:0e:9a:2a:d6:0d:64:1a:4c:94:0b: ef:49:9c:a4:2b:2d:94:ae:ce:58:59:cb:2f:6c:9d:d0:ca:bc: 46:df:83:c1:c0:2f:a1:ff:f3:b6:36:a0:8e:6d:76:12:56:84: 98:c7:f0:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzM3ODExMC8GA1UEBRMoOTBCOUJBQkQ3NDJCMjc1NzQzRkI3MTVFMTM1OTc1NjM4 RTlDMkYyNTAeFw0yNDA1MjkwODI4MDZaFw0yNDA2MDUwODI4MDZaMBgxFjAUBgNV BAMTDTY2NTZlNzE2LTdiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX2BfImZmQ3+7XTUubYkGIGohofeQRGM7YmKHkhPzsBOmuoaFujRVY0aUxRYg6 bzZ8kdHwduZ6JAXMoJCOT4omRoouSwJnNRcurBkBWlC7jdklroBsPGxWBmG3Ly9D kq9ZU0Vm2P7VJpL2EwmZiWgfSKWPz6/rq2CN/vi+6KfSFLEYWxSQlWld/BabqKAi wJHtPHSgjypJ6P7wmeagLNkuqbUWCBvz+YU10KzKN4Iz4HTD0I9ycFkDiH96fN45 Jb+Omlvx/XeDErT+GdpqhztvxOkKH2SA2Vt+ScGcbX2Qc9q59NJ96tUVrVSxVuOi 8KBAcnIvZlQDVsXAZhK25KFvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVaUF82WV XPK50mUTOpHRIXi9A50wHwYDVR0jBBgwFoAUkLm6vXQrJ1dD+3FeE1l1Y46cLyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Mzc4LzBBODhDN0YyOTNF MzExRUU5M0M4RTU4MkM0RjlBRTAyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xtNnZYUXJKMWRELTNGZUUxbDFZNDZjTHlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Mzc4LzBBODhDN0YyOTNFMzExRUU5M0M4RTU4MkM0RjlBRTAyL2tMbTZ2WFFySjFk RC0zRmVFMWwxWTQ2Y0x5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUYb1jK36OOvAh7gRpuIw3Fm7D/E2X9lwn9XuPdbDZlg4z0bLJvlBV9 ofbode0QmSnVOl2ZdVyWnuk+h0wKuneeqjGePVQvlBkwwF72e58q9PspUyZ1bCCo 3XM+zcJt8E5d8XSuVGqhDUfxZmzh4Y3qvMGEDiyKvsir7sUYSOReOS0Rb22qvG4T DX8wLnMk6nYrUVt15KYe1wEY9rPO76gkMDXStWPEag/Kh8npBuI00Z903JJk7baD fmhzTbzGLs4SljmoVG6H1DSMgvrTDpoq1g1kGkyUC+9JnKQrLZSuzlhZyy9sndDK vEbfg8HAL6H/87Y2oI5tdhJWhJjH8FU= -----END CERTIFICATE-----Generated at Wed May 29 09:16:20 2024 by rpki-client on console-fra.rpki-client.org