$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: K4cqGtLjwiejMNxs33MluoJzPVi2HTMz7ArTCyC+fjA= Subject key identifier: B9:20:A8:B2:9A:5C:62:54:94:D6:F7:9B:32:33:A3:63:50:F5:AF:46 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: E3 Signing time: Sun 19 May 2024 05:57:19 +0000 Manifest this update: Sun 19 May 2024 05:57:18 +0000 Manifest next update: Sun 26 May 2024 05:57:18 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: eB2uNtR6CWPBY4KJVt+NtB8jq0z55GOZPNfQ3CHtW04=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: Vj6OmRDf4YcPyEGBdudGhjii1+8xM3JzwF/SfTYS4LE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: May 19 05:57:18 2024 GMT Not After : May 26 05:57:18 2024 GMT Subject: CN=664994bf-c7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:88:97:f7:f6:55:69:68:e9:e8:92:30:bf: 2a:24:2e:74:57:68:98:b7:cd:b5:0c:66:69:c9:d0: ae:f0:28:ec:de:41:ef:9a:18:9d:ab:8b:26:67:7c: 16:98:f8:d3:48:99:bc:f9:a5:cb:b2:42:57:e4:f5: 23:38:95:0d:8d:74:3c:c7:c4:94:ff:a6:6b:fa:10: cb:44:9c:98:0d:78:af:2f:bd:d9:08:93:27:d8:7d: 21:c2:60:12:23:1f:4c:14:b8:e2:b8:42:54:d5:c3: 01:99:a4:e7:38:94:b9:45:a0:fc:fc:42:a9:fd:72: 15:d7:45:bc:3c:5f:36:68:52:14:8c:eb:61:29:c9: 3c:32:63:39:76:7e:cb:66:cb:26:2f:d2:90:60:6c: c9:5f:2d:d5:e4:f2:7b:51:1e:49:61:8d:9d:00:78: 65:38:a3:90:92:6a:c4:2e:84:79:48:72:67:73:8b: 39:5a:87:1c:37:38:60:a1:04:11:df:4f:5d:4c:80: 68:e9:96:1f:70:32:37:12:3b:bc:4b:58:8d:28:99: c9:ac:78:c6:4a:af:05:8d:5e:d9:44:47:2c:20:bc: b9:7e:a6:e4:e2:54:0d:e5:9e:4f:3c:11:78:f8:1c: e8:74:ba:df:c4:02:6d:20:69:3c:b0:86:ee:b5:36: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:20:A8:B2:9A:5C:62:54:94:D6:F7:9B:32:33:A3:63:50:F5:AF:46 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8a:62:f8:ff:21:c6:b9:10:4f:55:25:b0:39:92:78:c8:39: 08:5f:55:80:ef:4c:f3:67:dd:fc:bc:a7:7b:4f:65:18:32:1e: 57:02:fb:c7:5b:c0:07:52:4c:55:76:b6:47:88:58:dd:9b:8c: 9e:0d:d3:69:04:94:68:50:fc:d4:f0:60:45:27:29:2d:b9:a0: 08:fe:9a:ed:47:94:ba:8f:99:2b:2f:f6:50:39:b7:32:ad:d7: 08:13:f8:4d:e3:70:b6:cb:be:fc:43:1a:c0:08:d7:a9:62:e8: 4a:c4:75:c2:ee:4f:91:99:1c:9d:25:09:53:e8:e7:7c:5b:96: b1:40:9d:10:ff:91:77:68:ec:ed:f4:d6:a4:2f:78:54:48:03: 60:1d:0c:8d:62:20:9f:5b:64:88:a0:97:49:14:cc:a6:0d:3a: 7d:d9:28:be:3e:29:c8:11:1f:7b:50:2b:cb:d4:5c:8a:69:ca: 46:9a:2e:f2:a3:ce:9f:2f:a0:eb:5c:b8:6b:e4:4f:fe:14:85: 0b:f7:f2:30:d9:e3:21:61:24:6e:7e:7b:23:f2:af:a2:ad:65: 09:2d:c4:ba:dc:ca:11:cc:a2:a7:fb:a1:7c:da:d2:c3:f0:0d: 8b:b5:68:74:0c:8b:d4:73:32:5b:c3:45:7a:34:a0:eb:43:d2: 3e:be:46:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjQwNTE5MDU1NzE4WhcNMjQwNTI2MDU1NzE4WjAYMRYwFAYD VQQDEw02NjQ5OTRiZi1jN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxCIl/f2VWlo6eiSML8qJC50V2iYt821DGZpydCu8Cjs3kHvmhidq4smZ3wW mPjTSJm8+aXLskJX5PUjOJUNjXQ8x8SU/6Zr+hDLRJyYDXivL73ZCJMn2H0hwmAS Ix9MFLjiuEJU1cMBmaTnOJS5RaD8/EKp/XIV10W8PF82aFIUjOthKck8MmM5dn7L ZssmL9KQYGzJXy3V5PJ7UR5JYY2dAHhlOKOQkmrELoR5SHJnc4s5WoccNzhgoQQR 309dTIBo6ZYfcDI3Eju8S1iNKJnJrHjGSq8FjV7ZREcsILy5fqbk4lQN5Z5PPBF4 +BzodLrfxAJtIGk8sIbutTYnIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkgqLKa XGJUlNb3mzIzo2NQ9a9GMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMimL4/yHGuRBPVSWwOZJ4yDkIX1WA70zzZ938vKd7T2UYMh5XAvvH W8AHUkxVdrZHiFjdm4yeDdNpBJRoUPzU8GBFJyktuaAI/prtR5S6j5krL/ZQObcy rdcIE/hN43C2y778QxrACNepYuhKxHXC7k+RmRydJQlT6Od8W5axQJ0Q/5F3aOzt 9NakL3hUSANgHQyNYiCfW2SIoJdJFMymDTp92Si+PinIER97UCvL1FyKacpGmi7y o86fL6DrXLhr5E/+FIUL9/Iw2eMhYSRufnsj8q+irWUJLcS63MoRzKKn+6F82tLD 8A2LtWh0DIvUczJbw0V6NKDrQ9I+vkZJ -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org