$ rpki-client -vvf rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft File: kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft (raw, json) Hash identifier: JF0b9eAe7zZ8ofdIECvrJfHzdudx/OHuwheXNuS0H+Q= Subject key identifier: AB:C9:EF:6B:B3:5F:85:C9:1F:22:BC:EC:D9:B4:06:1B:5C:02:4C:CC Authority key identifier: 91:C3:C4:80:EE:8B:CD:C1:52:8B:1E:8B:97:46:B6:5F:DC:61:97:4C Certificate issuer: /CN=A9164CD2/serialNumber=91C3C480EE8BCDC1528B1E8B9746B65FDC61974C Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft Manifest number: 0AD4 Signing time: Sat 18 May 2024 20:05:47 +0000 Manifest this update: Sat 18 May 2024 20:05:46 +0000 Manifest next update: Sat 25 May 2024 20:05:46 +0000 Files and hashes: 1: kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl (hash: GJXS0aQm0BNl9hP09/NkMOlRfCkYckvTi0C/pYEHWSA=) 2: 7DCDEBBCAA8911EA93873A4BC4F9AE02.roa (hash: W6fct4LnE08x6j8ZN9HPGMufFtROWbAnAcABwGTf1Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164CD2/serialNumber=91C3C480EE8BCDC1528B1E8B9746B65FDC61974C Validity Not Before: May 18 20:05:46 2024 GMT Not After : May 25 20:05:46 2024 GMT Subject: CN=66490a1b-8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:e4:36:72:52:d4:2f:fb:a0:01:d7:64:5e: 44:e8:8f:46:91:5b:b3:34:17:25:16:0e:70:b2:59: fb:e1:da:62:88:82:29:d9:49:fe:c9:3e:60:94:c5: ad:49:d3:64:d0:6d:14:c5:61:68:dc:9c:97:ec:4a: 3e:5d:4c:1a:b4:5e:67:43:8b:59:b3:51:ff:d3:8b: 85:f9:70:d1:0f:f4:74:a9:68:ac:43:e6:70:8a:2a: 68:de:45:0b:ce:af:70:d3:dc:c0:71:2e:4d:f1:fc: 29:cc:6a:98:27:bf:8d:08:89:d2:8e:70:dc:33:ee: 1f:9f:66:d1:d4:1a:94:66:9c:1e:48:8f:f0:1b:54: 75:fe:cf:31:de:c9:48:c5:83:c9:73:e0:ba:fc:96: 2e:8e:93:f8:c6:c5:43:66:99:88:7b:95:bb:a7:60: cd:67:13:1e:d5:7f:72:82:48:9d:07:ff:5a:85:cb: 04:35:f3:0d:dc:fd:20:2b:3a:f3:76:5a:00:9e:9f: 94:d7:46:25:88:46:fd:3d:31:5f:ab:55:1d:b4:44: 5d:8d:8a:20:ec:3e:a0:f8:1b:8f:51:0a:b0:bf:34: d7:13:dd:cf:a1:ec:56:44:fe:53:3c:8e:38:ec:43: 48:4b:07:62:c4:3e:75:50:05:8d:b3:63:bc:6e:70: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:EF:6B:B3:5F:85:C9:1F:22:BC:EC:D9:B4:06:1B:5C:02:4C:CC X509v3 Authority Key Identifier: keyid:91:C3:C4:80:EE:8B:CD:C1:52:8B:1E:8B:97:46:B6:5F:DC:61:97:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4c:50:1c:ce:08:7f:12:69:b9:83:ee:b3:ce:e3:1e:90:61: c1:fd:5b:56:ec:3c:c4:6e:38:fe:16:2e:54:97:89:28:cd:19: 17:e4:79:48:11:10:3c:06:56:ed:4e:51:83:9f:19:13:84:4e: dd:18:76:92:f5:02:1a:8e:ad:a8:af:07:36:09:f9:ff:f3:f7: 89:d6:bf:29:fe:da:82:8d:db:bc:88:46:55:68:87:79:c4:e6: 93:44:85:d1:72:95:b3:57:58:fa:c1:25:8d:1b:24:e5:d8:94: b6:27:55:5c:59:29:1f:e9:d1:08:b9:bf:b8:1e:c9:44:8f:48: db:48:93:ca:ab:9e:80:f6:eb:9a:47:66:d2:ee:7e:22:d6:95: e5:30:30:18:59:77:8b:cf:ea:47:c3:92:e6:2c:4a:bf:d3:9d: f2:c9:10:df:3b:48:be:b9:99:af:0d:0c:86:19:7c:6d:33:5f: 26:a5:3e:14:e1:80:d8:80:eb:c7:d1:c9:f8:37:94:72:7e:25: 16:76:c1:5f:64:62:94:17:e6:e6:6a:05:46:01:a5:1d:09:42: 0f:ef:7a:54:72:86:63:f7:4d:61:fb:92:13:a9:16:91:97:cb: 91:e5:73:9c:61:f6:b2:9a:15:6d:7c:6e:c6:d2:f5:21:db:28: 07:a5:4d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRDRDIxMTAvBgNVBAUTKDkxQzNDNDgwRUU4QkNEQzE1MjhCMUU4Qjk3NDZCNjVG REM2MTk3NEMwHhcNMjQwNTE4MjAwNTQ2WhcNMjQwNTI1MjAwNTQ2WjAYMRYwFAYD VQQDEw02NjQ5MGExYi04MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qDkNnJS1C/7oAHXZF5E6I9GkVuzNBclFg5wsln74dpiiIIp2Un+yT5glMWt SdNk0G0UxWFo3JyX7Eo+XUwatF5nQ4tZs1H/04uF+XDRD/R0qWisQ+Zwiipo3kUL zq9w09zAcS5N8fwpzGqYJ7+NCInSjnDcM+4fn2bR1BqUZpweSI/wG1R1/s8x3slI xYPJc+C6/JYujpP4xsVDZpmIe5W7p2DNZxMe1X9ygkidB/9ahcsENfMN3P0gKzrz dloAnp+U10YliEb9PTFfq1UdtERdjYog7D6g+BuPUQqwvzTXE93PoexWRP5TPI44 7ENISwdixD51UAWNs2O8bnD4CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvJ72uz X4XJHyK87Nm0BhtcAkzMMB8GA1UdIwQYMBaAFJHDxIDui83BUosei5dGtl/cYZdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NENEMi9ENzhBRjc0NDI4 RjIxMUVBQkQ4MUYxNjRDNEY5QUUwMi9rY1BFZ082THpjRlNpeDZMbDBhMlg5eGhs MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEVnTzZMemNGU2l4NkxsMGEyWDl4aGwwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NENEMi9ENzhBRjc0NDI4RjIxMUVBQkQ4MUYxNjRDNEY5QUUwMi9rY1BFZ082THpj RlNpeDZMbDBhMlg5eGhsMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2TFAczgh/Emm5g+6zzuMekGHB/VtW7DzEbjj+Fi5Ul4kozRkX5HlI ERA8BlbtTlGDnxkThE7dGHaS9QIajq2orwc2Cfn/8/eJ1r8p/tqCjdu8iEZVaId5 xOaTRIXRcpWzV1j6wSWNGyTl2JS2J1VcWSkf6dEIub+4HslEj0jbSJPKq56A9uua R2bS7n4i1pXlMDAYWXeLz+pHw5LmLEq/053yyRDfO0i+uZmvDQyGGXxtM18mpT4U 4YDYgOvH0cn4N5RyfiUWdsFfZGKUF+bmagVGAaUdCUIP73pUcoZj901h+5ITqRaR l8uR5XOcYfaymhVtfG7G0vUh2ygHpU1b -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org