$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: Atra/uv8dP1ROh59+uU72CMZyo00sg4qFp4Yj5FZ2BY= Subject key identifier: D5:4F:5E:68:A2:9B:AB:86:88:FB:BE:21:A8:83:24:62:1F:CD:2C:CF Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 0515 Signing time: Sun 19 May 2024 01:03:17 +0000 Manifest this update: Sun 19 May 2024 01:03:16 +0000 Manifest next update: Sun 26 May 2024 01:03:16 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: MN3LfPFx9gznVX1npgsNZGXAY6xX5DdGsnQGNkcvzx0=) 2: 95B42498B93411EB980CB25DC4F9AE02.roa (hash: eOvyXDq1Ha4aJH8WTiyYExZnB2xdkkbeb2iyX8nBLiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: May 19 01:03:16 2024 GMT Not After : May 26 01:03:16 2024 GMT Subject: CN=66494fd5-636d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:23:4c:93:1a:21:d6:ba:89:1a:df:dc:85: 45:93:24:0d:26:e0:b2:bd:96:4d:18:f6:50:6e:13: d8:8c:66:a9:2a:b3:4a:a7:51:e2:64:25:ff:02:30: 81:fe:83:5f:c4:6c:83:e1:82:f7:4f:1e:44:4f:e0: e6:1f:18:c5:2b:0a:b0:42:11:77:3a:92:97:9b:f8: 46:6b:30:c2:3f:a2:1c:f4:42:61:ae:ab:f2:84:d4: b6:0e:49:87:7c:d1:ec:50:c8:24:d7:3c:04:5d:ea: b9:ce:67:84:7b:f7:94:9a:b4:9d:fa:bf:f9:72:24: e7:eb:f7:90:c5:8e:f0:09:8b:73:06:7b:2b:47:61: 94:c8:f5:05:c0:2f:6b:b2:42:c7:15:98:bf:e4:db: b7:60:89:9e:ba:01:ef:63:10:35:17:80:1e:76:95: 4a:b4:52:a0:0b:5f:9b:1a:59:b9:28:2a:0a:6a:2f: d3:90:64:e3:38:48:a3:0e:10:cf:2f:59:13:75:ae: e4:d0:4f:6e:13:8c:8f:26:34:11:8f:f4:c8:32:3e: 80:d7:c4:eb:eb:dd:c3:94:0d:82:98:62:b2:61:92: 7a:f3:95:9d:94:ae:3f:4e:57:84:a2:94:1f:e0:74: 31:af:93:73:f4:ba:fd:fd:c5:0b:47:bd:eb:71:9e: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4F:5E:68:A2:9B:AB:86:88:FB:BE:21:A8:83:24:62:1F:CD:2C:CF X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:41:96:ce:00:27:16:49:dc:d0:7f:73:c6:b6:f2:1f:7b:30: 73:b8:53:3b:f5:5e:2a:9f:9d:a4:a2:9d:e8:25:02:83:a5:52: 84:9f:bc:1b:5b:09:cf:d7:ca:45:2c:3c:75:93:c4:08:f3:0f: 76:b2:29:7b:2d:86:4c:82:1b:e4:72:c7:08:8e:30:f8:15:1d: 01:95:16:69:25:40:4f:d0:56:1c:ed:a1:c3:d0:a5:6f:ac:ea: 8d:d2:ef:ee:37:e9:5a:c1:8d:28:38:ee:a5:d4:e9:58:e5:f3: a4:b8:af:91:d0:3b:b1:00:fd:3f:b4:1f:a0:0a:a7:2e:71:c0: 6c:82:85:d6:09:81:d6:60:8d:71:ad:df:2c:22:44:31:f1:23: a4:65:3b:5c:0c:0b:9a:f3:76:54:36:36:3b:fb:19:b4:cf:3f: 35:fe:b5:ac:03:f1:45:6a:c4:7b:0d:40:90:61:87:70:db:8c: 53:8b:19:8a:4f:50:de:6b:1b:7a:2e:39:8a:00:af:c6:ae:ff: 10:4e:34:88:ee:13:01:99:fe:2f:2e:ed:0e:d2:db:00:ce:aa: 10:87:ba:1c:88:68:81:b7:1e:7a:50:de:7a:47:b9:a1:bd:8f: af:30:98:80:b7:95:89:b0:7e:a1:26:b9:e5:c7:92:74:98:c1: 52:de:2d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjQwNTE5MDEwMzE2WhcNMjQwNTI2MDEwMzE2WjAYMRYwFAYD VQQDEw02NjQ5NGZkNS02MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvojTJMaIda6iRrf3IVFkyQNJuCyvZZNGPZQbhPYjGapKrNKp1HiZCX/AjCB /oNfxGyD4YL3Tx5ET+DmHxjFKwqwQhF3OpKXm/hGazDCP6Ic9EJhrqvyhNS2DkmH fNHsUMgk1zwEXeq5zmeEe/eUmrSd+r/5ciTn6/eQxY7wCYtzBnsrR2GUyPUFwC9r skLHFZi/5Nu3YImeugHvYxA1F4AedpVKtFKgC1+bGlm5KCoKai/TkGTjOEijDhDP L1kTda7k0E9uE4yPJjQRj/TIMj6A18Tr693DlA2CmGKyYZJ685WdlK4/TleEopQf 4HQxr5Nz9Lr9/cULR73rcZ4iSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVPXmii m6uGiPu+IaiDJGIfzSzPMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACQZbOACcWSdzQf3PGtvIfezBzuFM79V4qn52kop3oJQKDpVKEn7wb WwnP18pFLDx1k8QI8w92sil7LYZMghvkcscIjjD4FR0BlRZpJUBP0FYc7aHD0KVv rOqN0u/uN+lawY0oOO6l1OlY5fOkuK+R0DuxAP0/tB+gCqcuccBsgoXWCYHWYI1x rd8sIkQx8SOkZTtcDAua83ZUNjY7+xm0zz81/rWsA/FFasR7DUCQYYdw24xTixmK T1Deaxt6LjmKAK/Grv8QTjSI7hMBmf4vLu0O0tsAzqoQh7ociGiBtx56UN56R7mh vY+vMJiAt5WJsH6hJrnlx5J0mMFS3i2t -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org