$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json) Hash identifier: eAZrKHaowyDJ5B9kIw1kDZLPxZKPp5YrJj5QEq1+RKc= Subject key identifier: 8D:F4:8B:03:F6:AD:1A:79:F8:47:49:5D:45:1A:5F:D9:84:48:CA:4F Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft Manifest number: 0471 Signing time: Sun 19 May 2024 01:43:25 +0000 Manifest this update: Sun 19 May 2024 01:43:25 +0000 Manifest next update: Sun 26 May 2024 01:43:25 +0000 Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: scTo5VMGt1YNJwEyhcg8ovy0wWmgPbVIkEaEWrKp1AU=) 2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: W2CC03Iszn8+ulcJ3T40dvVEepYKJ/v5C7sNO7bHna0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Validity Not Before: May 19 01:43:25 2024 GMT Not After : May 26 01:43:25 2024 GMT Subject: CN=6649593d-be76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:f8:cf:f3:5a:57:b2:83:f8:05:de:ae:7e: df:f5:92:90:3c:6a:f9:3e:17:37:c3:e8:11:f1:b1: 1f:fe:7b:fe:eb:06:60:8f:d5:23:a3:e1:fc:54:ac: 65:1c:cd:f7:bf:d9:ef:bb:5f:ae:c0:6e:d2:31:d2: 09:fd:91:bf:23:76:3f:32:e1:92:2a:73:c7:d0:86: 35:31:3a:07:70:61:ec:60:c2:7d:0b:3e:11:7d:8e: 64:07:0e:b0:49:26:e1:22:62:4b:11:de:9b:06:38: 45:43:e7:f4:61:70:06:b4:b8:2f:b4:59:52:24:32: ca:c3:63:8e:b9:50:24:2e:f5:4c:b5:b3:fe:66:ed: d5:61:52:7e:68:93:13:84:8f:16:e3:c9:82:73:e2: 98:f0:ba:b0:38:c4:12:74:51:6d:4a:36:33:4c:a2: 20:6e:4a:2b:82:ad:32:23:e0:df:81:ac:6f:9d:cf: ef:7a:46:2a:b9:ff:33:5d:13:66:d8:c5:30:f2:bf: e3:ce:be:be:b8:9f:a8:e0:24:7f:3c:21:d6:3e:16: 40:0b:11:a5:74:e7:8d:29:54:83:63:81:0c:54:27: 6e:29:69:e5:89:e3:42:de:cd:83:5d:06:0e:00:e2: 5e:d5:43:5a:f5:82:5c:db:9b:dd:3f:0d:e8:31:6d: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:8B:03:F6:AD:1A:79:F8:47:49:5D:45:1A:5F:D9:84:48:CA:4F X509v3 Authority Key Identifier: keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:64:fc:f9:eb:96:7d:52:a1:5f:b5:bd:09:af:49:f8:a9:15: 54:c1:3a:93:e8:07:e4:64:83:bf:9b:fc:22:60:42:79:1c:27: 5e:38:ad:aa:fe:77:a1:77:dc:07:8f:7c:95:41:45:a9:1d:ce: 7a:fc:a5:04:bc:fd:90:4f:ec:61:1d:a7:1f:f7:c5:88:11:7b: c8:89:8f:96:ad:9d:07:6b:c1:cf:b7:98:2f:56:7b:5a:f7:10: ec:3a:8a:73:e6:88:92:5d:93:ed:e5:a2:4d:b9:d6:16:23:99: d4:31:f3:ba:d1:1d:95:4b:85:fa:69:12:4f:a5:ac:6b:ec:6d: 69:ce:4c:c3:71:c1:89:f0:22:df:00:ee:ef:73:e2:14:48:68: c0:fd:a8:76:ff:db:f0:89:ba:53:22:3d:a0:ba:7c:6b:5d:eb: d2:47:9b:20:2b:b4:cb:3a:d8:49:ef:85:06:73:a3:a2:01:7f: b8:02:47:f0:91:bb:19:f9:f2:d4:38:e2:33:07:ea:dd:da:59: d2:f2:66:6b:83:4c:ce:7b:a4:25:44:c8:18:36:74:0a:a5:de: 80:a6:02:52:ce:6f:c9:4f:e3:35:22:ee:38:48:29:f9:3b:e3: ae:f5:9a:2d:3e:dc:fc:7e:35:99:f3:a4:82:40:65:fa:4f:8f: 24:c8:eb:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx RjBCRUZFRTcwHhcNMjQwNTE5MDE0MzI1WhcNMjQwNTI2MDE0MzI1WjAYMRYwFAYD VQQDEw02NjQ5NTkzZC1iZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00z4z/NaV7KD+AXern7f9ZKQPGr5Phc3w+gR8bEf/nv+6wZgj9Ujo+H8VKxl HM33v9nvu1+uwG7SMdIJ/ZG/I3Y/MuGSKnPH0IY1MToHcGHsYMJ9Cz4RfY5kBw6w SSbhImJLEd6bBjhFQ+f0YXAGtLgvtFlSJDLKw2OOuVAkLvVMtbP+Zu3VYVJ+aJMT hI8W48mCc+KY8LqwOMQSdFFtSjYzTKIgbkorgq0yI+Dfgaxvnc/vekYquf8zXRNm 2MUw8r/jzr6+uJ+o4CR/PCHWPhZACxGldOeNKVSDY4EMVCduKWnlieNC3s2DXQYO AOJe1UNa9YJc25vdPw3oMW2wYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI30iwP2 rRp5+EdJXUUaX9mESMpPMB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5 QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N TjdkX2w1QTNCcllmQy1fdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLZPz565Z9UqFftb0Jr0n4qRVUwTqT6AfkZIO/m/wiYEJ5HCdeOK2q /nehd9wHj3yVQUWpHc56/KUEvP2QT+xhHacf98WIEXvIiY+WrZ0Ha8HPt5gvVnta 9xDsOopz5oiSXZPt5aJNudYWI5nUMfO60R2VS4X6aRJPpaxr7G1pzkzDccGJ8CLf AO7vc+IUSGjA/ah2/9vwibpTIj2gunxrXevSR5sgK7TLOthJ74UGc6OiAX+4Akfw kbsZ+fLUOOIzB+rd2lnS8mZrg0zOe6QlRMgYNnQKpd6ApgJSzm/JT+M1Iu44SCn5 O+Ou9ZotPtz8fjWZ86SCQGX6T48kyOvG -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org