$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: BHxltmDwACPhZc4INZ5wxgQ3syKCCf1uSwr0u78LkHs= Subject key identifier: 95:69:1F:B9:A2:D6:C6:7D:36:BF:FF:55:E0:4E:A7:DE:DB:81:C6:00 Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 0515 Signing time: Sun 19 May 2024 01:04:23 +0000 Manifest this update: Sun 19 May 2024 01:04:23 +0000 Manifest next update: Sun 26 May 2024 01:04:23 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: sys9koGDxylR5NDSeCJSCx46x4z/xih8Fg5l7vNcui0=) 2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: mdfptfU1KFsjIZAm1iPXbK29nkG/PT2OQg8PEsvtPkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: May 19 01:04:23 2024 GMT Not After : May 26 01:04:23 2024 GMT Subject: CN=66495017-fe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:72:ce:6a:b8:86:0d:69:26:ff:c2:f6:6e: bf:c7:3a:3d:b3:75:b0:2a:bf:6c:69:d9:e3:03:a2: e8:d3:a8:13:ae:f4:f1:bd:85:d5:27:33:65:f1:85: 69:07:8d:e2:9b:fc:2f:0e:72:74:b9:14:d5:b8:90: d6:72:e6:c0:49:c9:8f:91:28:df:67:28:5e:61:8b: 16:e5:70:cd:eb:3a:45:9b:d4:70:d1:09:1d:5d:66: e7:b8:95:79:d0:ff:c6:c3:e2:44:c7:8d:33:b9:a9: 2c:8a:ef:40:57:3f:17:84:2c:6d:a0:ce:8b:ac:0e: e7:88:57:07:c3:5f:86:51:f6:f3:42:79:e9:ec:ee: 2d:63:74:f1:f4:b2:45:1e:4f:46:c9:2d:cc:25:bd: 3e:2d:6d:45:b7:9b:d4:6e:d7:53:51:66:34:a0:12: 19:f7:eb:c5:46:75:03:e7:63:56:60:0d:dd:00:3f: db:48:09:46:ca:c8:b2:9b:06:81:ae:ec:fd:bb:32: 57:3b:1e:e6:b4:96:59:91:e9:91:42:14:a7:17:04: 3f:fa:f4:a4:dd:b1:56:7e:2e:5e:f4:cd:e3:13:71: 4f:9b:72:81:93:eb:2b:33:78:fb:b1:9a:72:4e:00: e3:67:d4:6b:c9:6d:dc:b1:94:38:97:8f:8d:87:39: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:69:1F:B9:A2:D6:C6:7D:36:BF:FF:55:E0:4E:A7:DE:DB:81:C6:00 X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:21:c5:97:f2:18:c5:b1:1b:94:f8:ec:2e:2b:a1:65:78: 16:dc:fb:d5:b5:8c:3a:63:40:df:c2:5d:cb:b6:b2:ef:6e:b0: 14:d8:ac:49:7a:5c:a4:51:c9:43:9c:ad:87:05:b6:7a:a2:39: 34:04:45:13:f1:cb:07:e6:28:40:29:10:f3:a4:8e:30:f8:29: 2d:7c:5a:48:d1:e5:27:73:d4:18:11:8d:ea:b6:c6:71:d9:3d: b1:67:c5:d3:f7:3e:5b:ab:a1:50:c5:23:c9:ec:18:10:15:c8: 5d:cc:b9:40:96:47:95:3b:18:43:ae:e2:3a:e5:61:99:99:ee: eb:ca:86:05:e3:78:e5:d2:eb:e8:54:6c:a0:90:f6:20:f8:bc: 52:a7:7f:e7:20:23:43:c1:5c:da:9b:34:90:fd:91:69:63:a7: 36:38:56:68:13:b5:ee:57:18:11:1d:c8:84:e7:e4:17:6e:23: 31:12:15:d1:aa:a7:39:c2:9b:a5:09:95:e5:c7:4e:4e:b8:03: ee:ad:ab:e0:51:c4:cc:e8:42:03:80:92:51:d0:aa:c4:4d:46: a4:6d:51:4b:38:e6:d4:dd:e2:bf:84:27:a6:2d:83:85:c4:0d: 2e:7d:77:79:6f:92:1f:3d:de:87:1e:d1:c0:f8:4c:b5:21:7b: 20:06:17:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjQwNTE5MDEwNDIzWhcNMjQwNTI2MDEwNDIzWjAYMRYwFAYD VQQDEw02NjQ5NTAxNy1mZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdRyzmq4hg1pJv/C9m6/xzo9s3WwKr9sadnjA6Lo06gTrvTxvYXVJzNl8YVp B43im/wvDnJ0uRTVuJDWcubAScmPkSjfZyheYYsW5XDN6zpFm9Rw0QkdXWbnuJV5 0P/Gw+JEx40zuaksiu9AVz8XhCxtoM6LrA7niFcHw1+GUfbzQnnp7O4tY3Tx9LJF Hk9GyS3MJb0+LW1Ft5vUbtdTUWY0oBIZ9+vFRnUD52NWYA3dAD/bSAlGysiymwaB ruz9uzJXOx7mtJZZkemRQhSnFwQ/+vSk3bFWfi5e9M3jE3FPm3KBk+srM3j7sZpy TgDjZ9RryW3csZQ4l4+NhznnJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVpH7mi 1sZ9Nr//VeBOp97bgcYAMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIRiHFl/IYxbEblPjsLiuhZXgW3PvVtYw6Y0Dfwl3LtrLvbrAU2KxJ elykUclDnK2HBbZ6ojk0BEUT8csH5ihAKRDzpI4w+CktfFpI0eUnc9QYEY3qtsZx 2T2xZ8XT9z5bq6FQxSPJ7BgQFchdzLlAlkeVOxhDruI65WGZme7ryoYF43jl0uvo VGygkPYg+LxSp3/nICNDwVzamzSQ/ZFpY6c2OFZoE7XuVxgRHciE5+QXbiMxEhXR qqc5wpulCZXlx05OuAPuravgUcTM6EIDgJJR0KrETUakbVFLOObU3eK/hCemLYOF xA0ufXd5b5IfPd6HHtHA+Ey1IXsgBhcw -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org