$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: gFGpqAjLDab0bXB/ctOCI2OqGObVmfoguXSIUG8rGmQ= Subject key identifier: E5:DF:15:B3:87:E3:2E:AA:8C:93:21:AF:3F:A6:49:22:60:DA:21:93 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 09E0 Signing time: Sat 18 May 2024 20:47:21 +0000 Manifest this update: Sat 18 May 2024 20:47:21 +0000 Manifest next update: Sat 25 May 2024 20:47:21 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: ReFLxPo0tBC338CQkOVhzzMKaZUU64WnDwyLrA0/TSM=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: vez5gs+Pt4ya6YLdOueO0QMF6IGNEZr0U1SUVMLX8CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: May 18 20:47:21 2024 GMT Not After : May 25 20:47:21 2024 GMT Subject: CN=664913d9-ad4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:bc:52:96:20:4e:3d:92:a2:ed:79:b5:70: de:29:e7:e6:62:d0:cb:0c:49:c6:c3:c9:49:9a:e9: 0e:71:0a:74:09:3d:a1:50:06:3e:08:d6:33:f9:42: 81:2a:21:9d:0c:77:c1:97:1d:b4:a1:21:8e:bb:bc: 8c:01:8f:05:a0:b8:8e:6a:6d:95:c4:f0:1e:44:a3: 4c:c6:cd:3e:b0:ed:81:b9:57:c7:4d:71:cd:f1:e5: 65:06:56:a6:df:5e:07:dd:52:05:15:49:23:a5:76: eb:b1:a5:59:25:bb:b1:6e:48:07:f6:ee:ae:08:2f: 05:71:66:2e:5e:9f:32:aa:7b:e2:76:a8:26:b5:4c: aa:6e:6c:25:50:27:99:d0:d8:62:a8:c1:fa:b1:05: 0e:3a:31:0b:93:f7:18:fe:42:28:c8:54:83:5e:2c: d8:5e:9d:78:b7:ef:06:5a:13:67:87:23:09:6e:67: f3:81:0c:4e:63:1e:b7:bd:d2:14:07:74:64:ff:b6: 26:e6:1a:4b:38:c6:04:f0:e8:52:01:00:30:a1:26: 59:91:44:0a:c5:ad:f5:f6:0b:e2:15:a6:77:45:71: 19:52:56:8e:b9:7f:4e:e5:e9:2e:7c:c1:0f:64:07: 8e:ed:80:c5:89:6b:f1:39:68:fe:0b:33:9c:6d:1b: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:15:B3:87:E3:2E:AA:8C:93:21:AF:3F:A6:49:22:60:DA:21:93 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ac:e7:79:9c:98:19:26:d0:5c:ff:a1:93:b7:9f:86:15:d5: 48:80:66:65:29:1a:46:c3:31:cd:e8:f4:3e:d0:45:54:83:75: 33:bf:be:77:d1:dc:74:f6:96:e8:4a:1c:8e:9c:21:72:ed:93: 22:74:c6:40:0f:3a:df:6d:78:96:a2:4e:3c:36:c7:2f:53:a0: 3c:52:d9:81:0c:ce:fe:b3:cf:3f:72:60:5b:2e:6d:0f:b2:f3: b4:a7:8e:79:bd:1b:0e:16:9f:bf:59:32:b9:d1:43:ec:72:68: 8b:ab:f8:46:ae:13:11:50:8e:a0:b2:03:1a:5c:22:99:f7:8b: 92:b8:a1:8e:61:b3:aa:f7:17:82:7c:75:88:c5:30:06:ec:6f: e3:c1:08:ac:37:4c:c9:b8:0d:50:e5:e7:0a:42:54:db:2c:6a: 39:bc:e5:97:8b:35:cb:80:52:90:7b:84:24:dd:fa:8e:e1:83: 55:d1:64:9a:38:59:6d:22:ee:87:51:8b:c1:e7:bd:8e:0c:85: 50:7f:66:0b:81:0d:0f:34:9c:77:e2:b6:71:d6:cd:d0:7e:37: 4e:a1:48:f4:0f:aa:c5:08:8f:e7:6f:05:4d:3f:b2:51:56:ec: 33:3a:75:bb:58:38:f7:a5:24:da:0e:97:fe:9a:6f:32:64:54: a6:a0:34:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjQwNTE4MjA0NzIxWhcNMjQwNTI1MjA0NzIxWjAYMRYwFAYD VQQDEw02NjQ5MTNkOS1hZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtce8UpYgTj2Sou15tXDeKefmYtDLDEnGw8lJmukOcQp0CT2hUAY+CNYz+UKB KiGdDHfBlx20oSGOu7yMAY8FoLiOam2VxPAeRKNMxs0+sO2BuVfHTXHN8eVlBlam 314H3VIFFUkjpXbrsaVZJbuxbkgH9u6uCC8FcWYuXp8yqnvidqgmtUyqbmwlUCeZ 0NhiqMH6sQUOOjELk/cY/kIoyFSDXizYXp14t+8GWhNnhyMJbmfzgQxOYx63vdIU B3Rk/7Ym5hpLOMYE8OhSAQAwoSZZkUQKxa319gviFaZ3RXEZUlaOuX9O5ekufMEP ZAeO7YDFiWvxOWj+CzOcbRsGDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXfFbOH 4y6qjJMhrz+mSSJg2iGTMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdrOd5nJgZJtBc/6GTt5+GFdVIgGZlKRpGwzHN6PQ+0EVUg3Uzv753 0dx09pboShyOnCFy7ZMidMZADzrfbXiWok48NscvU6A8UtmBDM7+s88/cmBbLm0P svO0p455vRsOFp+/WTK50UPscmiLq/hGrhMRUI6gsgMaXCKZ94uSuKGOYbOq9xeC fHWIxTAG7G/jwQisN0zJuA1Q5ecKQlTbLGo5vOWXizXLgFKQe4Qk3fqO4YNV0WSa OFltIu6HUYvB572ODIVQf2YLgQ0PNJx34rZx1s3QfjdOoUj0D6rFCI/nbwVNP7JR VuwzOnW7WDj3pSTaDpf+mm8yZFSmoDRU -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org