$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: j0P7i9o7/FhaTDGWtGl5j84ZsQ4I6FkzWzyCQaA3URI= Subject key identifier: 31:A6:15:88:99:6F:32:7D:30:56:C0:73:B3:3A:4A:FE:6F:66:E5:F0 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 0919 Signing time: Fri 31 May 2024 21:54:31 +0000 Manifest this update: Fri 31 May 2024 21:54:30 +0000 Manifest next update: Fri 07 Jun 2024 21:54:30 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: 6lUqj2UtVd6WyT2vlCsIqdieEFd6PbepI1M6JlgpmEo=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: mK0s5aaGhw640HruFxFwBjktga5oykssMZohcdwwFq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: May 31 21:54:30 2024 GMT Not After : Jun 7 21:54:30 2024 GMT Subject: CN=665a4716-0632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:af:8d:34:e6:08:0e:29:59:c9:ae:5c:59: 4a:8d:b2:f6:e7:9e:c0:73:81:74:38:d8:5b:81:34: 89:9f:8a:35:59:c9:44:89:b4:3f:3a:14:71:8d:52: 0f:7b:d8:d0:a2:4e:24:65:b6:e0:61:23:82:dd:8f: f4:85:47:2e:0d:6f:f8:c4:89:d7:d2:8d:a3:d4:88: a9:40:e5:5f:b4:20:69:b0:08:96:70:99:45:43:d2: 57:54:69:22:64:7c:4c:a2:8f:67:90:ca:aa:3a:b6: 10:9b:89:53:ea:2c:9f:f0:a3:bf:47:2a:fe:39:d1: 21:a8:2c:f4:d4:40:2d:2c:e2:a3:5e:00:02:45:70: 36:18:de:1c:0b:9a:70:0a:64:3c:8e:74:1c:a7:51: b9:7e:24:45:6a:a4:8a:0b:ba:5e:3c:b3:bd:d2:6d: de:7d:43:33:7f:f1:b8:37:18:25:26:53:b9:b6:b6: 90:c4:2d:d2:ff:f4:bd:ac:3e:09:73:71:2a:1e:a7: de:a0:68:5a:a4:ef:cb:29:bf:01:ef:58:c6:8d:4b: 9f:9c:e9:42:da:fc:e2:fa:df:49:6c:11:d1:2e:28: 6f:d9:44:23:38:81:64:04:3f:fd:63:b7:eb:e1:d1: d7:7d:97:5a:e6:eb:98:78:fa:3a:d4:94:d6:39:21: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A6:15:88:99:6F:32:7D:30:56:C0:73:B3:3A:4A:FE:6F:66:E5:F0 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:11:5e:da:91:85:8f:f4:2b:af:f3:36:a3:e8:65:0e:e0:30: 58:a9:e7:8a:69:d4:53:fa:fd:d2:61:55:e5:90:01:85:ba:0d: 6a:e7:21:44:10:f1:4d:85:f4:31:28:29:b3:aa:eb:f0:50:e5: 99:92:05:e2:57:5f:1f:86:dd:1b:5d:2d:50:ee:18:44:0d:b9: 61:b7:f8:07:a8:c9:ed:17:c6:3d:c9:6b:a3:06:12:23:6f:aa: 2e:1a:a5:29:d6:b8:2a:b6:8b:6c:ae:db:33:a6:01:0c:26:8c: b0:9b:95:0a:e6:1a:e7:78:26:94:07:1b:9d:57:2f:ab:37:77: d6:a9:95:ee:48:24:e5:9f:41:23:c3:f5:55:76:52:b5:ae:64: 2e:de:22:cb:10:8e:32:fe:b5:7b:c6:e4:b5:3c:60:1d:5d:fd: 06:cc:22:09:92:29:d6:34:4d:70:d1:c4:22:54:6c:21:3d:3f: 0b:c9:df:a7:7d:6a:1c:47:0a:90:4a:b7:c1:84:4c:26:6f:3b: 9d:2d:6c:55:de:be:7e:c5:b3:21:e1:46:5d:48:df:bd:f0:60: aa:a2:ff:f5:52:03:ad:e0:ee:db:7e:09:4d:db:07:88:db:4e: 5c:b2:12:97:e2:e7:e0:4d:9b:b5:7d:a1:db:84:cb:f7:fe:f3: 36:53:fe:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjQwNTMxMjE1NDMwWhcNMjQwNjA3MjE1NDMwWjAYMRYwFAYD VQQDEw02NjVhNDcxNi0wNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssmvjTTmCA4pWcmuXFlKjbL2557Ac4F0ONhbgTSJn4o1WclEibQ/OhRxjVIP e9jQok4kZbbgYSOC3Y/0hUcuDW/4xInX0o2j1IipQOVftCBpsAiWcJlFQ9JXVGki ZHxMoo9nkMqqOrYQm4lT6iyf8KO/Ryr+OdEhqCz01EAtLOKjXgACRXA2GN4cC5pw CmQ8jnQcp1G5fiRFaqSKC7pePLO90m3efUMzf/G4NxglJlO5traQxC3S//S9rD4J c3EqHqfeoGhapO/LKb8B71jGjUufnOlC2vzi+t9JbBHRLihv2UQjOIFkBD/9Y7fr 4dHXfZda5uuYePo61JTWOSGqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGmFYiZ bzJ9MFbAc7M6Sv5vZuXwMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEEV7akYWP9Cuv8zaj6GUO4DBYqeeKadRT+v3SYVXlkAGFug1q5yFE EPFNhfQxKCmzquvwUOWZkgXiV18fht0bXS1Q7hhEDblht/gHqMntF8Y9yWujBhIj b6ouGqUp1rgqtotsrtszpgEMJoywm5UK5hrneCaUBxudVy+rN3fWqZXuSCTln0Ej w/VVdlK1rmQu3iLLEI4y/rV7xuS1PGAdXf0GzCIJkinWNE1w0cQiVGwhPT8Lyd+n fWocRwqQSrfBhEwmbzudLWxV3r5+xbMh4UZdSN+98GCqov/1UgOt4O7bfglN2weI 205cshKX4ufgTZu1faHbhMv3/vM2U/5c -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:21 2024 by rpki-client on console-ams.rpki-client.org