$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: Oe3ImlAgDG51rqfBwUsOrfwQg5NKmQEMt1ktoKyN5RA= Subject key identifier: 93:AD:13:FF:F6:E3:08:CB:2E:58:58:B4:07:AE:F8:B4:4D:A5:D4:DE Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0353 Signing time: Sun 19 May 2024 02:54:36 +0000 Manifest this update: Sun 19 May 2024 02:54:35 +0000 Manifest next update: Sun 26 May 2024 02:54:35 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: Rat4Tbx+lR76VneNgdwHSqQPo3xEFZ0jSOTH9xs/T1A=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: lzoRu7PAU6kva5pswgNYItUig4xW0or+7Ba0dcJ8VHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: May 19 02:54:35 2024 GMT Not After : May 26 02:54:35 2024 GMT Subject: CN=664969ec-218d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:c9:ef:c9:6e:6a:30:1c:34:aa:48:7c:b6: 5f:77:91:71:c7:08:05:f7:f5:b0:ed:0e:46:07:0a: 4c:ed:66:cd:38:31:3a:92:95:65:ee:7f:47:7a:e4: 67:91:ad:c0:43:b5:30:1b:dd:bc:d7:4a:fc:1e:20: 60:dd:18:b3:a5:5d:bf:9a:d6:92:c4:c7:44:53:aa: 50:f9:22:3a:39:c8:fa:47:0e:c9:3b:74:3d:84:f6: 7e:c8:b7:ef:5f:70:20:80:4a:68:90:31:a7:06:82: 00:4b:78:66:ff:7d:a3:a9:6e:f6:13:10:63:08:36: 55:ff:37:43:db:21:b0:eb:84:85:ff:9a:79:19:0d: d9:80:5f:c3:a2:60:46:b2:75:11:11:6e:ba:ce:ac: 52:34:43:e0:e5:ee:3f:69:7d:09:af:a3:b3:f5:ec: 06:94:17:6b:df:af:6b:ce:56:55:37:5f:96:2b:bb: 8e:3e:f9:15:5b:a2:54:fa:54:c4:4e:c2:83:bf:bd: f9:67:82:bc:e3:f3:70:1d:7b:c3:c0:4d:a4:86:46: 40:96:cb:59:ab:f3:aa:26:97:d6:d1:23:6c:4d:e2: f8:3b:a4:b9:c5:28:c3:01:cd:6b:d8:cf:91:27:e1: bb:44:00:57:13:77:76:5a:1f:3d:ea:82:c1:15:09: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AD:13:FF:F6:E3:08:CB:2E:58:58:B4:07:AE:F8:B4:4D:A5:D4:DE X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:bf:55:ae:20:f9:c9:8f:3a:12:59:38:ee:97:03:19:88:d6: 21:96:95:d4:42:fb:ff:2a:bb:c0:d7:e8:3d:3c:ad:26:6e:c0: aa:29:98:c2:9d:64:ae:97:cb:b4:f2:4f:ca:88:ca:09:a9:a4: 7d:3e:60:2d:29:c7:fd:a1:3a:34:58:7f:81:d1:95:0e:8d:20: dd:87:f0:f2:02:8f:d7:2d:17:49:c9:2c:d3:19:2b:be:17:a1: f1:a9:ad:f6:6d:e0:a1:08:95:75:25:86:73:98:8c:87:bb:38: ce:20:2f:70:d1:c8:67:27:98:bf:e2:f7:92:e9:45:16:aa:e2: 96:74:59:80:c4:64:90:58:7c:3b:5d:e1:d1:ca:d3:5b:3a:e4: 75:57:7d:0b:4f:ee:21:10:2a:5f:ce:a7:6a:b1:a7:d3:87:03: cc:3d:d4:13:55:92:07:08:69:1d:3c:b3:ce:80:fa:c7:1e:c8: 48:86:bc:e0:97:36:e1:07:fd:3c:70:1d:f9:9b:ef:87:57:fa: ac:77:d1:84:0e:fe:94:fa:99:c8:37:6c:2e:17:fd:d8:eb:ae: a5:ab:b5:40:0d:a1:f3:b4:71:18:31:48:93:d4:b5:90:b7:74: f9:d3:7a:36:83:d8:47:c9:14:33:ee:8d:cf:d5:35:5b:4e:75: df:53:c8:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjQwNTE5MDI1NDM1WhcNMjQwNTI2MDI1NDM1WjAYMRYwFAYD VQQDEw02NjQ5NjllYy0yMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu7J78luajAcNKpIfLZfd5FxxwgF9/Ww7Q5GBwpM7WbNODE6kpVl7n9HeuRn ka3AQ7UwG92810r8HiBg3RizpV2/mtaSxMdEU6pQ+SI6Ocj6Rw7JO3Q9hPZ+yLfv X3AggEpokDGnBoIAS3hm/32jqW72ExBjCDZV/zdD2yGw64SF/5p5GQ3ZgF/DomBG snUREW66zqxSNEPg5e4/aX0Jr6Oz9ewGlBdr369rzlZVN1+WK7uOPvkVW6JU+lTE TsKDv735Z4K84/NwHXvDwE2khkZAlstZq/OqJpfW0SNsTeL4O6S5xSjDAc1r2M+R J+G7RABXE3d2Wh896oLBFQnRkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOtE//2 4wjLLlhYtAeu+LRNpdTeMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCov1WuIPnJjzoSWTjulwMZiNYhlpXUQvv/KrvA1+g9PK0mbsCqKZjC nWSul8u08k/KiMoJqaR9PmAtKcf9oTo0WH+B0ZUOjSDdh/DyAo/XLRdJySzTGSu+ F6Hxqa32beChCJV1JYZzmIyHuzjOIC9w0chnJ5i/4veS6UUWquKWdFmAxGSQWHw7 XeHRytNbOuR1V30LT+4hECpfzqdqsafThwPMPdQTVZIHCGkdPLPOgPrHHshIhrzg lzbhB/08cB35m++HV/qsd9GEDv6U+pnIN2wuF/3Y666lq7VADaHztHEYMUiT1LWQ t3T503o2g9hHyRQz7o3P1TVbTnXfU8in -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org