$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: aYBOoDQWUAzd8MQWp6He429oE4Hr1rpyjtjiiFmqxP8= Subject key identifier: 12:ED:28:F2:E7:C2:F0:F7:A1:EF:26:25:D5:E6:A0:D9:10:23:71:AF Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 0F32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 0F19 Signing time: Sat 18 May 2024 18:14:14 +0000 Manifest this update: Sat 18 May 2024 18:14:13 +0000 Manifest next update: Sat 25 May 2024 18:14:13 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: lT1Oqz9PdlG4gFwgwy2X3NhAgtmfzYw/sfEzvHjXZa0=) 2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: ACsXQpxom0pQH2Vh5Nd6SW+Bz96WCY0x99/tX/MXON4=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: kIiy4QiyJyPgWVLPLnRBBrwouU+Qwtr5K3JL2gFahLQ=) 4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: UW2tdhgS2lTmSXFx5LwnRTIQjL4MA8kSOlZtomPSIZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3890 (0xf32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: May 18 18:14:13 2024 GMT Not After : May 25 18:14:13 2024 GMT Subject: CN=6648eff6-257a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:55:79:6e:67:0c:a0:c3:ec:18:85:55:54: ad:1d:cd:9c:c0:9a:86:03:ec:52:f9:45:9e:5f:37: 62:8a:a0:1c:eb:1e:f8:aa:3b:40:17:06:1f:3c:5d: f4:3b:67:ef:1d:fa:89:98:f1:87:6e:73:af:38:27: 6c:06:6b:b0:69:32:52:64:40:d4:8a:2d:0e:34:1a: c8:73:05:2a:8e:ba:90:2f:71:8f:82:a1:3d:19:ad: 60:43:f5:73:4b:a4:aa:a7:f1:b4:54:b0:ee:d6:61: e1:10:7c:ec:bb:65:fe:71:f1:2a:2c:93:57:d2:26: 06:9e:d5:31:97:a6:bf:91:a9:a6:5b:d9:64:c4:da: e4:f5:ef:93:4d:75:cc:12:04:2a:80:f7:8f:3e:2e: c9:b9:d3:7c:83:c7:34:db:88:02:7c:96:6d:86:35: 18:60:96:6b:bf:4f:29:17:eb:2e:3d:96:5b:1d:6a: 98:d8:99:72:89:6b:f7:e7:e4:bc:54:35:ef:65:35: 0c:ce:26:3d:f5:a9:7a:93:0e:77:fd:d7:32:6f:cd: ad:00:30:5f:9e:6d:30:96:fb:c9:c1:a4:11:17:03: b7:0b:07:f7:f7:ca:73:48:f6:07:2f:8e:15:57:f7: f8:d0:09:a6:d4:86:9f:66:d4:78:c5:90:eb:dc:31: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:28:F2:E7:C2:F0:F7:A1:EF:26:25:D5:E6:A0:D9:10:23:71:AF X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b8:b2:7f:43:ed:9a:c1:df:b2:71:ab:13:78:47:b1:e4:0d: e8:3c:b4:9f:bb:0d:20:d4:44:9e:64:86:09:b5:a5:a3:3f:a1: 33:a9:0e:ff:83:9a:12:5f:42:51:9f:e6:cd:97:6d:96:8b:e9: 9f:9b:40:61:61:df:51:51:e6:7d:c8:f9:fe:00:67:d4:68:f8: d9:db:be:2b:58:8a:9a:0e:3f:97:2c:a0:52:43:50:09:d9:f0: 4a:f0:db:85:dd:47:7c:fe:1f:73:eb:f7:dd:51:a1:13:20:a9: e0:a9:70:06:6f:6f:22:89:69:e3:c3:60:8b:95:4b:c3:e4:99: dc:77:ef:b6:53:f5:46:97:65:03:4c:c6:42:e6:45:c2:99:08: 6b:c2:03:27:12:24:54:06:99:be:fb:ef:4d:44:16:aa:9b:f3: 47:40:68:d7:ce:ba:8d:54:15:49:50:cb:c5:3e:96:59:ca:f3: 28:f9:fa:10:f9:4d:b5:8e:bc:eb:5b:28:49:90:cc:df:2e:c1: 8e:a6:74:e6:55:f4:a4:69:b4:6f:27:d4:51:48:64:14:2b:96: 62:53:df:52:a4:82:9e:a4:df:ce:f3:79:ff:cb:e2:87:c9:91: 9c:fb:d5:12:07:69:81:2f:27:2a:61:1f:ff:b3:24:50:9f:05: 07:76:40:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjQwNTE4MTgxNDEzWhcNMjQwNTI1MTgxNDEzWjAYMRYwFAYD VQQDEw02NjQ4ZWZmNi0yNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhNVeW5nDKDD7BiFVVStHc2cwJqGA+xS+UWeXzdiiqAc6x74qjtAFwYfPF30 O2fvHfqJmPGHbnOvOCdsBmuwaTJSZEDUii0ONBrIcwUqjrqQL3GPgqE9Ga1gQ/Vz S6Sqp/G0VLDu1mHhEHzsu2X+cfEqLJNX0iYGntUxl6a/kammW9lkxNrk9e+TTXXM EgQqgPePPi7JudN8g8c024gCfJZthjUYYJZrv08pF+suPZZbHWqY2JlyiWv35+S8 VDXvZTUMziY99al6kw53/dcyb82tADBfnm0wlvvJwaQRFwO3Cwf398pzSPYHL44V V/f40Amm1IafZtR4xZDr3DF6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLtKPLn wvD3oe8mJdXmoNkQI3GvMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeuLJ/Q+2awd+ycasTeEex5A3oPLSfuw0g1ESeZIYJtaWjP6EzqQ7/ g5oSX0JRn+bNl22Wi+mfm0BhYd9RUeZ9yPn+AGfUaPjZ274rWIqaDj+XLKBSQ1AJ 2fBK8NuF3Ud8/h9z6/fdUaETIKngqXAGb28iiWnjw2CLlUvD5Jncd++2U/VGl2UD TMZC5kXCmQhrwgMnEiRUBpm+++9NRBaqm/NHQGjXzrqNVBVJUMvFPpZZyvMo+foQ +U21jrzrWyhJkMzfLsGOpnTmVfSkabRvJ9RRSGQUK5ZiU99SpIKepN/O83n/y+KH yZGc+9USB2mBLycqYR//syRQnwUHdkCq -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org