$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: 9uLQSTQbDxaR5en2tTHBavOsue3Qclgq6m8/OeuO9rI= Subject key identifier: 3A:59:06:01:EC:CA:B2:B0:12:FF:D2:5D:45:FF:3B:18:28:BC:9B:8D Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 3739 Signing time: Sat 18 May 2024 14:40:51 +0000 Manifest this update: Sat 18 May 2024 14:40:51 +0000 Manifest next update: Sat 25 May 2024 14:40:51 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: uULhgaXQmts++kZounCMYV8i8U743fbdfLV9ryNXFIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: May 18 14:40:51 2024 GMT Not After : May 25 14:40:51 2024 GMT Subject: CN=6648bdf3-f104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:38:47:fb:3e:ce:48:ac:5d:2b:a2:9e:39: 2e:2b:f4:97:49:53:90:5b:c7:a3:b3:86:d8:32:a1: 8b:91:25:ae:87:86:88:09:2b:4a:0e:4c:40:72:29: f0:eb:74:bd:8c:9f:a3:1f:fd:0e:73:de:a6:e5:cf: c7:3f:3f:db:d7:35:14:95:fd:65:71:ea:33:82:0b: c7:c3:a1:3e:f8:08:ed:f4:fa:00:36:13:44:1c:21: b9:6d:01:dc:c8:0f:1e:20:50:b2:e2:ac:14:69:cd: 72:0e:57:10:34:86:33:69:ca:9e:e7:87:de:a8:7e: b2:75:31:a3:a8:31:54:01:87:c5:13:c1:63:98:9c: 0d:d0:c4:10:c0:df:73:e6:3d:6d:3e:c5:dd:9b:74: 3a:3e:70:b3:94:f1:b1:08:63:5a:58:d6:2f:5d:4c: 0c:4a:79:31:10:c1:c9:ea:65:34:dc:d8:61:73:ca: 6d:79:f0:40:17:73:87:b1:1d:93:bb:d2:50:a7:62: da:84:65:32:2e:e5:fe:64:7c:d3:3a:a8:ec:6d:9b: 57:ae:a9:d6:9c:58:2e:5b:52:49:f7:38:28:9d:3c: 0f:f5:50:75:cb:b7:28:70:57:6f:34:0f:46:4a:a4: b5:e0:82:c3:7b:20:bd:2a:b5:07:e9:41:d4:0e:19: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:59:06:01:EC:CA:B2:B0:12:FF:D2:5D:45:FF:3B:18:28:BC:9B:8D X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2c:00:52:5b:98:3c:e1:0d:11:00:82:7b:fc:72:83:c3:45: 00:3e:05:3e:21:25:3b:1b:2c:74:51:e0:fb:ea:c6:1d:e2:a8: f7:db:6d:39:54:1c:0c:09:69:46:e4:22:ba:f5:49:28:c1:90: 6a:df:ef:de:9e:80:7a:df:78:8d:84:5b:b8:ef:1d:ba:1e:b3: 12:c8:27:70:c9:79:1c:51:11:bb:c7:27:98:cf:24:df:9c:53: 8e:11:e9:54:a1:fb:be:27:1d:5e:df:b5:a6:3e:f7:d8:de:c3: 63:e8:75:17:27:f2:6d:31:b6:a1:29:80:5f:cc:55:db:ec:11: f4:20:af:55:30:cf:44:7a:ae:45:cc:35:75:bb:73:dd:e3:ac: e6:a0:71:91:b8:29:20:5c:12:3a:af:7b:b4:7a:25:7f:85:8f: e8:4f:62:9a:37:01:95:0f:5c:07:a5:00:1e:51:70:f1:70:6b: 8f:c4:a2:31:e4:a3:87:33:14:84:f5:f8:21:65:93:33:29:e4: 4d:0d:c7:e8:42:fc:b8:17:84:02:f3:5b:be:21:d9:59:61:84: 3e:7d:b3:6a:41:89:8d:78:53:33:59:6a:fc:d4:ac:e9:b0:f0: 57:6e:7a:35:9d:d8:e6:7e:d5:95:a3:15:5c:42:df:5f:23:75: 53:f1:2b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjQwNTE4MTQ0MDUxWhcNMjQwNTI1MTQ0MDUxWjAYMRYwFAYD VQQDEw02NjQ4YmRmMy1mMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxs4R/s+zkisXSuinjkuK/SXSVOQW8ejs4bYMqGLkSWuh4aICStKDkxAcinw 63S9jJ+jH/0Oc96m5c/HPz/b1zUUlf1lceozggvHw6E++Ajt9PoANhNEHCG5bQHc yA8eIFCy4qwUac1yDlcQNIYzacqe54feqH6ydTGjqDFUAYfFE8FjmJwN0MQQwN9z 5j1tPsXdm3Q6PnCzlPGxCGNaWNYvXUwMSnkxEMHJ6mU03Nhhc8ptefBAF3OHsR2T u9JQp2LahGUyLuX+ZHzTOqjsbZtXrqnWnFguW1JJ9zgonTwP9VB1y7cocFdvNA9G SqS14ILDeyC9KrUH6UHUDhm4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpZBgHs yrKwEv/SXUX/OxgovJuNMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLABSW5g84Q0RAIJ7/HKDw0UAPgU+ISU7Gyx0UeD76sYd4qj32205 VBwMCWlG5CK69UkowZBq3+/enoB633iNhFu47x26HrMSyCdwyXkcURG7xyeYzyTf nFOOEelUofu+Jx1e37WmPvfY3sNj6HUXJ/JtMbahKYBfzFXb7BH0IK9VMM9Eeq5F zDV1u3Pd46zmoHGRuCkgXBI6r3u0eiV/hY/oT2KaNwGVD1wHpQAeUXDxcGuPxKIx 5KOHMxSE9fghZZMzKeRNDcfoQvy4F4QC81u+IdlZYYQ+fbNqQYmNeFMzWWr81Kzp sPBXbno1ndjmftWVoxVcQt9fI3VT8Sva -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org