$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: BMqyH7VVxPrzptjzkWdAO0lPi5lfNjp2smEi424i6vw= Subject key identifier: 56:4F:15:B9:41:C9:F5:84:3B:C6:1C:D7:8F:E4:45:C3:A5:66:D5:06 Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 057A Signing time: Sun 19 May 2024 00:40:40 +0000 Manifest this update: Sun 19 May 2024 00:40:39 +0000 Manifest next update: Sun 26 May 2024 00:40:39 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: GNKconDo4A5IXRBFts5x7CTciZ6wmgEYepqcaJs4NdQ=) 2: 8D54D41CFF4A11EBB2CFB65CC4F9AE02.roa (hash: /oai9s0tO9R/CA92gLDGeelZejQBEg1k9ETT577pn5o=) 3: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: faItfTXWER/JJzCTtl0b6vLL/MsAfJNd1RIcbd+oWIM=) 4: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: vegulIKBeHttwdRyvB/2WQ05g6xaaoUGb/GkmzarLJw=) 5: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: wMP9I/AdfA5A2Gu8f07TbNhehTZ7LymaxW1TkEKbA2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: May 19 00:40:39 2024 GMT Not After : May 26 00:40:39 2024 GMT Subject: CN=66494a88-4edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:55:9c:0b:1d:3d:28:01:fc:ee:cf:a9:a8: aa:0b:e7:64:6c:85:24:66:45:40:fe:dc:10:f3:ba: 62:5f:34:01:21:30:5f:5e:4a:5c:14:b5:99:f8:31: aa:3c:b3:08:e0:51:2f:e7:f4:1e:83:bd:e5:4f:13: 96:54:c5:30:43:44:c3:35:1c:ce:c7:fe:11:81:9e: f5:f0:31:36:29:e3:76:dc:c0:71:63:05:24:0b:e1: b2:2c:21:d4:42:65:3e:4e:e3:8a:90:41:42:a5:05: ba:71:55:a4:e1:fe:f7:b4:29:52:50:38:8d:d9:82: 7a:df:1a:c4:e4:13:44:a2:ed:56:82:86:17:fb:4c: 01:78:d1:f8:8e:02:83:12:9a:61:a0:53:8f:70:b9: ab:13:91:29:1b:32:33:d5:f8:33:38:15:62:f1:fe: fe:41:82:c0:71:9d:a5:33:56:9b:ab:65:83:22:1b: 2e:bb:2b:3a:3a:29:cd:35:c4:01:c8:7d:55:d9:bc: f9:46:f7:12:e7:5f:5b:3f:30:63:e7:e3:9d:e2:86: ff:0c:17:26:84:f0:06:cd:ce:4a:2e:15:84:e3:d4: 30:1c:f7:07:a2:0d:3c:8f:ca:f2:f8:70:a9:37:01: 27:b9:0e:e8:97:10:9f:62:60:00:7b:56:64:69:20: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4F:15:B9:41:C9:F5:84:3B:C6:1C:D7:8F:E4:45:C3:A5:66:D5:06 X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:3c:5a:fe:c6:7b:f9:75:52:7b:b9:48:b8:c6:ab:48:82:75: 14:27:a9:1c:79:32:3d:25:a2:ea:f2:74:76:3b:6a:0b:c4:75: 2a:b8:57:a6:b7:43:a0:46:c3:30:ae:d5:e0:70:15:1b:24:02: 5b:4b:4d:22:99:41:88:65:ca:73:f0:06:51:57:c2:bb:0b:ea: 9b:07:10:ae:cd:15:f9:bf:4a:9d:e0:e1:75:55:ee:1f:b3:ec: bc:cc:5c:3b:2c:09:53:86:3b:69:89:88:22:8c:ba:7f:2d:57: d3:d4:4c:fe:7c:1c:19:52:5d:a7:db:67:37:e5:9f:f7:34:45: 3a:8f:4b:e4:44:8e:96:32:dd:12:da:12:cb:78:51:7d:39:27: 59:34:a5:b8:51:17:0e:a7:0f:c2:da:ad:b2:2a:81:b6:f3:5a: d7:cf:1b:cb:5e:50:80:56:a5:05:77:e9:49:b5:74:cb:da:df: 29:2f:0f:00:fe:ae:72:a7:10:7c:e3:3c:75:8d:e8:25:98:40: df:ab:83:d6:85:67:29:ae:79:6d:58:92:43:40:6a:95:e9:50: 22:3b:3f:7a:ae:f8:e3:71:44:2c:47:3c:4a:20:d2:16:25:6e: a8:d2:0a:2d:f8:d1:49:61:0c:06:26:b9:7c:78:2a:16:84:14: b1:5a:cc:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjQwNTE5MDA0MDM5WhcNMjQwNTI2MDA0MDM5WjAYMRYwFAYD VQQDEw02NjQ5NGE4OC00ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTdVnAsdPSgB/O7PqaiqC+dkbIUkZkVA/twQ87piXzQBITBfXkpcFLWZ+DGq PLMI4FEv5/Qeg73lTxOWVMUwQ0TDNRzOx/4RgZ718DE2KeN23MBxYwUkC+GyLCHU QmU+TuOKkEFCpQW6cVWk4f73tClSUDiN2YJ63xrE5BNEou1WgoYX+0wBeNH4jgKD EpphoFOPcLmrE5EpGzIz1fgzOBVi8f7+QYLAcZ2lM1abq2WDIhsuuys6OinNNcQB yH1V2bz5RvcS519bPzBj5+Od4ob/DBcmhPAGzc5KLhWE49QwHPcHog08j8ry+HCp NwEnuQ7olxCfYmAAe1ZkaSA73wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZPFblB yfWEO8Yc14/kRcOlZtUGMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJPFr+xnv5dVJ7uUi4xqtIgnUUJ6kceTI9JaLq8nR2O2oLxHUquFem t0OgRsMwrtXgcBUbJAJbS00imUGIZcpz8AZRV8K7C+qbBxCuzRX5v0qd4OF1Ve4f s+y8zFw7LAlThjtpiYgijLp/LVfT1Ez+fBwZUl2n22c35Z/3NEU6j0vkRI6WMt0S 2hLLeFF9OSdZNKW4URcOpw/C2q2yKoG281rXzxvLXlCAVqUFd+lJtXTL2t8pLw8A /q5ypxB84zx1jeglmEDfq4PWhWcprnltWJJDQGqV6VAiOz96rvjjcUQsRzxKINIW JW6o0got+NFJYQwGJrl8eCoWhBSxWsxo -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org