$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: cekcdzUkqbFF47ITv9cKYpSLDBf05VbcNWq8zo6Gu4s= Subject key identifier: CF:FD:97:B0:27:A2:58:E9:B4:85:FB:63:E1:55:03:D5:AA:B6:9C:83 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 0112 Signing time: Sun 19 May 2024 05:24:26 +0000 Manifest this update: Sun 19 May 2024 05:24:26 +0000 Manifest next update: Sun 26 May 2024 05:24:26 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: L+OPqU6+rTBiWwCOQj+QJWwHoKESKhmDdctUcMzv+Jo=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: cI51PdVy1f19mwNAfjV416qXhIfhzkUloxtYkV6N+9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: May 19 05:24:26 2024 GMT Not After : May 26 05:24:26 2024 GMT Subject: CN=66498d0a-20bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:02:52:cc:4c:9b:cd:67:04:15:00:8e:29: 38:b0:65:11:ae:05:cf:37:df:af:7e:dc:b2:7a:7a: b0:a9:86:0b:a7:9d:f8:74:8c:bd:ab:4e:1b:e4:f3: af:29:b3:85:4e:c6:7a:9d:d0:35:3a:ed:b1:ec:84: ea:7a:b4:31:57:c7:84:3a:09:70:42:58:f8:a9:4a: 18:d7:73:9a:c8:0a:37:93:12:69:9e:76:05:02:bc: 86:bd:b6:e2:d8:90:47:6f:1f:8c:2f:9b:21:b0:f6: 74:e5:5c:70:37:ee:ab:f4:be:71:4f:7c:26:ca:26: 5c:b2:cf:88:37:04:f9:fa:3a:92:29:06:d5:db:b5: 9a:e3:2d:46:46:06:08:77:8f:d8:d5:b9:fc:7d:37: 22:0c:6d:71:6b:42:09:08:fb:51:4c:7b:b8:27:03: f3:99:fd:f7:40:c0:83:1f:85:c9:5c:3b:50:02:3e: 3a:6c:fc:9d:34:0e:cf:a8:c2:4d:a9:88:4d:db:79: 57:3b:89:bb:b0:1e:5c:22:07:21:56:d2:eb:15:d4: cc:e8:90:77:b3:e9:9f:d6:db:a7:4d:78:ad:09:90: b2:22:3a:84:94:46:87:d9:33:3a:65:4e:58:32:f9: 04:cc:22:9f:f4:3a:e2:05:06:28:98:57:b5:fa:d1: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FD:97:B0:27:A2:58:E9:B4:85:FB:63:E1:55:03:D5:AA:B6:9C:83 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ba:87:89:b9:99:64:e8:f6:61:79:ea:f3:63:b7:c3:64:99: 6a:4a:81:97:9c:3f:46:4b:79:93:81:c6:d3:1a:d2:66:89:fe: 8f:16:27:13:5a:1c:2c:32:d8:77:38:85:15:23:4b:ff:8a:40: 37:41:8c:b2:ee:64:c5:fa:d5:8e:3d:7d:7a:00:7b:7d:83:09: a3:64:51:60:31:11:fd:60:65:2b:50:60:b8:01:45:22:fe:35: 4e:f0:f7:3f:67:ba:56:fb:bc:1f:f1:ff:95:c0:bb:cd:c8:e3: 40:8c:0d:a6:80:d3:e8:98:58:de:28:15:f2:35:bc:08:e9:19: 60:68:95:74:f0:d7:15:b3:eb:07:8f:ae:bc:7e:4c:87:67:ed: 89:2f:11:97:a7:c3:33:ad:de:86:3a:a7:3b:b5:1d:1e:1a:93: 61:98:49:bf:39:58:fe:e3:22:ee:f4:0f:b5:93:34:76:3d:e2: bc:20:04:62:be:d7:e6:01:3d:cd:e5:8d:2b:92:ee:5a:d6:b0: ca:69:75:99:ab:10:f6:be:57:51:e9:df:09:2b:14:21:d5:b6: f0:78:9e:21:11:61:9f:67:ab:04:57:1d:e9:22:a0:a3:ce:75: 3d:67:9b:7c:39:31:2b:84:4d:7f:fa:83:d5:0c:23:1e:e5:7c: 91:e5:5e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjQwNTE5MDUyNDI2WhcNMjQwNTI2MDUyNDI2WjAYMRYwFAYD VQQDEw02NjQ5OGQwYS0yMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B4CUsxMm81nBBUAjik4sGURrgXPN9+vftyyenqwqYYLp534dIy9q04b5POv KbOFTsZ6ndA1Ou2x7ITqerQxV8eEOglwQlj4qUoY13OayAo3kxJpnnYFAryGvbbi 2JBHbx+ML5shsPZ05VxwN+6r9L5xT3wmyiZcss+INwT5+jqSKQbV27Wa4y1GRgYI d4/Y1bn8fTciDG1xa0IJCPtRTHu4JwPzmf33QMCDH4XJXDtQAj46bPydNA7PqMJN qYhN23lXO4m7sB5cIgchVtLrFdTM6JB3s+mf1tunTXitCZCyIjqElEaH2TM6ZU5Y MvkEzCKf9DriBQYomFe1+tELIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/9l7An oljptIX7Y+FVA9WqtpyDMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwuoeJuZlk6PZheerzY7fDZJlqSoGXnD9GS3mTgcbTGtJmif6PFicT WhwsMth3OIUVI0v/ikA3QYyy7mTF+tWOPX16AHt9gwmjZFFgMRH9YGUrUGC4AUUi /jVO8Pc/Z7pW+7wf8f+VwLvNyONAjA2mgNPomFjeKBXyNbwI6RlgaJV08NcVs+sH j668fkyHZ+2JLxGXp8Mzrd6GOqc7tR0eGpNhmEm/OVj+4yLu9A+1kzR2PeK8IARi vtfmAT3N5Y0rku5a1rDKaXWZqxD2vldR6d8JKxQh1bbweJ4hEWGfZ6sEVx3pIqCj znU9Z5t8OTErhE1/+oPVDCMe5XyR5V5m -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org