$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: BmeLyOgjfXbtUf7rOW6gwOiZzLjpfc8lERe8Cem29f0= Subject key identifier: CE:AC:FC:B3:EF:9A:C0:71:D0:87:B0:5C:40:60:76:55:CB:A2:63:C1 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 02C8 Signing time: Sun 19 May 2024 03:29:16 +0000 Manifest this update: Sun 19 May 2024 03:29:15 +0000 Manifest next update: Sun 26 May 2024 03:29:15 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: L8OFHMX4haWtjpXaUpf4V6n2dnq3JpOzGk4btwp4I78=) 2: CC410D6461AC11EEBFE3B41AC4F9AE02.roa (hash: xz7+1DeBQWjckVJvQZKwNZWeGHOnO8ig32UfOfQKRhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: May 19 03:29:15 2024 GMT Not After : May 26 03:29:15 2024 GMT Subject: CN=6649720c-a746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:8a:b8:8f:ca:a4:03:69:a6:03:e8:56:8a: 09:d7:83:16:da:b7:3e:df:e3:02:92:a8:43:e1:93: 83:c8:d0:0a:ef:6a:8e:b8:fa:c2:32:42:2c:6c:07: 48:33:77:40:93:90:01:46:24:36:f2:c1:98:66:f7: 07:a6:5e:2e:d7:52:5b:e6:99:d3:14:10:36:af:4f: 6f:59:d8:d6:33:18:a6:bc:20:84:eb:78:cc:86:da: fd:3f:95:0d:07:fe:a0:e0:04:9a:cd:a1:d3:eb:b4: 2a:c4:7b:e6:97:1a:31:e4:7a:dc:fb:4a:d6:ab:4a: 2d:4f:38:60:1c:c6:d4:09:91:b9:56:e2:31:cf:f3: 46:d0:c7:04:51:31:20:37:fb:2a:23:f5:69:4d:99: 62:e0:c3:f7:3f:f8:15:48:03:6d:25:3c:bd:58:27: ef:3c:3e:41:91:21:cb:a9:fe:5a:26:03:10:13:82: 21:ce:0d:7f:74:91:5a:72:86:bf:1b:99:44:35:e7: 8a:73:f4:dd:d3:8b:fb:8a:bb:83:b6:2c:2a:86:e3: 09:9e:9b:2e:54:49:fe:a6:5b:e6:55:ab:6a:02:43: 4c:32:2a:aa:ec:3a:4d:b4:25:22:3e:7f:1f:77:e0: b9:35:f9:46:16:ac:9b:e1:18:b4:8e:96:da:72:b1: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AC:FC:B3:EF:9A:C0:71:D0:87:B0:5C:40:60:76:55:CB:A2:63:C1 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:d2:84:ce:47:24:e8:e1:0b:fe:cb:05:f8:ea:1e:90:ee: 2b:35:f4:60:40:97:18:83:e6:b0:af:de:bd:2f:80:57:53:ba: 12:46:56:77:ca:a9:0c:e0:44:2a:f7:c7:25:77:d3:62:76:40: 62:bc:9e:e9:33:2c:e9:00:11:1a:71:24:52:c9:1c:b7:a4:34: 25:c3:9a:0c:d6:ff:7e:9e:3b:83:e1:a7:6f:c0:0b:39:77:09: ca:ac:14:70:a2:80:e5:52:d5:a8:55:d4:92:fd:2d:25:b3:12: a6:89:fa:4b:a5:2e:8c:94:a0:c3:24:cf:c8:79:4a:41:30:65: 62:61:de:28:b5:81:ab:42:1f:48:11:05:79:f3:53:1c:3d:d1: 03:8e:bd:9c:0a:40:dc:5d:53:1a:29:fe:7b:71:6e:64:8f:7a: a7:9e:8d:25:bd:ef:84:fe:cd:8e:49:44:6b:30:80:9c:d2:ed: 04:bb:55:e9:bb:87:86:59:4e:2a:48:f9:85:2f:93:33:8c:2e: fb:cb:ac:50:9d:da:f7:aa:34:9d:13:5b:05:7c:90:a4:c9:02: 13:8c:9b:ff:ac:aa:58:19:eb:d2:29:37:d6:38:d2:1d:7b:e6: e5:8f:09:64:eb:be:53:d7:30:cf:98:e6:d2:9d:50:7a:50:3e: 8e:8e:1f:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjQwNTE5MDMyOTE1WhcNMjQwNTI2MDMyOTE1WjAYMRYwFAYD VQQDEw02NjQ5NzIwYy1hNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8eKuI/KpANppgPoVooJ14MW2rc+3+MCkqhD4ZODyNAK72qOuPrCMkIsbAdI M3dAk5ABRiQ28sGYZvcHpl4u11Jb5pnTFBA2r09vWdjWMximvCCE63jMhtr9P5UN B/6g4ASazaHT67QqxHvmlxox5Hrc+0rWq0otTzhgHMbUCZG5VuIxz/NG0McEUTEg N/sqI/VpTZli4MP3P/gVSANtJTy9WCfvPD5BkSHLqf5aJgMQE4Ihzg1/dJFacoa/ G5lENeeKc/Td04v7iruDtiwqhuMJnpsuVEn+plvmVatqAkNMMiqq7DpNtCUiPn8f d+C5NflGFqyb4Ri0jpbacrE+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6s/LPv msBx0IewXEBgdlXLomPBMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi7dKEzkck6OEL/ssF+OoekO4rNfRgQJcYg+awr969L4BXU7oSRlZ3 yqkM4EQq98cld9NidkBivJ7pMyzpABEacSRSyRy3pDQlw5oM1v9+njuD4advwAs5 dwnKrBRwooDlUtWoVdSS/S0lsxKmifpLpS6MlKDDJM/IeUpBMGViYd4otYGrQh9I EQV581McPdEDjr2cCkDcXVMaKf57cW5kj3qnno0lve+E/s2OSURrMICc0u0Eu1Xp u4eGWU4qSPmFL5MzjC77y6xQndr3qjSdE1sFfJCkyQITjJv/rKpYGevSKTfWONId e+bljwlk675T1zDPmObSnVB6UD6Ojh8P -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org