$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: RPjTG47LVwNFxALKlbP1pf0dBkSKxA/zkTUxVA6OLZE= Subject key identifier: 00:7F:64:24:DA:A8:1E:04:E2:5D:69:59:09:B5:D4:A7:1A:9F:1C:B2 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0965 Signing time: Fri 31 May 2024 21:41:06 +0000 Manifest this update: Fri 31 May 2024 21:41:06 +0000 Manifest next update: Fri 07 Jun 2024 21:41:06 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: qhdDlucAYrGouZm2wGWO6pKMQkg/R489dGObAZRcE/4=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: EJ03yQUcLnyZ8pKLqfNvkrNhpZJMhKPyz+qSkd9zL9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: May 31 21:41:06 2024 GMT Not After : Jun 7 21:41:06 2024 GMT Subject: CN=665a43f2-db79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:3e:6c:00:16:cc:d0:c4:58:d0:42:03:89: a2:0a:d9:cc:a5:53:32:95:d8:a4:c6:39:38:b6:59: dc:17:c8:a8:99:f3:a4:19:9f:c8:51:8b:37:9f:f2: a3:fb:fe:c4:3a:76:5e:97:12:86:e4:31:1c:f7:7f: 6f:0b:19:30:64:8a:3f:6d:ca:d1:f8:50:8d:9e:64: 78:e4:53:69:85:79:a0:65:65:e1:84:bc:4a:34:a0: 81:c8:4b:e6:7a:26:80:d1:a8:16:d8:3c:14:bb:22: 91:85:83:8b:77:f4:8f:3c:08:23:2c:fc:79:6a:4d: 52:cb:ad:d4:86:f5:36:ff:f9:30:a8:7f:07:bd:bf: 7d:ab:ec:ab:00:ff:c4:9d:a1:97:46:f6:a0:3e:81: 70:9c:69:a7:15:38:c6:eb:64:45:97:52:59:05:4f: 89:59:a1:6f:c8:aa:8a:2f:28:42:4f:62:a9:25:5b: 91:20:84:ad:66:03:d7:fb:48:a5:6a:f7:5d:cf:20: e8:c6:1a:bb:18:ef:3d:36:58:2b:01:11:3b:24:9c: 0e:4f:17:c9:25:f3:7a:d2:45:e6:5f:49:54:8a:17: 45:fb:27:2c:f6:a1:90:d5:6f:c3:24:6b:49:7e:5d: e7:e9:e9:d8:a5:ff:15:8d:13:41:a3:27:18:0f:8e: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7F:64:24:DA:A8:1E:04:E2:5D:69:59:09:B5:D4:A7:1A:9F:1C:B2 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:90:84:44:41:ef:ab:4a:d3:4c:a2:86:e9:eb:e2:6e:02:89: 5f:e2:ce:c4:98:99:97:15:82:0a:2d:8e:5a:6b:94:7a:21:31: 1c:03:99:53:1b:9f:90:f3:22:77:11:02:28:96:03:ff:d7:ca: cd:1d:2b:9f:35:67:2e:54:46:4c:54:8b:63:3b:a6:44:2d:d7: 90:0c:f3:42:ae:01:66:83:12:01:23:ed:66:6b:ca:d5:81:ef: 4a:f2:74:2a:25:d0:c6:ec:c0:c0:fa:b0:98:a2:ee:79:3d:d1: 4e:4d:c1:aa:69:33:fb:0c:02:00:89:6a:d1:47:b6:83:d1:41: f0:72:e1:57:05:7d:a7:26:5e:ad:b6:48:82:0d:22:35:a6:b9: a2:c4:8e:f8:ff:e9:5e:8a:5b:02:c0:2f:9f:e8:d1:82:32:3f: 6f:37:a5:28:c2:09:7c:05:41:f7:3e:51:c6:95:72:73:4d:d3: 08:1f:2d:7a:b6:1a:32:99:18:39:4d:ca:dd:f4:00:f5:09:de: 08:dc:fc:b1:b3:b5:e8:16:e5:b1:8d:7e:0f:5a:d2:6c:8e:e7: be:b7:48:72:8f:4b:39:0e:fc:6e:ab:4f:36:6e:08:de:45:08: b4:86:01:69:74:db:2d:a6:79:8b:91:e4:5d:fd:d0:63:71:de: e3:5a:f4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjQwNTMxMjE0MTA2WhcNMjQwNjA3MjE0MTA2WjAYMRYwFAYD VQQDEw02NjVhNDNmMi1kYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrE+bAAWzNDEWNBCA4miCtnMpVMyldikxjk4tlncF8iomfOkGZ/IUYs3n/Kj +/7EOnZelxKG5DEc939vCxkwZIo/bcrR+FCNnmR45FNphXmgZWXhhLxKNKCByEvm eiaA0agW2DwUuyKRhYOLd/SPPAgjLPx5ak1Sy63UhvU2//kwqH8Hvb99q+yrAP/E naGXRvagPoFwnGmnFTjG62RFl1JZBU+JWaFvyKqKLyhCT2KpJVuRIIStZgPX+0il avddzyDoxhq7GO89NlgrARE7JJwOTxfJJfN60kXmX0lUihdF+ycs9qGQ1W/DJGtJ fl3n6enYpf8VjRNBoycYD44TSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB/ZCTa qB4E4l1pWQm11KcanxyyMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkIREQe+rStNMoobp6+JuAolf4s7EmJmXFYIKLY5aa5R6ITEcA5lT G5+Q8yJ3EQIolgP/18rNHSufNWcuVEZMVItjO6ZELdeQDPNCrgFmgxIBI+1ma8rV ge9K8nQqJdDG7MDA+rCYou55PdFOTcGqaTP7DAIAiWrRR7aD0UHwcuFXBX2nJl6t tkiCDSI1prmixI74/+leilsCwC+f6NGCMj9vN6Uowgl8BUH3PlHGlXJzTdMIHy16 thoymRg5Tcrd9AD1Cd4I3Pyxs7XoFuWxjX4PWtJsjue+t0hyj0s5Dvxuq082bgje RQi0hgFpdNstpnmLkeRd/dBjcd7jWvQo -----END CERTIFICATE-----Generated at Fri May 31 22:13:09 2024 by rpki-client on console-fra.rpki-client.org