$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: S/ahCuLdAdUplAnuQgWQ4MbRaMMyazLtIyaFU/9wYeg= Subject key identifier: 2E:F7:8D:E9:20:C8:3A:37:D8:5C:04:77:55:91:CD:AD:BB:7E:C3:86 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 0496 Signing time: Fri 31 May 2024 14:18:49 +0000 Manifest this update: Fri 31 May 2024 14:18:48 +0000 Manifest next update: Fri 07 Jun 2024 14:18:48 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: oaAO7LjyBFQKmLWVxIxCX20zrqkOneHiYE1l6MApU78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: May 31 14:18:48 2024 GMT Not After : Jun 7 14:18:48 2024 GMT Subject: CN=6659dc49-6d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:9b:bb:de:49:72:38:3f:eb:06:13:e7:00: a7:4e:a0:da:ec:8d:9b:f6:d6:e1:ef:11:a3:3a:ad: 7b:15:3c:78:40:bf:92:be:92:4c:16:8e:94:80:ac: 04:51:dc:c5:35:7d:40:03:ce:92:38:d1:16:64:91: bf:82:4c:ef:ad:90:6b:d4:3f:bc:13:fa:a2:80:4b: 6d:99:3e:3e:34:89:6e:14:65:71:47:f1:e2:dd:f6: 8d:b4:18:63:e7:95:7a:b4:c2:c9:0f:cb:2f:0f:46: 76:d4:18:69:60:c7:e9:32:96:cb:19:37:87:61:7f: 8e:d7:d5:81:13:52:3d:7d:77:a3:05:e3:2c:33:9b: d2:c2:6d:d9:04:d7:8b:8a:c7:1c:06:ca:e8:b2:fd: cf:5e:62:25:ec:8b:40:40:8f:32:83:5a:34:bf:09: f5:cb:e8:23:d3:ee:75:22:98:ce:21:2f:a4:3e:29: aa:b3:9d:51:a4:4c:6a:4a:db:8e:d6:48:80:c9:74: e8:c7:f2:72:d8:af:35:2a:d0:97:fb:df:74:69:6f: 9a:38:3b:6e:e4:68:f5:2a:63:02:6c:bb:25:25:83: 54:eb:85:32:49:44:dc:98:dd:70:cc:49:97:d8:23: d1:32:e0:b5:38:87:67:fa:56:f5:06:36:90:e7:6e: ab:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F7:8D:E9:20:C8:3A:37:D8:5C:04:77:55:91:CD:AD:BB:7E:C3:86 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:dc:f7:1c:40:e1:8e:92:d8:39:02:03:f5:ff:c1:af:82: 8d:fa:fb:c7:12:39:af:1c:42:5b:8f:b3:dc:d9:e0:a9:c8:8b: 5d:2e:49:a6:af:38:20:e8:b5:8e:a6:58:ac:ca:b6:05:53:07: 73:af:2e:be:63:aa:52:82:ce:c1:11:a9:5e:a0:49:16:cb:ca: 2e:f5:6f:62:83:81:a5:fe:77:f3:40:67:7b:71:70:0e:12:97: 34:ea:b9:c2:75:85:d6:e2:62:57:1d:df:1a:1f:c9:05:06:51: d0:19:c5:9c:ed:69:bd:a4:e1:05:d6:0f:69:4f:79:73:22:1c: cc:ae:59:7d:04:01:ad:f6:5e:a3:63:47:1b:dc:b4:14:51:96: ff:36:4a:d8:cc:14:ec:78:4d:b9:b3:85:a5:57:d4:6b:61:af: 4b:20:be:55:c2:55:aa:2d:4f:03:c7:4e:90:21:01:d5:44:e6: 40:af:fc:06:40:1c:6f:df:d0:bd:b9:33:fc:c0:2c:90:61:de: 1e:58:94:4c:f8:4d:e0:92:0d:ec:4f:00:f7:45:df:35:2b:2e: 72:53:8c:e0:c8:c8:f9:a9:eb:ab:bf:10:6f:58:54:f3:a7:1f: df:e5:8c:49:58:d3:9d:0c:bf:bb:c1:37:8a:4f:76:c1:d6:ed: 4e:27:f5:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjQwNTMxMTQxODQ4WhcNMjQwNjA3MTQxODQ4WjAYMRYwFAYD VQQDEw02NjU5ZGM0OS02ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjabu95Jcjg/6wYT5wCnTqDa7I2b9tbh7xGjOq17FTx4QL+SvpJMFo6UgKwE UdzFNX1AA86SONEWZJG/gkzvrZBr1D+8E/qigEttmT4+NIluFGVxR/Hi3faNtBhj 55V6tMLJD8svD0Z21BhpYMfpMpbLGTeHYX+O19WBE1I9fXejBeMsM5vSwm3ZBNeL isccBsrosv3PXmIl7ItAQI8yg1o0vwn1y+gj0+51IpjOIS+kPimqs51RpExqStuO 1kiAyXTox/Jy2K81KtCX+990aW+aODtu5Gj1KmMCbLslJYNU64UySUTcmN1wzEmX 2CPRMuC1OIdn+lb1BjaQ526rOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC73jekg yDo32FwEd1WRza27fsOGMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDtz3HEDhjpLYOQID9f/Br4KN+vvHEjmvHEJbj7Pc2eCpyItdLkmm rzgg6LWOplisyrYFUwdzry6+Y6pSgs7BEaleoEkWy8ou9W9ig4Gl/nfzQGd7cXAO Epc06rnCdYXW4mJXHd8aH8kFBlHQGcWc7Wm9pOEF1g9pT3lzIhzMrll9BAGt9l6j Y0cb3LQUUZb/NkrYzBTseE25s4WlV9RrYa9LIL5VwlWqLU8Dx06QIQHVROZAr/wG QBxv39C9uTP8wCyQYd4eWJRM+E3gkg3sTwD3Rd81Ky5yU4zgyMj5qeurvxBvWFTz px/f5YxJWNOdDL+7wTeKT3bB1u1OJ/Xf -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org