$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: SSRiIlVwt9oaKE1QL+xoLgZPh0a8T6bTzv0XBmcL6gs= Subject key identifier: 27:A4:46:9E:FA:B0:B3:EF:65:72:25:DD:7D:4E:48:BB:C9:36:4D:B8 Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 0443 Signing time: Sun 19 May 2024 01:55:52 +0000 Manifest this update: Sun 19 May 2024 01:55:51 +0000 Manifest next update: Sun 26 May 2024 01:55:51 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: 5sOhVDIEeVqM14HC9RiP7UFevnUnEFYCrgtX5LxSwfY=) 2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: cHNaznrXTmiJqba+iHQeSWh9M4ibe/txr0GFchiLiag=) 3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: 2lZgSJf5MYUgZTLkxHvCm5+lrVlmIHxkmDmgsm9hjQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: May 19 01:55:51 2024 GMT Not After : May 26 01:55:51 2024 GMT Subject: CN=66495c27-a44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:9d:94:c3:6e:ea:64:f4:71:95:e6:9c:07: 74:cc:eb:d3:34:db:02:21:a3:41:00:2b:8d:db:d7: 52:df:f5:b5:df:e4:4b:08:48:09:9e:da:b3:e8:e4: c4:66:fa:ef:0c:05:a9:d2:c4:fc:35:be:67:1d:93: 69:af:19:8e:45:7f:25:90:11:eb:15:e9:57:e5:59: 44:12:7a:b3:e0:f2:bc:a0:a8:6b:a8:d8:14:2d:cb: 55:bf:f9:9f:9d:75:ef:b8:ae:54:27:8a:12:f8:36: ca:25:55:0d:4c:16:52:83:d2:ac:ef:4b:d5:94:dc: 38:60:2c:19:ce:be:4c:a2:0e:f9:84:1c:05:02:53: f2:ed:5c:41:80:86:47:75:96:e0:cb:98:17:74:7a: 95:84:29:bf:fe:a5:96:bd:06:9b:df:8c:a1:d0:03: 40:77:0e:78:49:47:32:24:3d:fe:89:85:ae:b5:c4: f2:e3:2e:0d:9e:d6:ed:1a:c1:b2:51:e8:3f:1d:fa: 34:7e:8e:7c:2a:f5:58:d0:07:f2:46:46:c2:d3:e3: 37:9c:55:d0:d7:85:fd:9c:cc:54:e0:15:94:a7:74: 67:6a:b9:bc:98:7e:36:cf:69:f5:e4:a2:af:fb:85: 41:cd:4e:e4:42:5d:83:fe:ac:52:84:66:07:6b:63: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:46:9E:FA:B0:B3:EF:65:72:25:DD:7D:4E:48:BB:C9:36:4D:B8 X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fd:ec:be:8f:22:97:9e:a0:53:8e:c7:fd:99:f3:86:b9:ea: f9:39:00:74:26:91:a4:72:73:13:1c:46:f9:d1:c4:3b:29:dd: 9b:21:21:77:66:75:d4:26:a8:56:fa:8f:93:28:75:30:b3:49: f0:d2:51:0d:f6:5b:41:4a:28:9c:2a:fc:5d:7f:30:39:1d:56: 70:21:a8:d1:eb:b5:9c:36:39:a0:4c:2f:35:89:46:4d:0e:78: 7c:fc:45:09:0c:3a:a9:0d:10:fa:62:4c:60:5b:be:2d:33:39: d9:7a:23:90:c4:ec:22:c7:a2:46:a8:3c:df:34:86:fe:30:d2: 8f:20:7e:68:d7:f2:7b:3c:8e:f7:8f:12:93:80:e6:25:32:61: 03:00:a7:46:aa:23:0d:82:c7:8d:9b:27:7f:0f:1f:ea:2d:f1: be:21:f4:db:19:06:08:d1:ff:f0:03:d6:f2:f3:cb:1d:55:2a: 4b:a2:ec:57:00:f5:12:12:06:55:5f:fd:57:92:3b:71:0f:a8: 15:5e:00:37:a4:64:60:f3:dd:f4:5d:c1:83:6b:f7:c1:77:65: c5:31:43:67:e2:e5:17:7b:d0:fc:75:76:3a:5a:bf:3a:0d:68: 79:04:8a:ea:70:73:2b:ea:33:81:9e:d2:86:5e:49:95:bc:39: f0:38:5a:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjQwNTE5MDE1NTUxWhcNMjQwNTI2MDE1NTUxWjAYMRYwFAYD VQQDEw02NjQ5NWMyNy1hNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05ydlMNu6mT0cZXmnAd0zOvTNNsCIaNBACuN29dS3/W13+RLCEgJntqz6OTE ZvrvDAWp0sT8Nb5nHZNprxmORX8lkBHrFelX5VlEEnqz4PK8oKhrqNgULctVv/mf nXXvuK5UJ4oS+DbKJVUNTBZSg9Ks70vVlNw4YCwZzr5Mog75hBwFAlPy7VxBgIZH dZbgy5gXdHqVhCm//qWWvQab34yh0ANAdw54SUcyJD3+iYWutcTy4y4NntbtGsGy Ueg/Hfo0fo58KvVY0AfyRkbC0+M3nFXQ14X9nMxU4BWUp3Rnarm8mH42z2n15KKv +4VBzU7kQl2D/qxShGYHa2P8nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCekRp76 sLPvZXIl3X1OSLvJNk24MB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/ey+jyKXnqBTjsf9mfOGuer5OQB0JpGkcnMTHEb50cQ7Kd2bISF3 ZnXUJqhW+o+TKHUws0nw0lEN9ltBSiicKvxdfzA5HVZwIajR67WcNjmgTC81iUZN Dnh8/EUJDDqpDRD6YkxgW74tMznZeiOQxOwix6JGqDzfNIb+MNKPIH5o1/J7PI73 jxKTgOYlMmEDAKdGqiMNgseNmyd/Dx/qLfG+IfTbGQYI0f/wA9by88sdVSpLouxX APUSEgZVX/1XkjtxD6gVXgA3pGRg8930XcGDa/fBd2XFMUNn4uUXe9D8dXY6Wr86 DWh5BIrqcHMr6jOBntKGXkmVvDnwOFrf -----END CERTIFICATE-----Generated at Sun May 19 02:59:13 2024 by rpki-client on console-ams.rpki-client.org