$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: Kiy8MEN/X8R30EPj8+808QXTReI2XRDa+G2KK7G7Cxw= Subject key identifier: 13:EC:76:39:C4:30:CB:17:04:12:8B:F9:CE:E2:6F:2A:0A:9E:00:F2 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 09EB Signing time: Fri 31 May 2024 21:22:17 +0000 Manifest this update: Fri 31 May 2024 21:22:16 +0000 Manifest next update: Fri 07 Jun 2024 21:22:16 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: lw4WoWC+nSqjSHQi/NA0lhJoBfIW7SrUSBFafKkHtqk=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: Rag1aXuB80ACmDGyM69D8d++hcvj12gly6XctNyZFFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: May 31 21:22:16 2024 GMT Not After : Jun 7 21:22:16 2024 GMT Subject: CN=665a3f89-6d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:0b:54:66:7d:82:35:b7:c8:c0:7c:91:94: ac:c8:f5:82:8e:1b:53:bf:c9:58:de:82:6e:19:83: 59:f1:ca:d3:c1:99:bc:4b:46:1a:a6:76:07:e2:3f: ce:4f:e7:98:23:ac:99:04:f6:ef:73:36:e1:5c:cb: b3:ca:d4:1b:2f:8f:d0:54:22:ac:da:58:2e:88:5f: a9:bd:73:60:90:07:f4:b0:9f:5f:7e:45:be:81:3d: 14:a3:bf:c7:2a:27:46:a0:20:d8:66:51:29:ae:97: 2b:e8:c9:3d:92:27:4f:14:f8:81:27:4b:f6:3e:40: 76:8b:b5:02:5e:7f:d4:06:b3:42:dc:7c:6c:48:f1: 95:d5:be:32:6e:2b:65:d2:b3:f0:07:93:68:c3:da: 31:7c:fb:76:94:98:0f:cb:29:83:19:7a:7c:ac:47: c9:b2:ac:af:1d:e8:e8:ea:c5:17:23:18:16:40:02: de:d7:66:c3:83:75:84:6d:3d:e9:2b:10:6d:98:90: 3f:e8:12:70:7c:d9:7a:70:66:9c:d1:aa:fb:12:3c: 9a:35:5c:11:e9:d2:5b:a0:62:c1:b1:8a:32:07:7c: 4f:23:e6:96:2c:69:52:74:e0:07:f6:6d:d0:b2:f8: e0:e1:85:ce:6d:24:2e:ac:a5:d9:38:5a:34:36:c8: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:76:39:C4:30:CB:17:04:12:8B:F9:CE:E2:6F:2A:0A:9E:00:F2 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:84:93:93:fd:20:74:d1:97:a4:10:5c:47:71:1b:a9:5f:d1: 3e:c1:c6:4d:c6:52:44:64:1a:e1:e9:5c:9c:f7:37:ac:42:e4: 22:28:33:9e:f1:ff:f7:70:43:fa:6f:c5:3e:28:5c:99:61:13: d9:8c:d3:b3:c3:be:0c:81:81:99:71:0c:78:70:2e:11:6e:55: ab:c6:df:6e:5b:34:c5:1c:5a:40:3f:4a:55:b4:04:f8:b5:d5: 1f:c4:a8:2a:06:a5:b8:57:e7:a2:07:ac:a2:2e:5b:ef:be:98: 36:6d:8a:15:34:87:79:6a:8a:1f:cc:80:4a:b5:b7:25:ee:e3: d3:d7:9c:97:fd:26:6c:49:97:fb:21:5c:89:4e:47:c3:a9:6c: 06:3e:f3:e4:83:1d:35:94:73:4b:67:fd:fa:96:ac:d9:68:26: 3a:2d:bd:55:c8:e6:75:68:e2:79:ba:bc:55:47:1e:ab:0f:53: 95:52:46:f3:80:e5:19:d3:19:09:94:20:ad:d4:73:af:31:d0: b9:81:f0:3a:e2:b8:cf:ca:17:f5:10:92:e0:db:fe:3e:b3:7c: 72:fc:85:d6:cd:fb:13:76:14:6a:a1:e7:7a:4d:f6:44:68:fa: 43:50:98:6e:c5:74:66:87:be:95:7a:ec:7d:5b:46:0f:0f:d6: 44:d8:52:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjQwNTMxMjEyMjE2WhcNMjQwNjA3MjEyMjE2WjAYMRYwFAYD VQQDEw02NjVhM2Y4OS02ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttwLVGZ9gjW3yMB8kZSsyPWCjhtTv8lY3oJuGYNZ8crTwZm8S0YapnYH4j/O T+eYI6yZBPbvczbhXMuzytQbL4/QVCKs2lguiF+pvXNgkAf0sJ9ffkW+gT0Uo7/H KidGoCDYZlEprpcr6Mk9kidPFPiBJ0v2PkB2i7UCXn/UBrNC3HxsSPGV1b4ybitl 0rPwB5Now9oxfPt2lJgPyymDGXp8rEfJsqyvHejo6sUXIxgWQALe12bDg3WEbT3p KxBtmJA/6BJwfNl6cGac0ar7EjyaNVwR6dJboGLBsYoyB3xPI+aWLGlSdOAH9m3Q svjg4YXObSQurKXZOFo0Nsho7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPsdjnE MMsXBBKL+c7ibyoKngDyMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhJOT/SB00ZekEFxHcRupX9E+wcZNxlJEZBrh6Vyc9zesQuQiKDOe 8f/3cEP6b8U+KFyZYRPZjNOzw74MgYGZcQx4cC4RblWrxt9uWzTFHFpAP0pVtAT4 tdUfxKgqBqW4V+eiB6yiLlvvvpg2bYoVNId5aoofzIBKtbcl7uPT15yX/SZsSZf7 IVyJTkfDqWwGPvPkgx01lHNLZ/36lqzZaCY6Lb1VyOZ1aOJ5urxVRx6rD1OVUkbz gOUZ0xkJlCCt1HOvMdC5gfA64rjPyhf1EJLg2/4+s3xy/IXWzfsTdhRqoed6TfZE aPpDUJhuxXRmh76Veux9W0YPD9ZE2FKq -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:26 2024 by rpki-client on console-ams.rpki-client.org