$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: 5XcwxJxx0uRX+Wk10tDJaA9t0I7KVk6VcQnRA2EhE1I= Subject key identifier: 09:4C:AD:8C:06:74:2C:3D:0A:6F:23:28:AD:3B:D6:CA:E5:D9:37:0F Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 0F96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 0F90 Signing time: Sat 18 May 2024 18:06:02 +0000 Manifest this update: Sat 18 May 2024 18:06:02 +0000 Manifest next update: Sat 25 May 2024 18:06:02 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 9tslszyVKvXLC6WE42njd+5lpnrtc8o/YNfNAeQ6/Bs=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 0PS2W/syYUSkz17ljAqjY2hFcw3tUCxxsQacyUzIWb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: May 18 18:06:02 2024 GMT Not After : May 25 18:06:02 2024 GMT Subject: CN=6648ee0a-63e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:c8:5b:fa:d3:3e:89:3f:eb:85:6b:31:43: 58:00:e8:1a:ae:a3:f1:a8:65:9d:22:b4:03:6d:3d: 6e:eb:c3:45:e0:21:68:41:3e:3c:29:da:f2:f9:d6: 08:23:f8:a5:27:02:18:55:fb:62:30:79:38:e4:02: f3:c2:7e:07:50:87:40:9a:ac:34:5a:c4:f4:8f:64: 43:cc:23:de:f1:49:49:a2:10:0d:71:96:d9:13:2a: 10:26:eb:6e:78:9b:d6:bd:eb:f0:d0:9c:01:65:35: e9:13:13:2f:90:f5:5c:00:58:19:28:51:3a:bb:a5: 40:eb:cc:b8:c8:2f:37:44:19:00:82:dc:50:1f:a4: 0a:be:68:06:78:c4:21:fe:5a:b0:33:e9:80:02:a6: da:10:bf:c5:d8:54:aa:01:9a:73:23:47:38:8d:8a: 06:06:19:43:d9:d3:33:c7:c1:2e:56:95:1c:2b:e4: 30:59:47:72:23:cc:80:87:ca:f5:99:21:2b:2d:fa: f1:4c:0e:7e:d1:63:e7:78:29:73:17:72:3e:f3:80: 70:36:76:f9:71:a0:ca:2d:d8:12:00:7b:84:c1:87: 1f:43:76:26:7f:91:80:f9:d2:b4:53:7e:cb:4d:c4: c0:09:4c:76:62:71:f3:c7:2d:39:ca:3a:8c:53:43: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4C:AD:8C:06:74:2C:3D:0A:6F:23:28:AD:3B:D6:CA:E5:D9:37:0F X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8a:f5:79:07:5b:62:44:56:17:77:1c:41:eb:e4:16:83:66: b7:4c:93:7c:e8:20:ab:29:45:75:d2:ec:ab:f3:4c:d0:34:85: 7c:a5:6f:bb:1b:98:96:a7:9a:d1:46:9e:27:d5:93:d3:75:c0: a3:a8:1a:5c:3b:93:cc:72:51:a3:03:b9:c4:40:cd:29:1a:39: fd:a9:e9:01:f3:d0:ac:c6:cd:31:bd:25:97:9f:5c:cb:68:51: c9:01:7d:4a:90:55:6d:09:49:b0:bc:e8:68:2e:ba:26:3d:c1: 83:f2:e5:82:21:75:84:83:c5:65:b0:a7:92:4d:49:b1:19:2d: cc:59:0b:cf:7b:a5:25:c4:d0:1d:f4:a6:1f:3b:83:4f:33:15: 54:be:19:5f:7b:4a:e1:2b:ff:c0:5d:73:92:75:02:1c:4f:53: 18:2f:ce:72:b1:e2:b7:ba:2c:62:51:29:18:1a:c9:ea:41:d4: cc:fd:b8:9a:43:2c:03:7f:90:1e:71:20:2b:18:18:5a:93:54: e5:8f:24:e4:61:57:05:1a:33:5b:2b:e7:df:f4:50:a1:51:ce: 76:f9:92:ea:03:fd:ee:c0:5f:33:49:ce:20:44:44:ef:f9:a8: 35:29:70:01:0f:4b:af:19:9f:39:15:ea:02:37:6b:f4:cd:86: cf:2f:7b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjQwNTE4MTgwNjAyWhcNMjQwNTI1MTgwNjAyWjAYMRYwFAYD VQQDEw02NjQ4ZWUwYS02M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4DIW/rTPok/64VrMUNYAOgarqPxqGWdIrQDbT1u68NF4CFoQT48Kdry+dYI I/ilJwIYVftiMHk45ALzwn4HUIdAmqw0WsT0j2RDzCPe8UlJohANcZbZEyoQJutu eJvWvevw0JwBZTXpExMvkPVcAFgZKFE6u6VA68y4yC83RBkAgtxQH6QKvmgGeMQh /lqwM+mAAqbaEL/F2FSqAZpzI0c4jYoGBhlD2dMzx8EuVpUcK+QwWUdyI8yAh8r1 mSErLfrxTA5+0WPneClzF3I+84BwNnb5caDKLdgSAHuEwYcfQ3Ymf5GA+dK0U37L TcTACUx2YnHzxy05yjqMU0P22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlMrYwG dCw9Cm8jKK071srl2TcPMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcivV5B1tiRFYXdxxB6+QWg2a3TJN86CCrKUV10uyr80zQNIV8pW+7 G5iWp5rRRp4n1ZPTdcCjqBpcO5PMclGjA7nEQM0pGjn9qekB89Csxs0xvSWXn1zL aFHJAX1KkFVtCUmwvOhoLromPcGD8uWCIXWEg8VlsKeSTUmxGS3MWQvPe6UlxNAd 9KYfO4NPMxVUvhlfe0rhK//AXXOSdQIcT1MYL85yseK3uixiUSkYGsnqQdTM/bia QywDf5AecSArGBhak1TljyTkYVcFGjNbK+ff9FChUc52+ZLqA/3uwF8zSc4gRETv +ag1KXABD0uvGZ85FeoCN2v0zYbPL3uo -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org