$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: dPdzTBF892w777TcemH4nvmIygVHBzUHhk54GEVlN8I= Subject key identifier: DD:83:0F:1E:10:BB:7E:98:A2:CB:25:14:B6:D4:0F:97:0B:F9:82:6A Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 33DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 33D2 Signing time: Sat 18 May 2024 15:06:38 +0000 Manifest this update: Sat 18 May 2024 15:06:37 +0000 Manifest next update: Sat 25 May 2024 15:06:37 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: 8UvmkDBmVlQm+TeObiaK2PiE2aYkdjf7gmQmpGEfS9U=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: zJHVvC3pRK1yUOEuPWeLlF93Wf3H36BKsW2Vj7FyRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13276 (0x33dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: May 18 15:06:37 2024 GMT Not After : May 25 15:06:37 2024 GMT Subject: CN=6648c3fe-98f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:cb:cd:cd:54:3e:0e:3a:3b:06:18:a9:09: ec:e6:a0:3d:74:d1:61:0e:5c:40:a4:f3:a9:1d:72: 2e:fb:c0:1c:9a:3c:08:f1:ba:60:ad:b5:02:79:6b: be:81:47:23:00:cb:9e:32:81:7d:a1:f0:0a:d6:58: 53:63:85:9c:7d:81:39:d2:9b:d2:92:19:27:2c:fc: 6e:38:c7:8a:55:ef:dc:bc:6a:36:12:4b:e0:96:8e: 64:9f:cc:72:6d:d6:86:ae:c3:f2:2b:54:b5:91:f2: 18:f5:ff:15:84:1c:ba:ee:06:61:f6:7b:1b:86:76: c5:7d:07:f0:33:55:fd:38:28:dd:1f:20:1f:56:91: 07:e4:10:a2:66:7b:59:b3:47:36:ef:26:a3:6c:f1: ba:c6:18:7c:c5:bb:dc:e8:85:f9:9d:e5:60:6d:cc: d6:dc:b5:42:41:17:28:7f:fa:2f:c6:a3:5d:f0:fb: 57:e7:27:78:c6:a5:4f:04:1a:8f:2c:d7:3d:1b:39: 97:b1:14:ed:e8:85:91:dd:86:26:ac:38:8a:83:f3: c0:e5:8e:6a:07:0f:39:6c:c2:da:f1:99:bb:ba:b9: c1:a8:8a:32:3d:71:d5:b1:39:3c:a7:04:41:5e:b9: 45:2d:f3:78:73:19:ab:bf:3d:4a:73:0a:64:65:16: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:0F:1E:10:BB:7E:98:A2:CB:25:14:B6:D4:0F:97:0B:F9:82:6A X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fe:51:7f:bb:71:38:63:02:f9:c3:69:98:ac:a9:32:84:f4: 35:e9:16:f7:b9:0d:c4:8f:10:41:5a:d0:54:15:c3:99:61:b4: 5e:4d:16:0b:89:6d:a9:25:99:bd:63:71:b3:ca:08:58:1f:b8: e8:c5:b5:b1:9b:87:95:bd:20:45:9c:75:62:00:eb:79:6f:4c: b4:2b:ed:ae:97:de:48:8c:91:a9:6c:5b:e0:22:6c:42:13:a9: 41:fc:f2:ec:9c:65:90:82:cf:c6:14:60:5e:a5:b1:53:bb:ab: 33:1a:f4:10:54:67:7e:0b:83:e8:54:e5:96:eb:09:6d:aa:3d: 40:dd:82:6d:b2:29:09:ab:54:e0:ac:8e:0d:a0:32:03:b5:9d: 62:de:c1:f3:f8:27:20:31:24:16:02:7e:66:ea:c1:87:df:c5: ba:15:5b:37:8b:d4:f5:7e:f4:0d:12:e6:fa:1f:18:01:12:fc: f4:92:02:16:3c:71:a7:94:e3:c3:36:a9:3e:e4:06:54:59:39: 69:4b:de:37:c7:61:9a:38:df:ac:36:18:e5:1c:24:2f:13:51: 88:a7:f6:bf:24:b3:93:69:11:85:3e:fa:b1:08:eb:b9:8b:b6: 9b:1f:84:a0:a7:45:b1:7e:a9:39:f7:58:04:ad:9f:bf:36:74: 6d:ae:5f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjQwNTE4MTUwNjM3WhcNMjQwNTI1MTUwNjM3WjAYMRYwFAYD VQQDEw02NjQ4YzNmZS05OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW3Lzc1UPg46OwYYqQns5qA9dNFhDlxApPOpHXIu+8AcmjwI8bpgrbUCeWu+ gUcjAMueMoF9ofAK1lhTY4WcfYE50pvSkhknLPxuOMeKVe/cvGo2Ekvglo5kn8xy bdaGrsPyK1S1kfIY9f8VhBy67gZh9nsbhnbFfQfwM1X9OCjdHyAfVpEH5BCiZntZ s0c27yajbPG6xhh8xbvc6IX5neVgbczW3LVCQRcof/ovxqNd8PtX5yd4xqVPBBqP LNc9GzmXsRTt6IWR3YYmrDiKg/PA5Y5qBw85bMLa8Zm7urnBqIoyPXHVsTk8pwRB XrlFLfN4cxmrvz1KcwpkZRY2/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2DDx4Q u36YosslFLbUD5cL+YJqMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr/lF/u3E4YwL5w2mYrKkyhPQ16Rb3uQ3EjxBBWtBUFcOZYbReTRYL iW2pJZm9Y3GzyghYH7joxbWxm4eVvSBFnHViAOt5b0y0K+2ul95IjJGpbFvgImxC E6lB/PLsnGWQgs/GFGBepbFTu6szGvQQVGd+C4PoVOWW6wltqj1A3YJtsikJq1Tg rI4NoDIDtZ1i3sHz+CcgMSQWAn5m6sGH38W6FVs3i9T1fvQNEub6HxgBEvz0kgIW PHGnlOPDNqk+5AZUWTlpS943x2GaON+sNhjlHCQvE1GIp/a/JLOTaRGFPvqxCOu5 i7abH4Sgp0Wxfqk591gErZ+/NnRtrl+5 -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org