$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: /4WZhZlIUo/pwbhDF+fgMruPb3mjLr7Ys7rkVSDGo9Y= Subject key identifier: 19:33:56:11:43:08:F8:22:03:BB:87:B2:B5:BE:6F:95:C1:39:43:13 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0C0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0BFD Signing time: Sat 18 May 2024 19:01:17 +0000 Manifest this update: Sat 18 May 2024 19:01:16 +0000 Manifest next update: Sat 25 May 2024 19:01:16 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: QQFhu1oeQP0Vsa2PsWJqGwv3Sruh7O3mPmph+uU7GfE=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: l70W9C7sKwAcMsRhEuSt7Uvtsib+WwKJgxVKjnT8swQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: May 18 19:01:16 2024 GMT Not After : May 25 19:01:16 2024 GMT Subject: CN=6648fafd-54bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:f1:cc:87:02:56:52:de:b6:74:69:c2:fb: d0:2a:22:d4:e2:99:b5:e1:4f:00:dc:48:84:de:c0: ea:b7:2f:1e:22:58:b0:ce:96:95:df:eb:1f:b2:eb: f8:de:a4:77:a4:c4:6e:1e:ba:24:eb:85:f3:d7:92: 13:97:88:fa:3a:4b:4d:39:ee:32:5e:1e:d2:73:e4: 00:82:43:8b:4a:a1:04:2d:a7:fa:e3:ba:2a:76:1c: 22:39:c5:87:d2:cd:54:da:02:c1:e7:93:a5:2e:45: 6f:35:2e:08:25:fb:3c:ee:c9:ec:ce:b2:b8:75:9a: af:f2:ad:0e:79:f5:d0:5d:b5:50:a8:e0:48:ad:39: 5b:46:79:4d:df:1b:a1:29:c8:18:f4:09:c2:84:aa: 71:7f:4f:40:78:13:2e:40:61:ae:32:12:2e:8d:97: 4b:e2:be:4c:9a:f5:f9:e3:ad:14:6f:65:03:e0:6e: b5:a7:1f:ed:89:01:27:ad:1d:5c:0e:ab:49:eb:11: 5a:06:dd:d2:92:a1:ce:8a:c0:23:ba:bb:6b:1d:2c: b0:88:aa:be:fd:dd:b7:d9:09:41:d4:a0:a4:3c:8d: 7a:3a:4b:33:50:b1:65:b9:89:f1:fc:2c:c6:07:c3: b0:2c:55:43:95:5f:67:1f:26:e2:4b:b5:fe:95:19: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:56:11:43:08:F8:22:03:BB:87:B2:B5:BE:6F:95:C1:39:43:13 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b2:4d:93:c7:ae:50:d5:ca:d1:32:c0:b6:01:98:fd:1d:4a: 85:9e:0e:34:0e:c6:13:c1:8e:d1:15:9f:04:81:6c:43:18:ff: a5:cd:76:65:a1:db:9b:fd:82:9a:7b:94:64:3f:b4:e3:67:30: a3:f2:2a:17:af:42:8e:fe:27:87:0c:8d:e3:bf:bc:9e:25:25: d9:e3:c7:a8:be:fb:29:b9:17:4b:a4:62:8f:b9:01:2f:f6:f0: c0:9d:54:6f:7f:3c:d2:c8:b1:d5:80:54:2a:30:93:76:0b:e8: d3:8d:b5:f5:ed:ef:b5:9b:d5:20:c5:16:d5:80:5f:4e:b5:84: 41:b9:b5:2a:48:0a:3b:e2:b7:4e:7d:8f:c4:93:61:cb:07:09: bd:a8:44:18:31:90:e8:18:ca:48:3d:a2:a3:90:b7:f1:27:2e: f7:0e:81:09:2e:cb:74:bb:8d:6d:8e:10:19:30:e5:15:92:9b: 61:30:26:d8:f3:70:ac:e0:70:b3:88:4f:fc:b3:75:56:0a:5a: c7:36:c5:5c:bf:03:60:8a:5d:8e:84:b6:57:48:4f:04:4a:be: 27:5e:1c:52:a5:c2:bc:76:61:ee:b3:5f:11:8f:34:5c:2f:a7: f6:da:b5:ae:6e:a8:38:d4:a9:b1:1d:3e:a5:1a:e6:06:5c:30: c3:95:f1:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjQwNTE4MTkwMTE2WhcNMjQwNTI1MTkwMTE2WjAYMRYwFAYD VQQDEw02NjQ4ZmFmZC01NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnzxzIcCVlLetnRpwvvQKiLU4pm14U8A3EiE3sDqty8eIliwzpaV3+sfsuv4 3qR3pMRuHrok64Xz15ITl4j6OktNOe4yXh7Sc+QAgkOLSqEELaf647oqdhwiOcWH 0s1U2gLB55OlLkVvNS4IJfs87snszrK4dZqv8q0OefXQXbVQqOBIrTlbRnlN3xuh KcgY9AnChKpxf09AeBMuQGGuMhIujZdL4r5MmvX5460Ub2UD4G61px/tiQEnrR1c DqtJ6xFaBt3SkqHOisAjurtrHSywiKq+/d232QlB1KCkPI16OkszULFluYnx/CzG B8OwLFVDlV9nHybiS7X+lRlyEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkzVhFD CPgiA7uHsrW+b5XBOUMTMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmsk2Tx65Q1crRMsC2AZj9HUqFng40DsYTwY7RFZ8EgWxDGP+lzXZl odub/YKae5RkP7TjZzCj8ioXr0KO/ieHDI3jv7yeJSXZ48eovvspuRdLpGKPuQEv 9vDAnVRvfzzSyLHVgFQqMJN2C+jTjbX17e+1m9UgxRbVgF9OtYRBubUqSAo74rdO fY/Ek2HLBwm9qEQYMZDoGMpIPaKjkLfxJy73DoEJLst0u41tjhAZMOUVkpthMCbY 83Cs4HCziE/8s3VWClrHNsVcvwNgil2OhLZXSE8ESr4nXhxSpcK8dmHus18RjzRc L6f22rWubqg41KmxHT6lGuYGXDDDlfGx -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org