$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: zbuC3wXfvD8s1IboXag4HnwjDRHT31Cx9eFw2iamhuI= Subject key identifier: 19:30:F7:A0:DF:B7:38:DD:36:D2:4A:A0:12:A4:54:EB:80:FD:33:E9 Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 0719 Signing time: Sat 18 May 2024 22:32:51 +0000 Manifest this update: Sat 18 May 2024 22:32:51 +0000 Manifest next update: Sat 25 May 2024 22:32:51 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: WuL/iHyNrbOuBFWM980xKBrapTTCIPjKblAI1artuU0=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Utfl7NMgZDPAo7Ap86JGiQ0omQLnscWYFE5jxI0jIYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: May 18 22:32:51 2024 GMT Not After : May 25 22:32:51 2024 GMT Subject: CN=66492c93-7237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:f8:92:d3:08:ba:18:97:35:6f:7b:1e:41: 1c:21:dd:14:68:80:f6:77:6b:8a:9d:d1:8f:00:a3: e9:ee:c6:d2:be:7e:89:7f:35:1d:f3:2b:3b:7e:ec: 41:7b:72:0f:19:2d:7a:1d:cf:c5:c7:1a:e2:a8:a7: f4:c2:91:41:ca:b7:65:18:70:fa:0b:9f:f4:98:2b: 5b:c2:16:63:2c:7d:14:bb:57:4e:8b:9c:27:8a:c3: 75:49:db:0a:b6:df:3d:77:79:c4:ce:db:91:04:40: a2:81:49:7a:e3:c9:5d:4f:b7:63:fd:26:b5:9b:f2: 02:b1:ed:de:c2:58:74:a5:66:c7:45:4d:cf:f8:4a: f0:4f:fe:bf:e8:5a:48:28:7e:e5:da:3e:b6:c5:03: 57:16:e0:37:42:69:7b:92:3b:b2:2d:b3:af:a3:8e: a7:b5:87:02:0d:70:85:dc:18:33:76:76:5d:00:0f: ff:54:f4:df:8f:95:df:ed:40:1e:c1:93:e4:60:4c: 1d:1b:9d:29:35:94:dd:e1:cd:25:fd:a2:e0:c6:df: 84:ce:23:6d:ad:bc:46:81:d0:d7:48:4b:0e:ae:1c: 66:24:c8:be:a9:15:95:d3:ff:86:4a:90:28:11:f4: 2b:fd:6b:1c:6d:ba:16:0a:13:1a:09:95:54:6d:70: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:30:F7:A0:DF:B7:38:DD:36:D2:4A:A0:12:A4:54:EB:80:FD:33:E9 X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:94:e2:06:25:cf:42:20:50:1d:2b:cc:1d:7d:72:8e:7a:f3: 37:45:2b:9f:38:1a:43:cc:a2:ae:ef:17:72:77:3b:45:a6:c6: 93:38:05:13:9e:4a:6a:01:28:36:61:4a:35:b9:17:85:c5:6b: 0b:d8:6d:3a:a6:33:3d:91:6c:1b:b7:d6:e4:d3:fa:01:f5:88: 95:fb:f2:cd:ac:80:7d:89:0b:e1:2c:29:6d:84:86:58:28:6b: f8:fb:c3:0b:90:12:3e:16:31:2d:78:a1:9f:ac:f5:e9:b2:1d: 9e:a1:93:7f:73:5e:a2:37:61:57:c4:d8:8c:cb:00:90:27:be: ab:30:51:96:d9:3d:55:f1:7f:a7:42:e2:09:fc:6c:45:15:60: 9a:5c:97:1f:1e:f7:62:a0:f9:6a:39:88:9e:f8:54:83:84:15: 1a:0c:23:62:de:c2:46:be:97:5b:22:70:a6:a0:4b:dc:d2:fe: ed:0e:14:11:c5:cf:cd:9a:35:a6:28:8f:7d:d9:5b:c7:0c:14: 5e:14:a1:9b:57:1b:b5:bf:03:53:3b:a5:18:a0:3f:62:78:27: bf:42:e6:f7:5f:6f:3a:54:9c:7e:84:8b:e9:9f:07:a9:4f:fe: de:da:c9:65:39:05:70:32:7e:a5:9e:88:37:66:97:51:db:30: 7f:68:51:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjQwNTE4MjIzMjUxWhcNMjQwNTI1MjIzMjUxWjAYMRYwFAYD VQQDEw02NjQ5MmM5My03MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+74ktMIuhiXNW97HkEcId0UaID2d2uKndGPAKPp7sbSvn6JfzUd8ys7fuxB e3IPGS16Hc/FxxriqKf0wpFByrdlGHD6C5/0mCtbwhZjLH0Uu1dOi5wnisN1SdsK tt89d3nEztuRBECigUl648ldT7dj/Sa1m/ICse3ewlh0pWbHRU3P+ErwT/6/6FpI KH7l2j62xQNXFuA3Qml7kjuyLbOvo46ntYcCDXCF3BgzdnZdAA//VPTfj5Xf7UAe wZPkYEwdG50pNZTd4c0l/aLgxt+EziNtrbxGgdDXSEsOrhxmJMi+qRWV0/+GSpAo EfQr/WscbboWChMaCZVUbXASZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkw96Df tzjdNtJKoBKkVOuA/TPpMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlOIGJc9CIFAdK8wdfXKOevM3RSufOBpDzKKu7xdydztFpsaTOAUT nkpqASg2YUo1uReFxWsL2G06pjM9kWwbt9bk0/oB9YiV+/LNrIB9iQvhLClthIZY KGv4+8MLkBI+FjEteKGfrPXpsh2eoZN/c16iN2FXxNiMywCQJ76rMFGW2T1V8X+n QuIJ/GxFFWCaXJcfHvdioPlqOYie+FSDhBUaDCNi3sJGvpdbInCmoEvc0v7tDhQR xc/NmjWmKI992VvHDBReFKGbVxu1vwNTO6UYoD9ieCe/Qub3X286VJx+hIvpnwep T/7e2sllOQVwMn6lnog3ZpdR2zB/aFGT -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org