$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json) Hash identifier: wIruR5iJ70X6s3qf116RblkR+mc7pSPMIThBQ6u5BxU= Subject key identifier: E4:CC:6E:2C:EE:D7:14:77:08:CD:E6:D7:4C:8F:39:A2:B4:90:78:99 Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft Manifest number: 0B4C Signing time: Fri 31 May 2024 20:22:38 +0000 Manifest this update: Fri 31 May 2024 20:22:38 +0000 Manifest next update: Fri 07 Jun 2024 20:22:38 +0000 Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: wAONRG0Mfdx3PUCj7OaHybr4UxtxKM5fUAyjW0teq3w=) 2: 6972AE70CBB811ED8583D849C4F9AE02.roa (hash: HN3UyiD2PNkwmfM0Dj37gtn6SCwlGgs7sbn4P47eUas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: May 31 20:22:38 2024 GMT Not After : Jun 7 20:22:38 2024 GMT Subject: CN=665a318e-0736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:4f:a9:ae:f3:23:ff:96:f3:6b:d9:78:f2: cb:04:99:7b:cf:b6:d4:92:52:d9:f1:38:e2:3e:40: 0c:f8:c7:34:3d:f1:0f:c7:ae:cd:38:d0:07:78:30: b5:bf:65:f1:06:47:e8:01:3a:13:c6:9f:7b:2f:f0: 46:a0:5a:c4:f7:a3:67:da:c2:a7:26:7f:b5:31:29: b3:21:14:6a:3c:61:b4:22:78:7c:fb:2d:10:dc:50: 9c:27:68:08:8d:3c:b8:35:50:d1:1f:ea:42:8e:33: 41:77:80:62:be:c8:d1:7c:ba:a0:d5:82:22:eb:73: 4b:f6:1f:12:b0:6f:2f:68:ce:17:bf:8f:89:a7:b5: d2:23:df:50:0c:1f:bf:46:22:25:6c:9a:0c:7b:09: 50:be:f3:04:df:1b:28:26:92:26:a8:78:96:bf:d8: 05:5d:01:6d:ea:42:f6:fe:93:9b:b5:e1:a4:a0:52: 2f:34:24:41:1d:72:9f:d6:3c:de:87:e4:79:d0:2e: e0:01:fa:78:8c:28:0a:c9:a0:bf:db:c2:d9:de:c1: df:9e:d8:ff:e3:b7:71:8c:5a:8a:89:c8:a8:ac:0c: e0:c1:ce:d5:5c:05:86:8c:a8:26:be:57:86:e6:53: 78:6b:04:1d:bb:22:f2:e1:3f:7c:84:cc:5a:55:5a: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:6E:2C:EE:D7:14:77:08:CD:E6:D7:4C:8F:39:A2:B4:90:78:99 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e2:6f:1b:7f:17:e4:7e:6c:de:0e:b5:08:c7:dd:07:cc:cf: 83:20:bb:12:9d:68:83:d2:2f:b8:e4:d2:fc:5f:0f:99:9a:4d: a5:6d:33:c4:ab:34:e7:58:07:1a:9a:9e:6f:20:64:dd:2d:29: cc:7c:6a:4a:54:ae:e9:a4:d3:19:53:9b:17:de:ec:9a:39:b6: 28:4d:1b:e3:19:c9:a9:d4:a6:fc:71:4c:9c:57:cc:71:43:a0: 82:8b:7b:b4:8b:17:9b:8c:fe:54:a8:a4:e7:53:e1:0c:0f:1c: 70:ca:c3:66:90:24:b0:a7:d3:80:fd:f8:b3:b3:fc:c2:21:3a: 47:09:44:00:12:96:c7:8f:44:af:34:c7:23:a2:47:8f:58:0c: d5:c2:ba:c1:fd:eb:58:ab:8f:b8:08:db:ae:f9:18:dd:39:9b: ac:c7:9b:c8:05:9f:46:08:8d:cb:b1:33:68:f5:28:32:8a:60: 1a:2b:cb:08:06:15:59:7d:03:94:77:dc:00:79:3a:91:f2:19: 38:cd:54:ca:40:02:9d:b8:b4:6a:a3:14:82:4a:a0:73:e5:86: 20:d6:6f:92:07:11:fd:c0:f7:47:01:26:dc:69:7b:80:1e:a6: 3a:a2:69:b9:3a:cc:ce:01:d2:e4:72:6f:b0:cf:35:ed:9a:81: 23:d0:0e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjQwNTMxMjAyMjM4WhcNMjQwNjA3MjAyMjM4WjAYMRYwFAYD VQQDEw02NjVhMzE4ZS0wNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu55Pqa7zI/+W82vZePLLBJl7z7bUklLZ8TjiPkAM+Mc0PfEPx67NONAHeDC1 v2XxBkfoAToTxp97L/BGoFrE96Nn2sKnJn+1MSmzIRRqPGG0Inh8+y0Q3FCcJ2gI jTy4NVDRH+pCjjNBd4BivsjRfLqg1YIi63NL9h8SsG8vaM4Xv4+Jp7XSI99QDB+/ RiIlbJoMewlQvvME3xsoJpImqHiWv9gFXQFt6kL2/pObteGkoFIvNCRBHXKf1jze h+R50C7gAfp4jCgKyaC/28LZ3sHfntj/47dxjFqKiciorAzgwc7VXAWGjKgmvleG 5lN4awQduyLy4T98hMxaVVpXDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTMbizu 1xR3CM3m10yPOaK0kHiZMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0 RVlvdFd0VTAySUtQUzVSalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn4m8bfxfkfmzeDrUIx90HzM+DILsSnWiD0i+45NL8Xw+Zmk2lbTPE qzTnWAcamp5vIGTdLSnMfGpKVK7ppNMZU5sX3uyaObYoTRvjGcmp1Kb8cUycV8xx Q6CCi3u0ixebjP5UqKTnU+EMDxxwysNmkCSwp9OA/fizs/zCITpHCUQAEpbHj0Sv NMcjokePWAzVwrrB/etYq4+4CNuu+RjdOZusx5vIBZ9GCI3LsTNo9SgyimAaK8sI BhVZfQOUd9wAeTqR8hk4zVTKQAKduLRqoxSCSqBz5YYg1m+SBxH9wPdHASbcaXuA HqY6omm5OszOAdLkcm+wzzXtmoEj0A7D -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org