$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: lHOFA/slaHxRS/NpKKWclh7eozPCwGhrISoDohaKZBE= Subject key identifier: 80:4A:D4:88:46:95:5A:E0:6C:57:78:C7:C8:9D:38:A8:4C:8F:2C:00 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 53 Signing time: Sun 19 May 2024 07:56:49 +0000 Manifest this update: Sun 19 May 2024 07:56:49 +0000 Manifest next update: Sun 26 May 2024 07:56:49 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: L/Nlv51Et1rRDl9y87dYEDWJRqc+Y023r9z8k2aH6UY=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: rw3mF1kHVwPA57QAQF/xTH8uLt+cmuP9Gixunh3VrxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: May 19 07:56:49 2024 GMT Not After : May 26 07:56:49 2024 GMT Subject: CN=6649b0c1-8371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:98:e0:bf:63:bb:25:9a:8b:49:fc:cf:c7: f5:93:07:9b:c4:6f:eb:c8:f6:fd:8a:49:50:14:fd: 17:7c:fe:66:0b:b7:30:e2:87:aa:5c:8b:4a:f4:d5: 4e:a4:06:5c:9b:31:a4:81:92:82:d7:f1:92:c8:a0: 11:b3:53:6d:4c:81:0e:97:24:ac:78:51:1e:2b:8d: 94:e3:8a:6e:d9:1e:be:b6:55:dd:2e:e7:50:c1:c8: 4c:e2:9b:d9:72:b2:d8:6a:81:87:66:e6:9b:a4:e2: fb:db:b4:70:17:df:f4:b8:59:b2:7b:23:71:e4:cb: 8c:c9:ec:8a:f1:9c:d7:13:c5:47:40:38:09:a7:3c: 0e:32:67:6a:12:4e:46:89:b4:27:a0:30:47:ab:a9: 98:ca:1c:e5:ae:32:f0:fd:0c:bd:7a:71:12:d5:89: 41:a8:17:08:b2:bb:d0:1f:b9:83:17:a3:95:04:62: 63:fb:c0:9e:a3:a8:f9:eb:ec:26:be:e3:46:cf:0e: d7:03:47:de:bc:84:37:39:e6:f8:4c:1e:2d:c6:93: 90:a5:e1:e3:4f:17:a1:42:f2:25:ab:0e:13:a7:6f: 8e:a9:d9:18:ec:6e:13:e2:a8:32:20:e0:19:ab:30: da:51:a4:71:bb:61:dc:56:ed:be:02:a2:b0:66:04: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4A:D4:88:46:95:5A:E0:6C:57:78:C7:C8:9D:38:A8:4C:8F:2C:00 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7e:52:2c:d7:6d:fa:0e:d5:fb:55:e3:65:8a:56:51:53:77: 01:fd:a4:68:c9:eb:bf:ae:be:3b:94:a6:14:cf:e7:b1:27:1a: f7:3e:9d:6b:a1:49:36:5c:24:b7:f7:ec:59:a3:2e:4d:ae:a7: 3b:f4:fb:fb:7d:b9:c8:0c:28:b7:af:b5:e1:68:dd:f4:86:af: c7:83:4e:fc:e8:03:c3:53:3c:e2:86:e0:11:83:33:c4:a5:38: 4c:10:61:11:de:23:0c:c0:bb:24:56:b3:68:f2:47:21:60:71: 3d:f4:d9:47:12:7d:e4:ba:c2:cf:66:86:ed:7c:30:ff:7a:84: af:9f:d2:3b:8d:c3:fc:54:16:17:6c:37:2c:c3:4a:4a:83:d9: 5d:cc:7f:df:44:a4:aa:95:f3:2e:97:a2:79:f2:7d:5f:9e:ce: 89:6b:70:d5:8a:b0:4d:48:42:1d:83:f6:95:d3:a9:e6:b1:60: d9:5d:52:09:b0:c5:d4:66:23:79:d0:ad:12:6b:bc:aa:a4:1d: 33:33:85:7e:72:9b:0a:6a:b4:9e:45:32:d4:82:c0:3f:2c:ef: da:ea:8c:39:ce:8f:ac:c4:31:dc:c8:ba:79:b2:93:20:73:24: 5d:22:a0:e3:79:53:dd:4b:61:d4:92:1a:37:3e:98:bf:10:66: 3f:e1:69:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDQ2OTExMC8GA1UEBRMoMjhCQTZFNjg3RjFGQkQ4MzNCOUExM0FBRDhDMTQyQUQ4 RkFGQkNBODAeFw0yNDA1MTkwNzU2NDlaFw0yNDA1MjYwNzU2NDlaMBgxFjAUBgNV BAMTDTY2NDliMGMxLTgzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5IZjgv2O7JZqLSfzPx/WTB5vEb+vI9v2KSVAU/Rd8/mYLtzDih6pci0r01U6k BlybMaSBkoLX8ZLIoBGzU21MgQ6XJKx4UR4rjZTjim7ZHr62Vd0u51DByEzim9ly sthqgYdm5puk4vvbtHAX3/S4WbJ7I3Hky4zJ7IrxnNcTxUdAOAmnPA4yZ2oSTkaJ tCegMEerqZjKHOWuMvD9DL16cRLViUGoFwiyu9AfuYMXo5UEYmP7wJ6jqPnr7Ca+ 40bPDtcDR968hDc55vhMHi3Gk5Cl4eNPF6FC8iWrDhOnb46p2RjsbhPiqDIg4Bmr MNpRpHG7YdxW7b4CorBmBEn5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgErUiEaV WuBsV3jHyJ04qEyPLAAwHwYDVR0jBBgwFoAUKLpuaH8fvYM7mhOq2MFCrY+vvKgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENDY5Lzk3REU3QTdFOUND MjExRUVCMzAyRTA2MUM0RjlBRTAyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZL Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0xwdWFIOGZ2WU03bWhPcTJNRkNyWS12dktnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NDY5Lzk3REU3QTdFOUNDMjExRUVCMzAyRTA2MUM0RjlBRTAyL0tMcHVhSDhmdllN N21oT3EyTUZDclktdnZLZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZ+UizXbfoO1ftV42WKVlFTdwH9pGjJ67+uvjuUphTP57EnGvc+nWuh STZcJLf37FmjLk2upzv0+/t9ucgMKLevteFo3fSGr8eDTvzoA8NTPOKG4BGDM8Sl OEwQYRHeIwzAuyRWs2jyRyFgcT302UcSfeS6ws9mhu18MP96hK+f0juNw/xUFhds NyzDSkqD2V3Mf99EpKqV8y6XonnyfV+ezolrcNWKsE1IQh2D9pXTqeaxYNldUgmw xdRmI3nQrRJrvKqkHTMzhX5ymwpqtJ5FMtSCwD8s79rqjDnOj6zEMdzIunmykyBz JF0ioON5U91LYdSSGjc+mL8QZj/hadc= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org