$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: XSgctJHegv5EmqAlSXUnuMQfQAIGa6dMTYohZw5hFK8= Subject key identifier: 5B:7C:D0:1E:08:FD:32:B0:99:C8:28:99:94:E9:E0:F9:BE:D2:04:E4 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 34 Signing time: Sun 19 May 2024 08:20:37 +0000 Manifest this update: Sun 19 May 2024 08:20:37 +0000 Manifest next update: Sun 26 May 2024 08:20:37 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: El2A5i3E07bgl2UEmRJm0X1Q/jkQLI8ZD+ZL/u3wQQo=) 2: FDC8E95AC95411EEAF356F5BC4F9AE02.roa (hash: rhY7D8mGpDIXxA7UIL7HVpAUImsoeRI+4jGrb3Ziyio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: May 19 08:20:37 2024 GMT Not After : May 26 08:20:37 2024 GMT Subject: CN=6649b655-eccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:f2:26:fc:dd:ca:7c:16:ee:e4:3b:dc:df: ee:ad:e7:d0:72:16:39:bc:4b:87:c7:3b:a9:b1:b9: fa:66:d3:20:f6:2f:15:39:d6:1e:e9:09:6e:e0:64: 99:ce:72:62:92:6f:73:3c:f2:71:05:6e:1e:8c:ef: 78:3d:3b:5f:2b:9c:78:62:0d:01:51:12:4a:2d:a4: 83:f3:54:6a:10:24:2f:38:6f:97:c8:ef:d9:d1:d1: 76:b0:65:68:3e:31:8e:23:e7:f4:1d:52:ee:65:e5: 32:48:cb:c1:78:c0:6a:87:8d:af:36:4c:c9:60:b1: 4c:1f:f9:fc:19:26:0c:a8:2c:16:b7:05:2c:12:b0: 7d:f2:fd:55:10:91:24:08:8e:0d:49:0e:96:0f:76: 98:85:a4:bc:23:2b:63:d5:94:a3:5d:3c:9e:91:af: 1d:09:52:0b:77:cb:39:8e:54:96:63:6f:2f:e6:4c: 62:aa:5f:bb:b4:e2:70:a3:8a:46:4a:bf:c4:e0:3a: 88:31:45:db:5a:bd:04:61:3d:39:53:a1:e2:d6:af: 4a:db:0d:23:b8:9e:12:d6:01:fc:8a:c9:46:67:a8: aa:37:3a:0c:e8:a8:67:ce:6b:d5:a9:4d:0b:9d:97: f5:56:b2:3b:4a:1d:0f:3c:b0:6e:16:70:86:b7:20: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:D0:1E:08:FD:32:B0:99:C8:28:99:94:E9:E0:F9:BE:D2:04:E4 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b1:79:82:e2:40:d2:00:cf:24:49:70:99:db:3b:e4:b4:f9: 6c:26:c6:02:bb:8c:67:34:f3:30:e2:9e:1e:47:40:2c:cd:39: c8:93:a7:69:5a:d1:ae:a5:74:52:cb:6f:11:a5:8e:f1:68:e6: 8d:9a:b9:18:6c:aa:b5:8e:a9:d5:a8:cd:a4:02:ab:cf:aa:da: 5f:ec:43:8b:6a:31:61:3f:ca:8e:8b:33:1c:dd:60:c6:6c:3f: 44:cd:94:ae:dc:f7:3a:5f:61:89:c8:15:37:bf:a1:c4:be:88: 9c:ae:3d:12:79:f8:51:7d:ed:83:38:bd:c3:18:d4:85:5d:8b: 0a:03:11:39:03:be:d8:ea:da:ff:71:92:1e:92:cd:86:95:43: 36:9d:b7:2c:90:11:6d:53:71:09:2c:4f:09:1a:64:87:22:2b: f1:60:f8:21:82:3a:86:ff:8f:d7:aa:00:65:4f:fa:81:a8:11: 4d:2b:17:77:ed:4b:fa:4c:67:17:3f:0c:77:1f:ea:45:c0:f4: 23:03:41:8c:18:98:5e:64:33:ef:37:52:0a:28:1c:6b:e7:1f: c6:5d:1a:f0:99:08:6e:40:1a:8b:1e:e1:33:c4:39:f5:68:fe: d7:33:1a:2a:08:5d:9f:54:fc:48:67:ba:07:5c:a2:01:2d:e1: 26:d6:b2:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDlGOTExMC8GA1UEBRMoOTJFRkQ1QzBCOTIwMUE3RUQzOTY1RjJEOThCNkQ5RUI2 NjI5MDUzMDAeFw0yNDA1MTkwODIwMzdaFw0yNDA1MjYwODIwMzdaMBgxFjAUBgNV BAMTDTY2NDliNjU1LWVjY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfAPIm/N3KfBbu5Dvc3+6t59ByFjm8S4fHO6mxufpm0yD2LxU51h7pCW7gZJnO cmKSb3M88nEFbh6M73g9O18rnHhiDQFREkotpIPzVGoQJC84b5fI79nR0XawZWg+ MY4j5/QdUu5l5TJIy8F4wGqHja82TMlgsUwf+fwZJgyoLBa3BSwSsH3y/VUQkSQI jg1JDpYPdpiFpLwjK2PVlKNdPJ6Rrx0JUgt3yzmOVJZjby/mTGKqX7u04nCjikZK v8TgOogxRdtavQRhPTlToeLWr0rbDSO4nhLWAfyKyUZnqKo3OgzoqGfOa9WpTQud l/VWsjtKHQ88sG4WcIa3IAa7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW3zQHgj9 MrCZyCiZlOng+b7SBOQwHwYDVR0jBBgwFoAUku/VwLkgGn7Tll8tmLbZ62YpBTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEOUY5LzY4NjBENUEwQzk1 MjExRUVCN0FEREQ0RUM0RjlBRTAyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3VfVndMa2dHbjdUbGw4dG1MYlo2MllwQlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE OUY5LzY4NjBENUEwQzk1MjExRUVCN0FEREQ0RUM0RjlBRTAyL2t1X1Z3TGtnR243 VGxsOHRtTGJaNjJZcEJUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHuxeYLiQNIAzyRJcJnbO+S0+WwmxgK7jGc08zDinh5HQCzNOciTp2la 0a6ldFLLbxGljvFo5o2auRhsqrWOqdWozaQCq8+q2l/sQ4tqMWE/yo6LMxzdYMZs P0TNlK7c9zpfYYnIFTe/ocS+iJyuPRJ5+FF97YM4vcMY1IVdiwoDETkDvtjq2v9x kh6SzYaVQzadtyyQEW1TcQksTwkaZIciK/Fg+CGCOob/j9eqAGVP+oGoEU0rF3ft S/pMZxc/DHcf6kXA9CMDQYwYmF5kM+83UgooHGvnH8ZdGvCZCG5AGose4TPEOfVo /tczGioIXZ9U/EhnugdcogEt4SbWsjw= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org