$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: RD/Gxk5WChpdCB/CIEyIONLJ2qZPuYtlpMO+x2+J9bM= Subject key identifier: 16:2E:ED:1E:EE:0E:52:C2:78:61:81:7B:30:15:D2:65:72:0C:DD:0A Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 1189 Signing time: Sat 18 May 2024 20:32:43 +0000 Manifest this update: Sat 18 May 2024 20:32:42 +0000 Manifest next update: Sat 25 May 2024 20:32:42 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: U1DCepbWWbjkkVFzewoUcdJBr4qHL3Sdd5YGtUDJibA=) 2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: A98xQV0hpY7nffWC2yCxp0IJLB7RMbyr6IXQBDA8UO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: May 18 20:32:42 2024 GMT Not After : May 25 20:32:42 2024 GMT Subject: CN=6649106a-a58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:07:98:ff:cf:98:ee:f5:9d:5b:cc:f4:2e: a1:c1:81:92:e2:32:03:5a:06:a7:91:2d:fe:dc:eb: b3:ce:a6:58:8b:e7:86:e0:82:c8:18:94:52:fd:80: 4e:2f:b5:e3:41:38:60:90:5e:32:d5:6c:a6:cc:9d: b6:56:b1:c4:9d:eb:0a:b8:5d:c3:25:7c:82:0a:b7: 05:f8:c3:51:23:cd:6f:75:f8:99:61:f0:c1:44:52: a6:0a:f7:ff:29:ed:cd:5e:cc:78:bf:24:7c:c5:e0: be:f7:ef:14:37:20:68:77:a1:de:05:6a:55:d8:71: 51:ef:de:b2:64:a8:a3:9e:89:51:1c:1d:1a:b1:a8: 8a:30:88:70:e8:20:56:d4:6c:3e:f1:1b:d4:71:bc: cc:72:1a:cd:25:d8:68:5b:bf:68:d3:98:3a:95:e1: 10:0e:2d:39:95:2f:10:db:79:be:46:80:04:2d:dc: 10:24:18:4d:f5:98:2a:5e:2c:df:b8:8f:a6:8a:3b: 40:2a:37:18:9d:df:a7:63:e1:fd:26:d7:87:49:d9: 26:a9:b9:72:fa:a6:1b:e4:3b:55:0c:58:44:7c:8b: 4c:07:58:5b:4c:13:b0:3d:f8:d9:62:ec:ad:d2:7f: 86:16:4b:5d:85:e2:55:94:00:0e:d4:79:1c:7f:30: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:ED:1E:EE:0E:52:C2:78:61:81:7B:30:15:D2:65:72:0C:DD:0A X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:19:5d:be:21:e4:0b:70:88:8d:f5:04:0a:d3:0e:dc:c9:d2: d0:d6:31:5e:62:50:5f:9c:57:3a:03:b9:37:89:37:90:16:ae: b7:15:6c:46:d0:a5:5a:bb:ff:68:01:93:fe:67:bd:aa:bc:fa: 23:7b:9d:48:42:47:81:34:b8:2c:21:12:11:4c:5f:d8:31:97: 4e:fe:b3:9d:02:54:3c:a8:8a:12:87:40:c6:04:79:91:f3:46: 48:66:d2:49:05:0c:08:37:02:f3:90:19:b4:d5:8b:29:1d:1c: 58:70:d3:23:3f:50:3c:be:e6:5c:af:7c:8b:6d:28:f2:12:13: 38:bc:e8:87:0e:28:95:f0:f0:b8:e9:9e:30:2c:63:82:51:f8: 48:70:43:45:6b:f8:e3:0e:37:93:30:9b:b2:6d:e6:2c:39:a8: 41:e2:45:46:91:e1:c0:24:db:ec:ff:ee:31:d3:24:fc:29:17: 53:fa:6b:cb:b3:7e:4a:55:8d:fd:64:ed:c2:63:ea:69:f6:18: 5e:3b:2e:73:2e:a2:ae:dc:d6:f0:1a:be:07:35:1a:5a:6e:ca: 5e:46:17:ec:d6:4d:ad:79:6d:52:32:ac:c0:23:40:d6:c4:ab: c6:bc:37:4d:b2:0b:96:bd:4a:4b:9b:ed:f9:1d:a0:4b:1c:d7: 4f:37:05:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjQwNTE4MjAzMjQyWhcNMjQwNTI1MjAzMjQyWjAYMRYwFAYD VQQDEw02NjQ5MTA2YS1hNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQAHmP/PmO71nVvM9C6hwYGS4jIDWgankS3+3OuzzqZYi+eG4ILIGJRS/YBO L7XjQThgkF4y1WymzJ22VrHEnesKuF3DJXyCCrcF+MNRI81vdfiZYfDBRFKmCvf/ Ke3NXsx4vyR8xeC+9+8UNyBod6HeBWpV2HFR796yZKijnolRHB0asaiKMIhw6CBW 1Gw+8RvUcbzMchrNJdhoW79o05g6leEQDi05lS8Q23m+RoAELdwQJBhN9ZgqXizf uI+mijtAKjcYnd+nY+H9JteHSdkmqbly+qYb5DtVDFhEfItMB1hbTBOwPfjZYuyt 0n+GFktdheJVlAAO1HkcfzC2awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYu7R7u DlLCeGGBezAV0mVyDN0KMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGV2+IeQLcIiN9QQK0w7cydLQ1jFeYlBfnFc6A7k3iTeQFq63FWxG 0KVau/9oAZP+Z72qvPoje51IQkeBNLgsIRIRTF/YMZdO/rOdAlQ8qIoSh0DGBHmR 80ZIZtJJBQwINwLzkBm01YspHRxYcNMjP1A8vuZcr3yLbSjyEhM4vOiHDiiV8PC4 6Z4wLGOCUfhIcENFa/jjDjeTMJuybeYsOahB4kVGkeHAJNvs/+4x0yT8KRdT+mvL s35KVY39ZO3CY+pp9hheOy5zLqKu3NbwGr4HNRpabspeRhfs1k2teW1SMqzAI0DW xKvGvDdNsguWvUpLm+35HaBLHNdPNwVv -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org