$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: hwgChPCnw26lJWF7GTWpFTTKLDe6LVQlPQTklCQW9x4= Subject key identifier: A0:3A:68:B7:CE:02:3C:A0:B0:F9:7D:C5:F2:46:4B:CB:FF:91:C0:51 Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 0321 Signing time: Sun 19 May 2024 03:04:58 +0000 Manifest this update: Sun 19 May 2024 03:04:58 +0000 Manifest next update: Sun 26 May 2024 03:04:58 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: Iz0P0Ou2VpCu37bQQIhHhQjs7EU9pBm9W3EX7WwfFf8=) 2: A3E1285880EA11EC9B13735BC4F9AE02.roa (hash: auLsvpyLRgjjhrC/dtzTDNak13fW4h7mYDoTdQuzyQQ=) 3: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: x++ow/ozKQNuOOe+dOBuvM0MJl4sFaxWwuESx1Sn7Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: May 19 03:04:58 2024 GMT Not After : May 26 03:04:58 2024 GMT Subject: CN=66496c5a-a44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:94:3d:f5:0a:fe:de:c1:6e:cc:7d:90:12: 34:e2:e4:5b:53:84:48:b7:df:d1:99:48:95:b0:9a: 83:e1:ff:db:c2:2a:5a:13:92:77:d0:08:29:8b:94: fe:d4:ec:33:f9:5b:43:c6:45:de:75:32:03:21:c0: eb:cc:27:77:37:db:08:14:de:d8:60:c9:a1:0e:a9: fb:bb:dd:aa:5b:1e:34:df:ca:3c:cd:a9:04:8d:1e: 0f:8a:96:d5:28:04:58:03:d4:68:79:91:a6:09:a2: b9:35:1d:4e:4e:33:6e:16:66:53:8e:2f:e4:51:22: 49:4a:18:dd:e6:0d:47:3a:6c:e4:cf:31:1b:0c:b4: 94:e0:4b:8f:df:05:4e:2b:cf:29:44:b5:4d:15:bf: bc:c4:f9:4c:9a:ef:73:65:fe:8c:bf:15:e7:a1:84: b7:33:04:ce:43:ed:b8:e4:38:d6:e9:a5:cc:61:a3: 4d:d1:04:3d:13:b0:01:3f:59:7b:63:a8:38:6d:88: 9c:27:99:0b:2c:bf:bb:ae:73:51:5b:06:7a:13:da: 67:1c:41:88:86:7e:5f:9f:19:3e:94:b0:07:29:92: d2:c0:34:85:87:36:4f:7e:b5:f4:0b:e9:64:f1:00: 97:fc:31:dc:8d:35:5b:5a:ad:d0:a7:aa:b9:1f:3b: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:68:B7:CE:02:3C:A0:B0:F9:7D:C5:F2:46:4B:CB:FF:91:C0:51 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:35:b3:b8:23:f5:a5:99:f1:5f:60:93:3a:a2:52:be:ac:99: 57:e6:18:4e:23:9f:5a:d5:37:a9:ed:fa:71:b7:8a:35:64:29: 67:8b:3b:fa:49:57:14:0b:e5:d4:5a:c2:a2:28:2c:0c:c5:7a: 9e:4f:36:02:8f:e4:45:e6:6f:ac:b3:81:db:f6:c1:d5:81:ec: 5c:20:1a:7c:17:5f:ca:90:43:4a:15:b1:5a:7b:22:de:8d:74: 10:2e:04:a8:0c:0a:b8:e7:61:83:5c:e8:1b:43:7b:27:57:ad: 86:98:a2:ff:75:42:8b:c8:f5:d6:5a:e6:0d:42:76:46:57:52: ed:8f:c9:38:8b:0e:7b:da:be:47:16:4d:4e:0d:09:7b:b3:46: 4b:49:4a:b9:82:b8:50:2d:68:63:62:8c:92:e6:bc:88:97:c3: 30:b4:7c:30:46:d4:01:fc:3c:22:85:2b:bf:81:7e:a8:22:a0: 01:21:68:10:e8:48:79:f1:83:07:cc:9a:a4:3b:3a:d5:b7:29: 9c:e2:91:f2:9d:27:e7:15:08:11:68:32:92:61:00:b0:1f:48: fa:1b:2d:01:d1:79:81:ac:b4:3a:9d:32:b4:9a:1d:24:f0:d8: 66:2e:43:f9:d1:66:6b:95:c7:76:6f:4c:92:09:40:f6:88:5d: 5d:de:07:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjQwNTE5MDMwNDU4WhcNMjQwNTI2MDMwNDU4WjAYMRYwFAYD VQQDEw02NjQ5NmM1YS1hNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBuUPfUK/t7Bbsx9kBI04uRbU4RIt9/RmUiVsJqD4f/bwipaE5J30Agpi5T+ 1Owz+VtDxkXedTIDIcDrzCd3N9sIFN7YYMmhDqn7u92qWx4038o8zakEjR4PipbV KARYA9RoeZGmCaK5NR1OTjNuFmZTji/kUSJJShjd5g1HOmzkzzEbDLSU4EuP3wVO K88pRLVNFb+8xPlMmu9zZf6MvxXnoYS3MwTOQ+245DjW6aXMYaNN0QQ9E7ABP1l7 Y6g4bYicJ5kLLL+7rnNRWwZ6E9pnHEGIhn5fnxk+lLAHKZLSwDSFhzZPfrX0C+lk 8QCX/DHcjTVbWq3Qp6q5HztZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA6aLfO AjygsPl9xfJGS8v/kcBRMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnNbO4I/WlmfFfYJM6olK+rJlX5hhOI59a1Tep7fpxt4o1ZClnizv6 SVcUC+XUWsKiKCwMxXqeTzYCj+RF5m+ss4Hb9sHVgexcIBp8F1/KkENKFbFaeyLe jXQQLgSoDAq452GDXOgbQ3snV62GmKL/dUKLyPXWWuYNQnZGV1Ltj8k4iw572r5H Fk1ODQl7s0ZLSUq5grhQLWhjYoyS5ryIl8MwtHwwRtQB/DwihSu/gX6oIqABIWgQ 6Eh58YMHzJqkOzrVtymc4pHynSfnFQgRaDKSYQCwH0j6Gy0B0XmBrLQ6nTK0mh0k 8NhmLkP50WZrlcd2b0ySCUD2iF1d3geE -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org