$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: eBOec8gsj2CgT5PBkTGy5AuzQvrfxZzqxuLwWN0+Iw4= Subject key identifier: 3B:2F:0D:E9:54:F7:72:67:4D:DC:5B:EE:19:50:FF:74:2B:D3:B8:9F Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 05F4 Signing time: Sun 05 May 2024 00:09:37 +0000 Manifest this update: Sun 05 May 2024 00:09:37 +0000 Manifest next update: Sun 12 May 2024 00:09:37 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: TmiTtQFqwc7m6NflmJ0vJj6DFd7y3FguwD2hPoq1Fr4=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: GAGLq3SP9PmEM2RBds+zOMxapkoPAz1iFLEjpssH9QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: May 5 00:09:37 2024 GMT Not After : May 12 00:09:37 2024 GMT Subject: CN=6636ce41-025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:df:12:c7:57:b9:1a:9c:a0:8e:a8:f4:7e: 67:66:cd:19:09:6c:69:5a:ca:9a:65:24:fe:8d:5d: 1b:61:60:f8:fb:2c:78:30:7b:96:9b:95:dc:69:75: 94:f5:83:43:a8:73:67:13:26:ed:3d:8e:95:92:1a: fe:60:32:6d:22:f0:0c:e9:91:2b:d8:d6:72:76:23: 0f:d7:70:3f:4c:89:b3:d3:37:eb:f9:97:c6:63:bc: ff:79:95:e0:d7:07:51:d6:08:ca:ab:fd:d9:c9:90: 92:2e:75:10:d8:51:b6:82:24:88:f9:46:5f:fd:25: 77:64:49:2c:da:fd:54:e4:74:67:d8:c4:50:9f:e9: 84:4e:90:cb:bc:11:87:7e:5d:9b:07:68:cc:94:90: 0c:60:7e:ec:17:1b:ed:39:56:ff:4d:b9:cb:22:ec: a3:fa:4c:9b:69:30:8d:3e:ca:41:82:48:f8:cb:d2: 70:7d:70:97:a6:35:77:94:89:a0:8b:e7:ed:57:fa: 1b:db:c5:68:0b:a8:cb:24:2f:ed:f3:29:84:b9:e6: 07:1c:8f:92:9c:27:3a:58:76:3c:83:0b:98:73:13: f8:51:18:55:85:c3:2f:75:7e:6b:7c:5d:55:a1:2d: 98:61:bd:d2:c6:f3:d7:9f:b8:26:a4:b6:f0:28:05: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2F:0D:E9:54:F7:72:67:4D:DC:5B:EE:19:50:FF:74:2B:D3:B8:9F X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ba:8c:7c:b9:10:e3:98:27:16:83:fa:2b:ff:65:5b:c8:91: a7:ba:ad:26:17:7b:db:23:31:7d:bf:6d:eb:05:bf:56:cb:18: a7:1a:4e:7a:a2:95:ed:55:5f:25:51:29:ac:02:c3:b6:53:a9: 13:d6:4d:af:85:62:8c:c1:62:0d:bf:ab:9b:f5:ad:04:0e:27: 5b:57:5c:df:07:d9:cf:37:76:cf:93:2a:79:f4:49:bf:5a:88: b1:e9:91:56:9b:99:15:15:d0:27:b8:3a:f5:9a:2c:18:fe:5c: d2:f2:a7:7f:26:48:7d:75:4c:41:8f:cd:eb:fe:b9:1c:bb:12: b4:a0:c2:0a:e7:70:9c:89:ef:16:58:73:fb:32:8d:33:4b:34: 76:46:b1:63:e4:e2:77:2c:18:84:40:7f:52:64:c7:b4:f6:25: b7:89:90:44:21:58:80:25:be:c0:80:dd:ec:fc:8b:32:3b:b3: 24:15:b2:80:fa:63:c8:98:5c:ff:af:42:9d:78:2d:c3:e8:ed: d6:c1:f9:75:b5:14:0c:e8:b9:30:06:38:27:be:2a:91:62:e1: 98:0d:6f:ab:1a:93:ca:62:c7:29:6c:a2:79:d1:37:16:24:df: 92:e4:e3:19:db:9a:6c:b0:21:d4:10:38:7c:74:91:21:bc:56: 70:dd:1b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjQwNTA1MDAwOTM3WhcNMjQwNTEyMDAwOTM3WjAYMRYwFAYD VQQDEw02NjM2Y2U0MS0wMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sLfEsdXuRqcoI6o9H5nZs0ZCWxpWsqaZST+jV0bYWD4+yx4MHuWm5XcaXWU 9YNDqHNnEybtPY6Vkhr+YDJtIvAM6ZEr2NZydiMP13A/TImz0zfr+ZfGY7z/eZXg 1wdR1gjKq/3ZyZCSLnUQ2FG2giSI+UZf/SV3ZEks2v1U5HRn2MRQn+mETpDLvBGH fl2bB2jMlJAMYH7sFxvtOVb/TbnLIuyj+kybaTCNPspBgkj4y9JwfXCXpjV3lImg i+ftV/ob28VoC6jLJC/t8ymEueYHHI+SnCc6WHY8gwuYcxP4URhVhcMvdX5rfF1V oS2YYb3SxvPXn7gmpLbwKAXGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsvDelU 93JnTdxb7hlQ/3Qr07ifMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uox8uRDjmCcWg/or/2VbyJGnuq0mF3vbIzF9v23rBb9WyxinGk56 opXtVV8lUSmsAsO2U6kT1k2vhWKMwWINv6ub9a0EDidbV1zfB9nPN3bPkyp59Em/ Woix6ZFWm5kVFdAnuDr1miwY/lzS8qd/Jkh9dUxBj83r/rkcuxK0oMIK53Ccie8W WHP7Mo0zSzR2RrFj5OJ3LBiEQH9SZMe09iW3iZBEIViAJb7AgN3s/IsyO7MkFbKA +mPImFz/r0KdeC3D6O3Wwfl1tRQM6LkwBjgnviqRYuGYDW+rGpPKYscpbKJ50TcW JN+S5OMZ25pssCHUEDh8dJEhvFZw3Ruz -----END CERTIFICATE-----Generated at Sun May 5 01:22:18 2024 by rpki-client on console-fra.rpki-client.org