$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: ZcRsObOg78YHPZbgdgM1lPzjHjNCxSkOYN5dcWIUIH8= Subject key identifier: 62:10:6D:D3:5B:FD:31:F8:20:48:61:3F:68:FE:DB:68:46:92:C0:DC Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 21C9 Signing time: Thu 16 May 2024 16:56:25 +0000 Manifest this update: Thu 16 May 2024 16:56:24 +0000 Manifest next update: Thu 23 May 2024 16:56:24 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: R2cHLhhFdYg+x6gcBex627HSWw9gUSET/DOuSJYEjas=) 2: DECE6146741911EEA071082BC4F9AE02.roa (hash: 9Ni7/ZWlZkeDJupidXjdWe/Kl5z0gq9CHfKZ7IaRMv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: May 16 16:56:24 2024 GMT Not After : May 23 16:56:24 2024 GMT Subject: CN=66463ab9-6bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:36:13:4c:48:8c:74:7f:75:fc:2b:eb:78: 6e:62:b6:80:ca:9f:8d:b2:7b:83:eb:9e:70:f1:74: 5c:10:b7:de:d9:f6:5d:5b:bd:72:4c:d8:82:58:86: 11:ec:07:8e:3f:45:14:18:a8:b1:81:3a:6b:31:39: 8e:59:54:33:fb:2a:7e:30:c9:80:23:1f:f7:30:1d: 55:ed:0c:62:85:a8:29:0e:76:88:7c:2a:54:4b:74: 5d:44:0a:dc:13:78:9e:75:98:f2:b8:a6:97:1b:c7: 5a:b7:62:a2:d7:d4:bf:4a:b4:d2:b2:42:47:6c:89: 0f:85:8d:d4:b1:38:e3:e0:87:c8:3b:c5:0e:65:ea: d9:48:c7:7d:77:63:13:2d:18:bb:dd:ca:d6:88:c0: 31:4d:7d:48:3c:6f:2d:65:da:8f:f8:2d:57:2e:e9: d6:89:e9:fd:7a:e7:46:24:e2:b6:60:2e:07:f3:7d: 9b:5c:e8:ba:2a:73:ef:87:88:1c:12:73:9a:fe:b0: 9d:66:36:e7:e5:0c:bd:54:b3:41:58:4e:32:be:e2: 39:81:75:ff:5a:0f:45:89:5c:8f:cd:45:4c:ff:7e: 06:5d:10:78:03:95:0c:e7:e8:5a:df:ae:2e:f4:fa: f6:f1:db:76:3e:58:9d:e6:e1:14:61:c6:42:bc:93: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:10:6D:D3:5B:FD:31:F8:20:48:61:3F:68:FE:DB:68:46:92:C0:DC X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:a0:d2:8e:cf:0c:90:bd:46:77:77:b2:ac:34:4a:34:d9: c2:a2:54:ab:b9:7e:d3:b1:16:1c:ed:c9:b8:b1:02:0c:16:fc: 7e:2e:fa:b8:30:6d:6b:e1:bc:40:d1:1f:ad:22:28:e1:26:6d: a2:12:1d:54:07:90:ad:18:ac:94:f1:59:9b:b6:8b:a6:5f:2c: 4c:3b:93:87:87:ef:7f:06:56:15:3c:4e:c8:91:8d:89:6d:6c: 41:57:58:6d:76:7d:98:44:c5:90:f4:76:28:33:86:84:e1:51: d3:d4:4e:57:7e:4c:c4:80:77:ed:e2:03:56:9d:0f:c3:e8:c9: 58:01:6c:2c:75:da:db:81:4f:c1:9d:01:5d:81:6d:6a:d1:4c: 60:8c:e5:07:a9:20:d3:ec:e0:4c:72:d8:bf:a3:1d:78:00:e3: 18:f3:e3:2e:40:e1:42:02:d4:35:04:56:67:9a:a8:7e:33:d0: 20:74:15:b4:f3:ab:af:d0:53:30:9d:af:07:bc:da:df:a1:d1: 80:b6:6f:0a:29:3a:ea:04:14:7e:7a:0a:c2:49:f7:d7:87:54: d2:51:3a:20:04:40:b9:9a:77:97:21:61:63:a3:48:cd:26:f4: 7d:98:1b:32:72:d4:81:aa:15:e4:fa:ea:c4:fc:30:09:80:e3: 2c:4d:14:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjQwNTE2MTY1NjI0WhcNMjQwNTIzMTY1NjI0WjAYMRYwFAYD VQQDEw02NjQ2M2FiOS02YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVo2E0xIjHR/dfwr63huYraAyp+NsnuD655w8XRcELfe2fZdW71yTNiCWIYR 7AeOP0UUGKixgTprMTmOWVQz+yp+MMmAIx/3MB1V7QxihagpDnaIfCpUS3RdRArc E3iedZjyuKaXG8dat2Ki19S/SrTSskJHbIkPhY3UsTjj4IfIO8UOZerZSMd9d2MT LRi73crWiMAxTX1IPG8tZdqP+C1XLunWien9eudGJOK2YC4H832bXOi6KnPvh4gc EnOa/rCdZjbn5Qy9VLNBWE4yvuI5gXX/Wg9FiVyPzUVM/34GXRB4A5UM5+ha364u 9Pr28dt2Plid5uEUYcZCvJNzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIQbdNb /TH4IEhhP2j+22hGksDcMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEVqDSjs8MkL1Gd3eyrDRKNNnColSruX7TsRYc7cm4sQIMFvx+Lvq4 MG1r4bxA0R+tIijhJm2iEh1UB5CtGKyU8VmbtoumXyxMO5OHh+9/BlYVPE7IkY2J bWxBV1htdn2YRMWQ9HYoM4aE4VHT1E5XfkzEgHft4gNWnQ/D6MlYAWwsddrbgU/B nQFdgW1q0UxgjOUHqSDT7OBMcti/ox14AOMY8+MuQOFCAtQ1BFZnmqh+M9AgdBW0 86uv0FMwna8HvNrfodGAtm8KKTrqBBR+egrCSffXh1TSUTogBEC5mneXIWFjo0jN JvR9mBsyctSBqhXk+urE/DAJgOMsTRTf -----END CERTIFICATE-----Generated at Thu May 16 18:26:01 2024 by rpki-client on console-fra.rpki-client.org