$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: MeP8caoavM47XhMshBQWmZqI7ONS5AhXySKedrwjp3M= Subject key identifier: CE:A4:D3:D5:50:A2:E5:51:CE:FF:15:A1:AA:75:4B:F4:D5:DD:2E:56 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 093A Signing time: Thu 02 May 2024 21:14:10 +0000 Manifest this update: Thu 02 May 2024 21:14:10 +0000 Manifest next update: Thu 09 May 2024 21:14:10 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: zkPcv7m9Na1/Egb6zOdyfZlgRhSbwJJRSUBIM9b/Ltg=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: pVSiDxsUhJwrE6xbN2uDbGSIus/DmtvNhRjR701jL88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: May 2 21:14:10 2024 GMT Not After : May 9 21:14:10 2024 GMT Subject: CN=66340222-0d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:88:c6:0a:06:c8:ab:ba:a1:0e:49:ca:90: 8e:7f:76:d1:cb:e4:85:b1:a2:cb:6c:41:e9:9a:c4: 7a:8e:54:af:d6:5a:9a:bc:cb:09:b8:9f:b9:84:bd: bc:c0:66:13:d2:5b:b5:ac:34:81:ee:5d:a5:94:26: 21:26:d7:7f:14:3e:f4:9d:21:b5:1f:de:98:95:51: cc:6f:32:5a:f8:e8:d8:91:bb:03:28:d4:d0:b9:44: 0f:1e:c2:79:f4:d3:ad:b8:2b:ae:2e:dd:0b:85:5d: 7e:93:88:f0:30:ce:be:56:38:09:6e:ae:7b:db:46: 0a:e5:ab:5a:ab:a4:45:64:02:54:56:40:a5:78:58: e9:0e:70:65:3c:90:90:ba:83:28:28:c1:aa:25:41: ce:8a:fb:d8:06:35:b8:83:e3:0a:9b:aa:e0:3e:c4: 32:61:82:f8:c2:1f:12:c1:ef:94:d0:d9:a2:01:7b: 93:f9:d0:2e:ea:10:68:1e:8e:df:41:f7:78:f5:89: 75:0d:3b:59:ba:01:54:b1:d7:91:10:8c:71:1f:57: 1b:b8:4e:b7:4c:02:95:75:93:77:ff:96:4e:2e:e6: c4:74:e9:a9:3a:85:75:ac:74:9c:dd:58:5c:d6:33: 5c:c9:e4:35:cf:01:2a:7e:f0:0d:7c:04:61:ec:5c: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:D3:D5:50:A2:E5:51:CE:FF:15:A1:AA:75:4B:F4:D5:DD:2E:56 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2f:cb:2e:b8:c6:63:96:12:fc:14:40:4d:e2:7a:07:c4:ba: 0b:34:28:ab:1d:56:32:4a:85:ee:d3:76:43:ed:6d:ac:0d:ca: be:2a:5b:79:b1:4c:31:88:12:82:2c:48:ba:18:d8:a3:98:20: e7:7a:5e:9d:fb:3b:99:71:ac:2e:8b:ba:6a:62:be:94:09:bc: d9:22:1d:fc:52:f7:6f:74:2e:e1:b2:6b:68:58:ae:38:71:85: ae:1b:c4:bd:50:78:b9:5f:9a:8f:20:65:c0:26:3f:24:33:7e: 44:73:c3:6f:f5:29:aa:ce:24:f7:26:3f:f6:87:62:85:c0:cd: e0:4a:4d:15:69:2b:ed:82:2b:96:42:45:dc:95:25:68:c3:94: 1c:c3:61:d7:d6:a2:65:cc:63:07:b7:cd:0a:34:75:8f:87:f3: 3b:0b:aa:ce:b1:c2:09:91:bd:e9:de:e4:b7:b3:99:bb:aa:b5: 56:23:ce:d9:51:26:a7:24:a9:27:2f:ce:bd:4d:92:be:ea:ff: 98:d4:22:b6:33:df:21:ba:26:a9:49:37:b6:81:f9:4c:a5:f4: 2f:68:93:69:cd:4f:d9:a6:f6:ab:c1:42:03:51:d9:3e:a3:1c: 3b:1d:db:40:d2:ec:77:96:66:26:d9:29:13:ee:93:7e:57:a9: c1:2b:cb:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjQwNTAyMjExNDEwWhcNMjQwNTA5MjExNDEwWjAYMRYwFAYD VQQDEw02NjM0MDIyMi0wZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBaIxgoGyKu6oQ5JypCOf3bRy+SFsaLLbEHpmsR6jlSv1lqavMsJuJ+5hL28 wGYT0lu1rDSB7l2llCYhJtd/FD70nSG1H96YlVHMbzJa+OjYkbsDKNTQuUQPHsJ5 9NOtuCuuLt0LhV1+k4jwMM6+VjgJbq5720YK5ataq6RFZAJUVkCleFjpDnBlPJCQ uoMoKMGqJUHOivvYBjW4g+MKm6rgPsQyYYL4wh8Swe+U0NmiAXuT+dAu6hBoHo7f Qfd49Yl1DTtZugFUsdeREIxxH1cbuE63TAKVdZN3/5ZOLubEdOmpOoV1rHSc3Vhc 1jNcyeQ1zwEqfvANfARh7Fya9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6k09VQ ouVRzv8Voap1S/TV3S5WMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABL8suuMZjlhL8FEBN4noHxLoLNCirHVYySoXu03ZD7W2sDcq+Klt5 sUwxiBKCLEi6GNijmCDnel6d+zuZcawui7pqYr6UCbzZIh38UvdvdC7hsmtoWK44 cYWuG8S9UHi5X5qPIGXAJj8kM35Ec8Nv9SmqziT3Jj/2h2KFwM3gSk0VaSvtgiuW QkXclSVow5Qcw2HX1qJlzGMHt80KNHWPh/M7C6rOscIJkb3p3uS3s5m7qrVWI87Z USanJKknL869TZK+6v+Y1CK2M98huiapSTe2gflMpfQvaJNpzU/ZpvarwUIDUdk+ oxw7HdtA0ux3lmYm2SkT7pN+V6nBK8vm -----END CERTIFICATE-----Generated at Thu May 2 22:13:14 2024 by rpki-client on console-fra.rpki-client.org