$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: yRUtcAnhrxXGTutgpRvRg1eenQ1amApmC5cB0RtKfDw= Subject key identifier: 0A:CA:F8:9A:C9:66:CA:24:53:8C:EA:16:AF:D9:A8:47:11:49:E1:CC Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 88 Signing time: Wed 15 May 2024 07:18:38 +0000 Manifest this update: Wed 15 May 2024 07:18:38 +0000 Manifest next update: Wed 22 May 2024 07:18:38 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: kWISuXlyb+w2lixn8lF5lyOpYAnGiXBfCLUFAjB64l4=) 2: 9442231871C311EEB4110C83C4F9AE02.roa (hash: RtvIzAz3OQMXmKtCEM8uJXJ3YgKWQTlTcQ2ymtWLo7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: May 15 07:18:38 2024 GMT Not After : May 22 07:18:38 2024 GMT Subject: CN=664461ce-56c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ce:f3:57:2b:b7:b6:da:2a:a3:96:6b:c5:20: ae:30:c7:6f:ae:15:c3:8b:18:c5:94:ee:46:e9:e4: 75:94:c7:72:16:7e:01:09:89:ce:83:d4:a0:1b:8a: a8:36:56:20:d8:f6:4f:b7:6d:08:dd:10:d7:88:23: 26:9b:13:17:34:d2:c9:7a:69:25:12:2c:3c:a1:c5: ce:e5:72:9c:3b:a6:d0:3d:65:f6:73:ba:e4:9e:06: 99:e3:70:b7:40:96:f3:69:36:5d:85:12:2d:c7:78: 21:a2:fd:a8:2d:ea:34:f2:5e:c4:87:9d:a8:a6:cd: 30:11:f5:ce:4b:0b:a7:97:db:cf:ec:83:d5:36:50: 53:be:46:91:51:08:5e:6a:2e:60:75:8f:e4:a2:e3: ac:bc:8e:e8:1c:06:f2:0a:39:ef:d1:f5:10:53:37: 16:a4:cc:ec:19:83:1e:87:b7:e1:1e:1c:2f:c9:73: 2f:8c:32:d9:76:e3:53:a8:b6:c6:1b:00:b4:bd:ee: d6:cb:72:70:c3:5d:f6:18:77:6b:7e:cb:cd:04:8e: 92:b8:d4:9e:a4:7f:6c:f8:53:13:a6:fc:69:a9:6d: 0c:a5:1e:e8:b1:8a:ed:ea:28:93:52:8f:31:4b:15: cc:10:b3:00:96:8a:8b:e1:09:d1:3f:0a:c4:17:34: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:F8:9A:C9:66:CA:24:53:8C:EA:16:AF:D9:A8:47:11:49:E1:CC X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:2d:9b:0c:d9:ef:02:5a:bb:21:50:93:60:0d:5d:2e:c1: 6e:3c:92:c0:31:db:b9:31:5a:5c:5a:bf:98:8b:39:ea:17:d1: e6:72:11:ec:1e:c2:b5:6d:ad:62:aa:55:52:55:44:a6:99:26: 72:17:c5:d9:be:48:77:09:58:35:40:b8:12:ee:28:90:e5:82: 58:08:ce:41:38:33:7e:14:0c:14:a4:99:32:af:68:2d:4d:38: 6b:ee:aa:bf:53:df:20:23:db:3c:e8:a1:e0:2d:52:11:9c:d9: dc:20:81:78:ac:55:28:0c:b0:9a:5d:fa:54:b7:20:3b:40:35: c2:aa:22:73:e8:7d:39:ee:ec:2a:55:e8:b6:66:80:b8:d8:c5: 6a:29:3b:ed:46:5f:57:ed:09:17:83:75:4d:d6:c3:39:e6:a9: 7f:0a:36:6d:75:f4:71:c3:d0:07:2a:27:6e:b9:71:11:ca:60: e8:fe:b5:19:11:11:5f:8a:a8:9a:2a:5c:7a:6a:10:93:2a:f2: 4a:a9:f8:fe:fa:b5:b5:ec:5a:9d:03:06:6f:64:d3:30:61:25: 43:58:3b:f3:80:cb:1c:00:90:55:29:f9:94:7c:b6:ae:9f:e9: 9d:35:a4:13:7a:8d:f1:0f:9f:94:6f:d8:b4:e2:a3:ad:38:47: 94:cc:cd:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjQwNTE1MDcxODM4WhcNMjQwNTIyMDcxODM4WjAYMRYwFAYD VQQDEw02NjQ0NjFjZS01NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s7zVyu3ttoqo5ZrxSCuMMdvrhXDixjFlO5G6eR1lMdyFn4BCYnOg9SgG4qo NlYg2PZPt20I3RDXiCMmmxMXNNLJemklEiw8ocXO5XKcO6bQPWX2c7rkngaZ43C3 QJbzaTZdhRItx3ghov2oLeo08l7Eh52ops0wEfXOSwunl9vP7IPVNlBTvkaRUQhe ai5gdY/kouOsvI7oHAbyCjnv0fUQUzcWpMzsGYMeh7fhHhwvyXMvjDLZduNTqLbG GwC0ve7Wy3Jww132GHdrfsvNBI6SuNSepH9s+FMTpvxpqW0MpR7osYrt6iiTUo8x SxXMELMAloqL4QnRPwrEFzQtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArK+JrJ ZsokU4zqFq/ZqEcRSeHMMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBFC2bDNnvAlq7IVCTYA1dLsFuPJLAMdu5MVpcWr+YiznqF9HmchHs HsK1ba1iqlVSVUSmmSZyF8XZvkh3CVg1QLgS7iiQ5YJYCM5BODN+FAwUpJkyr2gt TThr7qq/U98gI9s86KHgLVIRnNncIIF4rFUoDLCaXfpUtyA7QDXCqiJz6H057uwq Vei2ZoC42MVqKTvtRl9X7QkXg3VN1sM55ql/CjZtdfRxw9AHKiduuXERymDo/rUZ ERFfiqiaKlx6ahCTKvJKqfj++rW17FqdAwZvZNMwYSVDWDvzgMscAJBVKfmUfLau n+mdNaQTeo3xD5+Ub9i04qOtOEeUzM0s -----END CERTIFICATE-----Generated at Wed May 15 09:04:06 2024 by rpki-client on console-ams.rpki-client.org