$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: EMgQoEjvR6JCdxDp7i0bLokp6cWklpmghUUmp91RnJI= Subject key identifier: 65:0D:2A:D5:A8:E1:64:76:E8:C6:8F:9F:D5:39:9A:CC:40:1E:87:1B Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 010B Signing time: Wed 01 May 2024 05:42:08 +0000 Manifest this update: Wed 01 May 2024 05:42:08 +0000 Manifest next update: Wed 08 May 2024 05:42:08 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: sFKHT8kaFdsWCMFPB+CKp5JDFy6QvVy/bR+MFF+BqrI=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: eUbBDdkLdeYenUKLmnUljE7SJrGekXVsi4VKV+9PjNg=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: cjNUYQjWGv/e65WJQWAvWr4YkFxgRoVsK4Q0fFl+Aec=) 4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 8POm2P67+br1AW6EfcB6Tl6WMfM8KsW8mz0RMDZzK4w=) 5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: XH5unmWwWCdLbJdTx9XdtxFjo8wHLicd3InDS3kED1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 1 05:42:08 2024 GMT Not After : May 8 05:42:08 2024 GMT Subject: CN=6631d630-c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:36:35:59:87:bf:dc:73:99:a6:97:3f:ec: d2:c4:e0:c0:3a:2f:2e:04:50:6b:06:37:d5:c7:7e: e1:b9:03:85:fe:26:85:04:61:b4:1f:7a:b3:f4:5b: 7b:53:2e:0a:57:02:d4:86:9d:7f:4c:ce:b2:2f:fd: d4:ac:b4:7d:07:2b:48:75:00:80:e4:6e:3c:48:6d: 35:95:db:16:28:ee:99:e2:df:da:8f:68:fb:ff:9d: 76:e9:2d:00:2e:62:f1:52:0e:8d:f7:35:90:20:6a: 77:37:34:5d:3c:9b:a9:74:2a:7c:11:01:e3:f5:5d: 56:6a:1d:b1:75:21:70:f4:0e:17:9a:8e:8c:b3:0b: 59:d9:0c:f4:54:9c:db:82:4f:5c:57:f0:8a:99:44: 79:7e:b1:0c:5d:9e:e8:a6:fc:bf:ad:f4:9a:9a:28: 13:32:f7:08:12:58:61:f3:63:b8:30:62:85:6d:28: 28:07:ec:1a:58:6f:6f:3f:d8:e3:3f:db:38:0d:8e: e0:b7:96:d0:e5:43:1c:48:1c:1b:7c:45:52:7a:eb: 88:c0:d3:e3:a9:3b:85:20:ee:ce:3c:84:59:95:34: 45:af:6d:95:71:47:1e:aa:48:3a:a7:5b:a1:d9:b8: 70:ff:28:8e:2d:65:9f:f0:10:ed:64:f0:18:da:b5: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:2A:D5:A8:E1:64:76:E8:C6:8F:9F:D5:39:9A:CC:40:1E:87:1B X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:58:5b:37:a3:57:80:de:16:87:a8:8d:d6:e5:38:fd:f0:91: 14:f8:92:05:0b:ed:95:f0:20:75:ad:8f:c9:6b:57:70:7d:a8: 0b:97:47:b4:48:00:eb:92:02:55:6f:7b:c7:d2:0b:71:0e:fd: 7b:67:4a:fa:01:9e:a8:45:66:9f:6e:01:f6:51:1d:a4:e2:1e: 42:58:79:af:18:e7:85:76:d9:8f:b6:68:ea:82:e5:71:67:05: ea:f3:a7:16:67:a5:29:62:15:11:bc:36:e3:cc:0c:b0:ff:05: e5:81:b5:df:c9:f1:c8:b3:06:b5:f5:26:0c:16:a1:79:b1:47: 01:2b:76:af:42:61:cd:2a:a4:0a:32:74:cf:2d:d9:93:be:51: 44:74:95:39:f5:8c:e9:ba:69:32:cf:b8:cc:e6:5b:df:ca:42: 61:48:fd:8f:53:ef:6f:77:52:6a:a3:4a:34:80:3b:20:69:c6: 1f:f4:db:4c:52:74:e6:d1:73:bd:3a:ea:5e:84:53:58:d0:f9: cf:48:32:0c:fa:e6:78:27:8d:6f:ca:3d:74:d6:ee:3c:90:28: c5:0e:f1:c8:1f:f1:c8:da:03:ee:c3:39:c9:57:b8:c1:d0:8c: 06:65:6f:32:82:dd:88:d7:be:d5:38:94:da:c3:06:fb:c7:1d: ce:7a:fb:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjQwNTAxMDU0MjA4WhcNMjQwNTA4MDU0MjA4WjAYMRYwFAYD VQQDEw02NjMxZDYzMC1jNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAras2NVmHv9xzmaaXP+zSxODAOi8uBFBrBjfVx37huQOF/iaFBGG0H3qz9Ft7 Uy4KVwLUhp1/TM6yL/3UrLR9BytIdQCA5G48SG01ldsWKO6Z4t/aj2j7/5126S0A LmLxUg6N9zWQIGp3NzRdPJupdCp8EQHj9V1Wah2xdSFw9A4Xmo6MswtZ2Qz0VJzb gk9cV/CKmUR5frEMXZ7opvy/rfSamigTMvcIElhh82O4MGKFbSgoB+waWG9vP9jj P9s4DY7gt5bQ5UMcSBwbfEVSeuuIwNPjqTuFIO7OPIRZlTRFr22VcUceqkg6p1uh 2bhw/yiOLWWf8BDtZPAY2rVzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUNKtWo 4WR26MaPn9U5msxAHocbMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgWFs3o1eA3haHqI3W5Tj98JEU+JIFC+2V8CB1rY/Ja1dwfagLl0e0 SADrkgJVb3vH0gtxDv17Z0r6AZ6oRWafbgH2UR2k4h5CWHmvGOeFdtmPtmjqguVx ZwXq86cWZ6UpYhURvDbjzAyw/wXlgbXfyfHIswa19SYMFqF5sUcBK3avQmHNKqQK MnTPLdmTvlFEdJU59Yzpumkyz7jM5lvfykJhSP2PU+9vd1Jqo0o0gDsgacYf9NtM UnTm0XO9OupehFNY0PnPSDIM+uZ4J41vyj101u48kCjFDvHIH/HI2gPuwznJV7jB 0IwGZW8ygt2I177VOJTawwb7xx3Oevsp -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org