$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: KWwkgA/iGa4Ud5KBk1eurGWYxzlEjCp3JQmVWKhqeeo= Subject key identifier: C4:34:00:5C:D2:BC:E2:08:F9:7C:CB:E8:47:A7:EA:FF:01:F6:4D:66 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0D4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0D46 Signing time: Sun 28 Apr 2024 18:38:48 +0000 Manifest this update: Sun 28 Apr 2024 18:38:48 +0000 Manifest next update: Sun 05 May 2024 18:38:48 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: WOZ45uW9fYnx/PUh8FGNxLWpXbv/OKSFUE27u5u2kC0=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 8AfCGx2BdVzO1T0aaR/qXOQKjWTAKSjMLiBiuKiZggk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Apr 28 18:38:48 2024 GMT Not After : May 5 18:38:48 2024 GMT Subject: CN=662e97b8-8a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:b1:69:0c:1a:6e:73:06:20:8c:5d:43:db: cb:c4:1f:7e:d9:1f:e0:d3:cc:75:50:43:5b:86:ac: 96:fa:6f:06:aa:22:f8:8e:19:3f:8f:06:cb:52:c7: 8c:ff:09:f7:76:81:b4:24:d3:40:19:3d:a6:3c:c3: f5:00:58:61:b3:b7:dc:8e:cb:f2:55:35:ae:96:52: 24:c3:94:7f:b3:46:79:31:de:e0:ce:86:54:51:e2: 21:70:a3:38:7a:fc:71:ed:04:de:26:2f:1c:b9:da: 73:8c:d2:7a:bd:4b:34:d6:94:14:12:3d:c0:c2:d7: f9:9a:b5:2e:67:a0:64:63:2b:31:94:1b:dc:4f:82: b5:72:e4:a6:38:c9:3f:9f:73:d4:bc:92:df:69:2d: 99:41:05:3a:cb:6f:47:09:90:3b:f9:36:56:dc:df: 98:19:ab:0f:6a:b0:e9:22:e7:23:07:84:4a:f4:95: 58:91:e3:d1:56:11:c5:f7:cd:cc:05:91:06:f9:9f: 7f:ce:24:bd:72:ba:ad:74:9a:97:c2:3c:db:c3:21: fa:ec:e6:f9:04:06:60:35:f8:ee:b1:35:57:95:d6: d6:7d:6a:c6:56:e5:82:ec:c6:bf:de:7c:c2:0d:ab: 30:78:60:fb:74:4f:e7:69:f6:30:0a:db:74:41:1b: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:34:00:5C:D2:BC:E2:08:F9:7C:CB:E8:47:A7:EA:FF:01:F6:4D:66 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:85:46:3b:92:06:87:79:44:77:3d:00:1b:93:51:0b:cc:cb: bf:9f:3c:f5:3d:ae:3a:cd:bc:28:00:aa:31:89:e0:30:ae:7b: 24:fd:65:5a:9d:4d:b0:6e:16:54:9f:8d:ab:71:57:9d:e4:8c: 09:dd:5c:e0:bf:0a:c4:b4:78:0b:d3:2b:56:ad:18:6b:6f:81: d3:99:86:18:54:2d:fd:3c:4a:c0:cd:b5:05:12:d8:53:f9:4a: 15:95:99:4e:b0:38:b2:a0:63:41:d1:36:46:a5:31:ab:73:42: 11:ac:3d:d2:7a:cf:77:9c:7e:db:70:b1:de:f8:6d:5b:cc:66: 17:a7:b6:2b:89:2d:ed:23:da:1c:47:bc:99:ef:ba:ac:79:d1: 7d:cf:3a:cf:39:34:25:a2:ec:30:d3:a7:47:ff:37:1a:02:0a: 91:7a:14:22:e2:65:a6:bd:f9:53:11:ca:01:96:16:ac:e2:45: fc:62:4c:bf:38:a8:f8:09:5e:23:eb:7d:1f:a9:16:d5:07:b8: dd:60:d9:28:f6:24:9a:c7:38:ad:bd:e8:26:8d:2e:34:86:8f: df:b9:22:f4:81:5b:98:64:54:c8:ca:fb:94:85:10:db:cb:2b: cc:26:52:78:85:c2:9e:81:26:36:b4:00:04:98:87:dd:6b:e6: 11:62:c8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjQwNDI4MTgzODQ4WhcNMjQwNTA1MTgzODQ4WjAYMRYwFAYD VQQDEw02NjJlOTdiOC04YTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49qxaQwabnMGIIxdQ9vLxB9+2R/g08x1UENbhqyW+m8GqiL4jhk/jwbLUseM /wn3doG0JNNAGT2mPMP1AFhhs7fcjsvyVTWullIkw5R/s0Z5Md7gzoZUUeIhcKM4 evxx7QTeJi8cudpzjNJ6vUs01pQUEj3Awtf5mrUuZ6BkYysxlBvcT4K1cuSmOMk/ n3PUvJLfaS2ZQQU6y29HCZA7+TZW3N+YGasParDpIucjB4RK9JVYkePRVhHF983M BZEG+Z9/ziS9crqtdJqXwjzbwyH67Ob5BAZgNfjusTVXldbWfWrGVuWC7Ma/3nzC DasweGD7dE/nafYwCtt0QRuvVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQ0AFzS vOII+XzL6Een6v8B9k1mMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZhUY7kgaHeUR3PQAbk1ELzMu/nzz1Pa46zbwoAKoxieAwrnsk/WVa nU2wbhZUn42rcVed5IwJ3VzgvwrEtHgL0ytWrRhrb4HTmYYYVC39PErAzbUFEthT +UoVlZlOsDiyoGNB0TZGpTGrc0IRrD3Ses93nH7bcLHe+G1bzGYXp7YriS3tI9oc R7yZ77qsedF9zzrPOTQlouww06dH/zcaAgqRehQi4mWmvflTEcoBlhas4kX8Yky/ OKj4CV4j630fqRbVB7jdYNko9iSaxzitvegmjS40ho/fuSL0gVuYZFTIyvuUhRDb yyvMJlJ4hcKegSY2tAAEmIfda+YRYsji -----END CERTIFICATE-----Generated at Sun Apr 28 19:59:02 2024 by rpki-client on console-fra.rpki-client.org