$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: kD41oUi5Ten+avt6pJ+YqE6a8FIixrl2PpzBWp926XU= Subject key identifier: 39:42:16:62:4E:C4:ED:72:D8:B4:EF:D1:22:C5:12:9D:83:FB:19:79 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 40 Signing time: Tue 21 May 2024 07:36:54 +0000 Manifest this update: Tue 21 May 2024 07:36:54 +0000 Manifest next update: Tue 28 May 2024 07:36:54 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: I9GfHRpKLIpjBiguIxT8i4RsGypPI1Q7xYKc04g1TOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: May 21 07:36:54 2024 GMT Not After : May 28 07:36:54 2024 GMT Subject: CN=664c4f16-7f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:13:07:50:98:bc:41:2b:d1:3e:9e:10:2e: 9a:74:eb:50:40:ac:56:3e:74:b0:4c:7f:15:41:a3: 4f:94:e0:17:f1:e8:72:57:63:21:51:15:ee:e4:31: 9a:45:5e:95:70:f2:8d:06:63:95:53:7a:6b:0b:d8: 02:58:fd:bc:44:b7:04:de:77:c7:b0:af:9e:b6:8e: 55:ac:b9:83:af:9b:2c:79:38:c9:7a:d9:66:d5:04: 44:81:b5:24:51:be:8b:75:45:0f:63:c7:b5:b2:05: 10:95:94:36:00:0d:a8:e1:a3:81:96:be:29:48:92: a4:ea:2f:47:eb:a7:59:7f:2a:14:fa:9f:95:47:79: 60:de:57:04:0f:9d:4d:46:f6:38:5c:b1:8f:ee:07: 01:26:12:6f:4e:04:ae:eb:b0:86:7f:3b:10:86:f6: 35:4e:52:a4:b4:89:ba:ef:78:9c:6a:66:bc:71:d9: dd:93:70:8f:6e:71:e4:ca:0e:bd:19:b9:a7:fa:e9: be:85:c2:29:f3:fa:45:b4:ad:32:c5:ff:7a:1c:ee: 6b:98:21:0b:7d:e4:99:a5:90:10:4c:6c:f3:2e:11: 52:4e:fd:c1:e2:bd:42:15:ed:c9:d2:e4:29:54:a2: 5b:de:74:00:ae:1c:0a:1f:2e:04:f3:aa:ad:65:15: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:16:62:4E:C4:ED:72:D8:B4:EF:D1:22:C5:12:9D:83:FB:19:79 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f4:bc:a7:85:9b:b0:50:00:57:b6:c0:58:37:f4:76:70:9d: b2:85:f7:00:fb:6a:69:0e:c4:e5:4c:3e:ad:48:92:58:c7:b9: 51:6e:6d:1d:ee:4a:5d:52:3f:42:b9:00:76:54:ce:5f:cb:3d: 3a:b9:b3:ed:b0:22:ed:0b:ea:77:d8:e9:e5:87:4f:fa:f2:80: 5d:ce:70:63:5b:f4:fd:9e:b2:19:ea:7b:28:f3:28:c6:41:ad: ee:68:37:4f:fe:4f:2a:95:fb:16:c1:6d:cf:b4:60:b2:03:6f: c5:3b:19:c1:88:34:b5:b2:60:2b:2d:30:31:2d:92:69:cf:a1: 8b:92:b0:da:99:bd:83:39:c4:a5:be:40:05:41:35:36:cd:a7: 67:02:1a:ce:01:c0:45:b2:35:93:e7:da:b0:db:a1:39:84:1b: 4c:81:b4:c9:28:bb:6b:b0:00:99:28:c2:d2:b4:9d:b7:cb:b8: ed:e1:5e:8d:c3:c3:da:6a:8f:18:da:4c:86:2c:a2:02:ef:f1: d1:e0:00:a8:a2:72:d2:e2:15:c0:a7:30:c9:55:96:15:38:c8: 66:58:b7:85:0b:91:cd:c0:fd:50:dd:e9:8d:0b:f1:5c:c0:44: ce:13:01:99:1c:63:d6:fc:fd:ea:56:0c:c1:82:49:54:fe:b6: 8b:a3:1b:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjM4NzExMC8GA1UEBRMoMjgxODhDMTZFRUM5MDc0MjcxNzI3OEMyODlDRjgyRjUw NEYyNUFBOTAeFw0yNDA1MjEwNzM2NTRaFw0yNDA1MjgwNzM2NTRaMBgxFjAUBgNV BAMTDTY2NGM0ZjE2LTdmNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc6RMHUJi8QSvRPp4QLpp061BArFY+dLBMfxVBo0+U4Bfx6HJXYyFRFe7kMZpF XpVw8o0GY5VTemsL2AJY/bxEtwTed8ewr562jlWsuYOvmyx5OMl62WbVBESBtSRR vot1RQ9jx7WyBRCVlDYADajho4GWvilIkqTqL0frp1l/KhT6n5VHeWDeVwQPnU1G 9jhcsY/uBwEmEm9OBK7rsIZ/OxCG9jVOUqS0ibrveJxqZrxx2d2TcI9uceTKDr0Z uaf66b6Fwinz+kW0rTLF/3oc7muYIQt95JmlkBBMbPMuEVJO/cHivUIV7cnS5ClU olvedACuHAofLgTzqq1lFZljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOUIWYk7E 7XLYtO/RIsUSnYP7GXkwHwYDVR0jBBgwFoAUKBiMFu7JB0JxcnjCic+C9QTyWqkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMzg3L0ZFNEQ3OEUyQjVD MTExRUU5NUI1ODM0MUM0RjlBRTAyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS0JpTUZ1N0pCMEp4Y25qQ2ljLUM5UVR5V3FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Mzg3L0ZFNEQ3OEUyQjVDMTExRUU5NUI1ODM0MUM0RjlBRTAyL0tCaU1GdTdKQjBK eGNuakNpYy1DOVFUeVdxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGb0vKeFm7BQAFe2wFg39HZwnbKF9wD7amkOxOVMPq1IkljHuVFubR3u Sl1SP0K5AHZUzl/LPTq5s+2wIu0L6nfY6eWHT/rygF3OcGNb9P2eshnqeyjzKMZB re5oN0/+TyqV+xbBbc+0YLIDb8U7GcGINLWyYCstMDEtkmnPoYuSsNqZvYM5xKW+ QAVBNTbNp2cCGs4BwEWyNZPn2rDboTmEG0yBtMkou2uwAJkowtK0nbfLuO3hXo3D w9pqjxjaTIYsogLv8dHgAKiictLiFcCnMMlVlhU4yGZYt4ULkc3A/VDd6Y0L8VzA RM4TAZkcY9b8/epWDMGCSVT+toujG34= -----END CERTIFICATE-----Generated at Tue May 21 08:38:34 2024 by rpki-client on console-fra.rpki-client.org