$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json) Hash identifier: 1N6MY3aHKwv9xB/yzaaQiGd9uUwbiIM6QkJBZKvZGEg= Subject key identifier: 6D:FF:08:3D:80:C8:D6:C6:7F:D9:38:B5:AC:86:E0:34:9F:C6:3E:8D Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 10FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft Manifest number: 10F4 Signing time: Tue 30 Apr 2024 18:05:18 +0000 Manifest this update: Tue 30 Apr 2024 18:05:18 +0000 Manifest next update: Tue 07 May 2024 18:05:18 +0000 Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: VrGEhKWy+ZIsrGF2d0/cqXYpiOPm4iQZxDknQM3kJZY=) 2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: Pei0cti7OSCFhgjRaYzV/VlBx4zhYdDoDzyP9hUTPDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4350 (0x10fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Apr 30 18:05:18 2024 GMT Not After : May 7 18:05:18 2024 GMT Subject: CN=663132de-24df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:87:08:54:b9:f3:76:7e:f3:e8:bc:cc:b9: 72:43:57:ef:65:3d:0a:be:4a:b9:fa:4c:51:fb:96: f9:e1:43:c7:32:d9:3b:5c:ab:d6:74:80:d5:16:cf: 4f:96:88:97:61:41:c6:95:e4:25:58:74:01:0c:61: fc:09:a3:67:60:5c:66:9d:97:c4:45:2c:8f:a5:10: d7:ee:1b:1f:28:3e:b2:4c:35:2e:d2:9d:a6:41:30: 48:e1:de:54:c1:f0:c2:9f:94:cb:cb:8d:8b:d4:75: 63:53:48:de:24:78:f8:88:c4:f8:7c:9f:a4:33:91: e7:d7:55:15:7a:69:9d:9c:11:4e:64:f7:10:a8:7b: d3:39:cd:fb:cd:df:11:3a:2a:a0:c2:65:4f:41:de: 34:90:6a:b0:b3:fb:67:57:7f:44:38:29:03:dc:cb: 73:24:66:1a:91:03:0f:e4:a9:6d:20:54:3a:c1:2b: fa:06:6d:59:5a:36:ba:c8:c6:84:06:5d:b3:54:c7: 82:34:1f:ed:af:37:75:51:95:57:fc:ba:c8:7a:d1: 42:7f:07:bd:51:45:8d:ec:09:c6:bf:96:5d:ca:a3: 8f:83:ae:2e:a7:3c:a8:31:8d:fa:a7:e6:53:c1:97: 64:60:39:6b:ec:84:61:31:6f:6c:83:a1:dc:58:e4: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FF:08:3D:80:C8:D6:C6:7F:D9:38:B5:AC:86:E0:34:9F:C6:3E:8D X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:51:40:f4:f3:25:50:64:41:a8:c5:9d:ed:b1:2c:2f:53:66: 58:c3:7d:2c:9e:49:ce:ab:96:7c:97:e4:66:01:96:0b:53:2e: a8:da:c6:8f:0c:74:40:81:78:0e:cc:c9:67:5e:db:7e:31:d1: 33:a5:6b:80:9b:34:de:4f:1d:ab:6c:56:ac:c0:c9:80:8b:05: c5:81:17:a8:4b:18:dd:44:bc:f0:10:3a:b7:b6:56:ba:33:55: a2:b8:90:22:94:17:59:fa:1e:c9:63:50:cd:74:54:07:27:3f: 67:ba:f7:6d:69:88:96:ce:1d:a7:f9:24:71:58:72:4a:80:65: 5b:22:03:af:d4:aa:b5:a1:a8:fc:48:ae:01:88:a7:28:85:25: fb:f9:cb:5d:a4:92:1f:c5:99:a0:68:d0:8b:9e:9f:0a:0a:f9: c0:a9:69:cd:b3:42:ec:40:e8:03:16:1d:3c:1d:22:55:47:21: c7:85:77:3f:fc:38:c6:23:dc:2f:13:47:e0:e9:ef:c1:a8:7e: d7:6d:a9:e6:aa:06:ef:6b:0c:43:73:0a:da:12:4e:28:b2:95: 3a:cd:6e:37:88:f6:fd:6e:90:1d:73:28:d2:e9:20:09:d0:ee: e0:55:73:e0:9a:b4:22:6b:7c:d2:78:33:c3:c1:f4:c5:62:a5: 05:f7:22:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjQwNDMwMTgwNTE4WhcNMjQwNTA3MTgwNTE4WjAYMRYwFAYD VQQDEw02NjMxMzJkZS0yNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVGHCFS583Z+8+i8zLlyQ1fvZT0Kvkq5+kxR+5b54UPHMtk7XKvWdIDVFs9P loiXYUHGleQlWHQBDGH8CaNnYFxmnZfERSyPpRDX7hsfKD6yTDUu0p2mQTBI4d5U wfDCn5TLy42L1HVjU0jeJHj4iMT4fJ+kM5Hn11UVemmdnBFOZPcQqHvTOc37zd8R OiqgwmVPQd40kGqws/tnV39EOCkD3MtzJGYakQMP5KltIFQ6wSv6Bm1ZWja6yMaE Bl2zVMeCNB/trzd1UZVX/LrIetFCfwe9UUWN7AnGv5ZdyqOPg64upzyoMY36p+ZT wZdkYDlr7IRhMW9sg6HcWOR+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3/CD2A yNbGf9k4tayG4DSfxj6NMB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzFFNC8zODI0N0E3MEYxNjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21N eWdsdDZKY2FuY2ozMTQ0ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnUUD08yVQZEGoxZ3tsSwvU2ZYw30snknOq5Z8l+RmAZYLUy6o2saP DHRAgXgOzMlnXtt+MdEzpWuAmzTeTx2rbFaswMmAiwXFgReoSxjdRLzwEDq3tla6 M1WiuJAilBdZ+h7JY1DNdFQHJz9nuvdtaYiWzh2n+SRxWHJKgGVbIgOv1Kq1oaj8 SK4BiKcohSX7+ctdpJIfxZmgaNCLnp8KCvnAqWnNs0LsQOgDFh08HSJVRyHHhXc/ /DjGI9wvE0fg6e/BqH7XbanmqgbvawxDcwraEk4ospU6zW43iPb9bpAdcyjS6SAJ 0O7gVXPgmrQia3zSeDPDwfTFYqUF9yKI -----END CERTIFICATE-----Generated at Tue Apr 30 18:56:57 2024 by rpki-client on console-fra.rpki-client.org