$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: ZmgGvpPaRk6iKUaY78/0s8NvpxnotONwIlmEFn2PU7U= Subject key identifier: A0:2E:0B:A9:A1:5F:F1:B7:66:50:2F:B2:28:EF:8D:62:7D:B8:B2:D7 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 35 Signing time: Wed 15 May 2024 08:29:31 +0000 Manifest this update: Wed 15 May 2024 08:29:30 +0000 Manifest next update: Wed 22 May 2024 08:29:30 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: h255HT7JrUrULGm23Z40m5hnDs2ZvEZVTGhywhVvWlw=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: YI2srcnz/6DwUPS7c8IQ+7Hr1uygrottBvqwJQtIlR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: May 15 08:29:30 2024 GMT Not After : May 22 08:29:30 2024 GMT Subject: CN=6644726a-ccfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:90:cf:c5:70:6e:6f:2c:eb:57:57:dc:49: 5c:5c:f4:e1:83:ac:02:10:ce:f0:ed:01:2b:c4:d8: 14:21:bf:3c:5d:a8:9c:92:75:ae:f7:8c:c0:75:7e: 9d:4b:5a:5d:15:a4:9c:7a:dc:84:83:38:b4:a9:47: 4b:80:07:92:4e:6b:07:7d:fd:b6:0a:c3:bc:00:cf: 4c:aa:fe:1f:35:b7:70:1b:9b:55:31:2d:bd:d6:28: 70:9c:aa:61:32:3f:f4:6b:24:4c:ae:ea:7e:50:cd: f0:33:b6:d0:23:08:05:51:14:7a:d4:e7:38:ce:f9: 77:ac:f4:0d:32:6f:65:aa:2a:84:27:36:42:41:88: 8d:e5:8e:83:76:83:6b:56:02:3a:36:19:59:9a:65: 48:7d:68:3e:8a:d3:ef:ef:4d:66:84:c3:2e:7e:9a: 6a:05:e3:3e:6d:27:67:83:ae:3e:62:6c:2f:a5:74: 5f:3e:09:96:a9:2d:92:e6:c0:77:c4:1d:39:a8:b6: df:6e:20:c7:4b:9c:68:09:d5:c8:27:d5:d7:db:e9: 5a:84:fe:fe:e2:28:83:5e:f9:a7:91:2e:79:64:f1: ec:31:26:d3:4e:28:3a:e2:3a:f9:a5:88:fc:86:b1: 23:1f:ba:48:03:38:bc:37:fd:1d:11:f3:10:a4:d8: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:0B:A9:A1:5F:F1:B7:66:50:2F:B2:28:EF:8D:62:7D:B8:B2:D7 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:12:f3:60:65:20:a9:f7:6b:81:4a:fe:f7:55:db:1a:8c:49: fc:95:47:36:8e:41:89:f8:c4:92:49:04:b8:94:f9:2d:89:ab: d1:00:ca:0d:28:db:1d:d5:12:36:a5:af:d9:fe:57:92:c0:a3: 18:fb:3e:60:48:97:58:d6:30:a3:87:c4:03:ab:1e:b4:98:6c: 62:3f:cc:6b:0f:ac:a8:e4:c0:2a:ce:27:aa:81:28:7a:d5:6d: a3:92:29:98:f3:7c:b6:4b:2c:03:a2:95:1c:ea:06:1b:0c:07: 8d:27:da:ca:2c:4d:e4:78:95:a3:66:a8:d9:b9:1d:ff:cf:ab: 29:c4:5a:8a:cf:29:d6:50:3c:c0:0c:27:cd:82:e5:b7:0d:9f: 24:90:cd:b2:61:44:ec:94:cb:e5:e5:a6:81:51:f2:d9:86:4f: e9:eb:c6:19:9c:60:52:f8:99:30:57:91:f0:9d:60:7b:fb:3c: 40:cc:a6:ac:a2:2e:ee:a9:e7:e6:2c:d8:f1:7e:be:f0:c9:59: f3:96:ac:a0:16:93:8a:22:12:5c:33:b7:df:a1:92:4e:b8:2e: 31:c6:db:80:41:9a:ec:39:a7:28:c7:3d:59:28:c9:47:c9:68: 1a:a2:4d:2a:d0:d8:cc:13:15:40:31:86:4b:c1:b8:f9:ab:23: 84:6e:c5:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE5RjExMC8GA1UEBRMoMkFDRTk0MEI1REMzMDMzN0QyRTU0MjE3MjIxOTFBQjky M0FBNzVDNzAeFw0yNDA1MTUwODI5MzBaFw0yNDA1MjIwODI5MzBaMBgxFjAUBgNV BAMTDTY2NDQ3MjZhLWNjZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7SJDPxXBubyzrV1fcSVxc9OGDrAIQzvDtASvE2BQhvzxdqJySda73jMB1fp1L Wl0VpJx63ISDOLSpR0uAB5JOawd9/bYKw7wAz0yq/h81t3Abm1UxLb3WKHCcqmEy P/RrJEyu6n5QzfAzttAjCAVRFHrU5zjO+Xes9A0yb2WqKoQnNkJBiI3ljoN2g2tW Ajo2GVmaZUh9aD6K0+/vTWaEwy5+mmoF4z5tJ2eDrj5ibC+ldF8+CZapLZLmwHfE HTmott9uIMdLnGgJ1cgn1dfb6VqE/v7iKINe+aeRLnlk8ewxJtNOKDriOvmliPyG sSMfukgDOLw3/R0R8xCk2AW5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoC4LqaFf 8bdmUC+yKO+NYn24stcwHwYDVR0jBBgwFoAUKs6UC13DAzfS5UIXIhkauSOqdccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTlGLzgyQzY3RUE2QzU2 RDExRUVCMjc4NTM0QUM0RjlBRTAyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS3M2VUMxM0RBemZTNVVJWEloa2F1U09xZGNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTlGLzgyQzY3RUE2QzU2RDExRUVCMjc4NTM0QUM0RjlBRTAyL0tzNlVDMTNEQXpm UzVVSVhJaGthdVNPcWRjYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUS82BlIKn3a4FK/vdV2xqMSfyVRzaOQYn4xJJJBLiU+S2Jq9EAyg0o 2x3VEjalr9n+V5LAoxj7PmBIl1jWMKOHxAOrHrSYbGI/zGsPrKjkwCrOJ6qBKHrV baOSKZjzfLZLLAOilRzqBhsMB40n2sosTeR4laNmqNm5Hf/PqynEWorPKdZQPMAM J82C5bcNnySQzbJhROyUy+XlpoFR8tmGT+nrxhmcYFL4mTBXkfCdYHv7PEDMpqyi Lu6p5+Ys2PF+vvDJWfOWrKAWk4oiElwzt9+hkk64LjHG24BBmuw5pyjHPVkoyUfJ aBqiTSrQ2MwTFUAxhkvBuPmrI4RuxVw= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org