$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json) Hash identifier: 9mv1I9gl0KyL3rlDloP8tsocdm7+XzAHQdemdXl5xgw= Subject key identifier: D8:5C:97:C4:C6:91:31:FA:24:20:58:C4:CD:95:FF:BC:A0:7A:40:D5 Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft Manifest number: 0534 Signing time: Sun 05 May 2024 01:08:11 +0000 Manifest this update: Sun 05 May 2024 01:08:10 +0000 Manifest next update: Sun 12 May 2024 01:08:10 +0000 Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: ysusU13US1YspxKGNFzKxHH8jq8ZJHb3Ampe7fMzwds=) 2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: XwrfJzBigjNV7r095BgmzZrchD0Deh4NsLwbBugq+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Validity Not Before: May 5 01:08:10 2024 GMT Not After : May 12 01:08:10 2024 GMT Subject: CN=6636dbfa-95f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:17:9d:d3:0c:cc:dc:29:e7:ec:32:c6:0e: 8a:29:d8:c3:bb:1b:06:bf:a4:44:0f:f6:e8:23:32: 1d:99:3b:b6:9d:43:ad:c0:0a:9d:a7:4c:0d:74:e6: d8:c1:54:37:d6:83:86:85:fc:76:f1:52:0b:03:e9: 54:57:20:26:2a:dd:12:b1:39:8d:e3:a6:85:1e:4f: 13:ff:41:ab:00:1d:c3:93:12:32:85:b5:ad:cc:2c: 52:ec:0a:08:7f:92:86:58:50:00:f8:b0:f6:e7:bb: 19:0c:08:74:1a:f8:09:34:da:6a:b5:77:44:69:d5: b2:c6:28:81:0a:8c:75:88:db:22:15:82:cd:f7:d5: 8c:90:43:f4:ab:b6:41:8c:e9:c3:53:6f:8b:f8:2b: f3:9e:b3:af:8c:d5:77:c7:27:85:55:a5:dc:77:75: 58:39:ac:f1:c3:79:87:f0:99:34:6e:71:be:ba:bc: b5:d9:d3:5c:46:52:fd:76:f0:d9:ab:94:da:04:40: 84:66:ba:37:6f:60:2b:26:65:20:04:fd:a7:1c:7b: 0f:b2:1a:cd:4c:2e:40:15:3f:a3:9e:e4:0f:49:02: 15:8b:4f:5b:75:06:20:89:14:18:b0:e9:c1:7d:a6: 3b:ed:1a:72:c1:91:da:8a:f8:9e:e9:56:f7:42:a2: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:97:C4:C6:91:31:FA:24:20:58:C4:CD:95:FF:BC:A0:7A:40:D5 X509v3 Authority Key Identifier: keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:eb:ea:33:e7:05:7a:1b:74:01:24:fe:fd:27:61:ef:b5:6c: 50:7a:1f:e1:50:4c:f5:1f:3a:88:16:93:bb:99:fa:1b:5c:c0: 3a:20:27:df:5b:16:7c:9e:d1:31:b3:3e:de:97:ac:d7:1a:6a: 68:24:2b:91:61:13:a6:c3:38:99:b6:ab:af:5d:c5:4c:70:6d: 13:8d:80:13:3e:bd:55:a7:dd:8d:0b:14:fc:2b:59:60:90:fb: 77:e0:de:2b:0c:71:e0:6f:78:ed:4d:5f:a5:29:1b:0c:e8:08: e4:46:0b:f2:83:83:cc:83:2c:27:14:f8:ca:0a:82:91:c6:ff: 68:f9:a0:95:26:d8:6d:3c:88:a0:d8:fe:32:f4:24:d3:e4:d1: 8b:c9:1c:60:c0:63:3a:de:69:8a:f0:d8:8f:33:eb:c9:8e:5c: 0a:09:ee:3f:14:ad:de:72:76:77:b0:f9:69:5b:4f:6a:61:70: d6:1d:86:37:be:61:10:24:c3:23:7a:f2:aa:23:a1:4b:01:a7: 7a:66:2f:61:46:51:ca:2e:8a:f1:2b:93:50:f6:62:47:44:23: 30:08:dd:0e:f2:60:55:c1:3a:91:37:5e:37:bc:55:f5:db:67: cf:48:83:20:86:57:e5:1c:8d:b1:d1:7a:d7:37:a4:19:83:a2: 29:e2:c8:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky MTY2ODBDQ0MwHhcNMjQwNTA1MDEwODEwWhcNMjQwNTEyMDEwODEwWjAYMRYwFAYD VQQDEw02NjM2ZGJmYS05NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5oXndMMzNwp5+wyxg6KKdjDuxsGv6RED/boIzIdmTu2nUOtwAqdp0wNdObY wVQ31oOGhfx28VILA+lUVyAmKt0SsTmN46aFHk8T/0GrAB3DkxIyhbWtzCxS7AoI f5KGWFAA+LD257sZDAh0GvgJNNpqtXdEadWyxiiBCox1iNsiFYLN99WMkEP0q7ZB jOnDU2+L+CvznrOvjNV3xyeFVaXcd3VYOazxw3mH8Jk0bnG+ury12dNcRlL9dvDZ q5TaBECEZro3b2ArJmUgBP2nHHsPshrNTC5AFT+jnuQPSQIVi09bdQYgiRQYsOnB faY77RpywZHaivie6Vb3QqJuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhcl8TG kTH6JCBYxM2V/7ygekDVMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR6+oz5wV6G3QBJP79J2HvtWxQeh/hUEz1HzqIFpO7mfobXMA6ICff WxZ8ntExsz7el6zXGmpoJCuRYROmwziZtquvXcVMcG0TjYATPr1Vp92NCxT8K1lg kPt34N4rDHHgb3jtTV+lKRsM6AjkRgvyg4PMgywnFPjKCoKRxv9o+aCVJthtPIig 2P4y9CTT5NGLyRxgwGM63mmK8NiPM+vJjlwKCe4/FK3ecnZ3sPlpW09qYXDWHYY3 vmEQJMMjevKqI6FLAad6Zi9hRlHKLorxK5NQ9mJHRCMwCN0O8mBVwTqRN143vFX1 22fPSIMghlflHI2x0XrXN6QZg6Ip4sgl -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org