$ rpki-client -vvf rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft File: kUk2UwsP-H5UDYRskCD7hNO19YM.mft (raw, json) Hash identifier: pLRC8xmObP0KmmwctbImxMiFXdjRHooCtB3I6YQnjuI= Subject key identifier: 34:26:E5:68:26:9A:6A:D5:30:CC:1F:2E:6C:17:21:77:D0:1C:06:B4 Authority key identifier: 91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83 Certificate issuer: /CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft Manifest number: 060F Signing time: Sun 05 May 2024 00:00:41 +0000 Manifest this update: Sun 05 May 2024 00:00:40 +0000 Manifest next update: Sun 12 May 2024 00:00:40 +0000 Files and hashes: 1: kUk2UwsP-H5UDYRskCD7hNO19YM.crl (hash: UmmlTQuPOOVG4TVfvo3YHDyVpCha3wmxY+AsYRoYH2I=) 2: 12C61BCA37CA11EDB8E79257C4F9AE02.roa (hash: w/LPsf1fuNhXTUpVcTEl4mS9U0ZYhq4ApJJQJuCMBlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583 Validity Not Before: May 5 00:00:40 2024 GMT Not After : May 12 00:00:40 2024 GMT Subject: CN=6636cc29-df77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:da:b2:c0:f3:47:69:d3:b6:2b:7b:a7:54: 11:ec:e1:76:15:f2:3e:0a:bf:90:cf:ed:c3:08:40: a9:ab:b2:ce:c1:b1:bd:06:aa:b6:ab:9e:88:1f:22: 15:72:4f:dc:5b:31:10:24:ba:8f:f2:ff:3e:f7:56: 9a:df:b9:05:b0:c7:06:9e:6b:88:35:5d:83:fb:51: 39:0b:35:23:48:b3:b3:80:33:c9:04:c9:f1:37:61: 0d:d0:32:07:22:a6:fb:3d:04:cc:b0:39:a4:3c:b5: 1a:6d:26:6d:fa:19:cb:4e:66:48:db:a7:ce:6b:93: c8:ce:72:5b:fc:88:84:af:82:7c:36:c2:89:f7:99: ef:14:c1:47:6d:c6:1c:9f:07:a3:cb:c1:37:ae:d5: c7:8c:49:6e:70:3f:d5:7e:d1:b7:32:b2:ba:dd:ec: 92:51:be:90:1c:6d:7c:88:f2:83:99:be:67:51:f3: fb:a0:bd:c9:a1:86:27:ee:42:b7:98:3c:06:92:3b: b2:42:ae:ea:84:c2:e3:80:38:d4:21:0a:9f:26:f6: d6:2b:a6:c2:cc:1b:81:2e:59:1d:8e:d6:da:3c:0c: 49:b4:84:6a:ed:0b:c8:71:3a:d2:b0:75:27:6c:71: 4e:f0:23:9e:16:f0:2d:2e:a8:40:25:df:9c:f5:6b: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:26:E5:68:26:9A:6A:D5:30:CC:1F:2E:6C:17:21:77:D0:1C:06:B4 X509v3 Authority Key Identifier: keyid:91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:95:57:49:31:9a:cf:ac:24:e6:ca:84:62:c9:b5:1d:c9: 67:4b:f8:c6:23:d2:a1:c8:5b:a7:16:52:02:70:8d:28:bb:f4: 42:0d:23:0f:f0:7e:10:15:6f:8d:48:c1:54:7f:38:8a:df:6d: ab:9f:4e:4e:61:28:e7:ff:b5:b4:53:0e:70:26:8f:ec:79:fe: e9:28:c7:5d:d3:cd:23:79:dd:7f:41:da:6a:73:f0:07:a1:d8: 8c:6b:cb:24:23:de:06:7f:0a:dc:dd:73:2a:7d:57:38:29:d9: 65:db:91:ed:a9:d1:b0:3a:33:3a:d4:7d:79:5e:13:3c:c3:3e: bd:16:17:a4:29:cd:bf:75:72:ce:a5:bf:d3:0a:c8:88:de:aa: 71:f2:9c:52:45:72:8e:3c:55:09:00:9e:6a:ec:c0:38:19:72: 02:0b:ee:83:74:9e:70:82:7b:2b:9d:f1:dc:e9:d0:cb:73:73: 6c:dc:fa:d3:47:08:0b:7a:58:17:81:28:b9:ae:a2:00:d7:b4: 1b:4b:f2:a1:c0:22:89:4e:33:16:45:d1:6b:83:11:ce:34:30: f2:eb:e6:47:18:ea:a5:15:61:db:21:fe:b7:33:ce:fb:53:b8: 2f:7c:3f:9d:e4:5d:14:38:4e:5c:ed:5d:56:03:e1:5f:04:3a: c5:67:84:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2ODAxMTAvBgNVBAUTKDkxNDkzNjUzMEIwRkY4N0U1NDBEODQ2QzkwMjBGQjg0 RDNCNUY1ODMwHhcNMjQwNTA1MDAwMDQwWhcNMjQwNTEyMDAwMDQwWjAYMRYwFAYD VQQDEw02NjM2Y2MyOS1kZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK3assDzR2nTtit7p1QR7OF2FfI+Cr+Qz+3DCECpq7LOwbG9Bqq2q56IHyIV ck/cWzEQJLqP8v8+91aa37kFsMcGnmuINV2D+1E5CzUjSLOzgDPJBMnxN2EN0DIH Iqb7PQTMsDmkPLUabSZt+hnLTmZI26fOa5PIznJb/IiEr4J8NsKJ95nvFMFHbcYc nwejy8E3rtXHjElucD/VftG3MrK63eySUb6QHG18iPKDmb5nUfP7oL3JoYYn7kK3 mDwGkjuyQq7qhMLjgDjUIQqfJvbWK6bCzBuBLlkdjtbaPAxJtIRq7QvIcTrSsHUn bHFO8COeFvAtLqhAJd+c9WtCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQm5Wgm mmrVMMwfLmwXIXfQHAa0MB8GA1UdIwQYMBaAFJFJNlMLD/h+VA2EbJAg+4TTtfWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY4MC84RTI4NjY4MjU1 M0MxMUVCOEM2MzBGNzJDNEY5QUUwMi9rVWsyVXdzUC1INVVEWVJza0NEN2hOTzE5 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVazJVd3NQLUg1VURZUnNrQ0Q3aE5PMTlZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY4MC84RTI4NjY4MjU1M0MxMUVCOEM2MzBGNzJDNEY5QUUwMi9rVWsyVXdzUC1I NVVEWVJza0NEN2hOTzE5WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYJVXSTGaz6wk5sqEYsm1HclnS/jGI9KhyFunFlICcI0ou/RCDSMP 8H4QFW+NSMFUfziK322rn05OYSjn/7W0Uw5wJo/sef7pKMdd080jed1/Qdpqc/AH odiMa8skI94Gfwrc3XMqfVc4Kdll25HtqdGwOjM61H15XhM8wz69FhekKc2/dXLO pb/TCsiI3qpx8pxSRXKOPFUJAJ5q7MA4GXICC+6DdJ5wgnsrnfHc6dDLc3Ns3PrT RwgLelgXgSi5rqIA17QbS/KhwCKJTjMWRdFrgxHONDDy6+ZHGOqlFWHbIf63M877 U7gvfD+d5F0UOE5c7V1WA+FfBDrFZ4Q3 -----END CERTIFICATE-----Generated at Sun May 5 01:22:19 2024 by rpki-client on console-fra.rpki-client.org