$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json) Hash identifier: e335X7eVpatNU8N5I2X5+JY4yCA1rm701UX+YoGUOG8= Subject key identifier: 1B:37:18:EF:80:45:25:5D:EC:AB:A6:64:63:CF:AF:E0:B2:5D:40:B1 Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Certificate serial: 0F08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft Manifest number: 0EFB Signing time: Fri 26 Apr 2024 18:15:49 +0000 Manifest this update: Fri 26 Apr 2024 18:15:48 +0000 Manifest next update: Fri 03 May 2024 18:15:48 +0000 Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: zEV8117aNi0TgXxBQSryF69y3VzEJgA2F/pzmFVKpmA=) 2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: lSqQwjZot8nB0h5x6YdA4gBJ52DKStyjQ+rFV6EF8s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3848 (0xf08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Validity Not Before: Apr 26 18:15:48 2024 GMT Not After : May 3 18:15:48 2024 GMT Subject: CN=662bef55-b5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:07:4f:8d:c4:bf:09:10:88:77:07:32:b5: 14:3f:c1:5e:10:64:c9:b0:9c:93:1b:65:a3:45:f3: 6f:e7:ed:f8:6d:6e:43:df:7b:90:61:00:59:52:8c: 47:d0:87:52:cc:72:35:a3:16:db:9d:e7:ad:5d:13: 24:53:7a:f4:7e:ca:18:d5:3f:ce:c3:a7:a5:04:84: fa:5c:69:f4:31:7f:71:4a:7d:13:e5:59:67:f2:2f: db:a9:7c:c4:a6:c2:4e:03:2d:57:00:d6:78:41:df: 3c:66:1f:90:5c:54:28:ab:94:78:f4:d5:c4:cb:07: 4e:a2:3b:95:f3:3f:27:fb:20:26:aa:68:bc:8c:7c: dc:02:70:08:c9:9b:fd:b1:16:8b:4e:1d:0d:5a:4b: 73:50:60:c1:39:a8:ca:10:b0:ec:fc:0e:05:14:8e: 87:60:f8:31:7e:50:0f:77:1c:4c:96:d6:fb:0b:d2: af:cc:6f:fd:df:df:ae:a0:cf:f4:e6:81:67:a9:20: fc:00:77:69:92:11:b3:7a:61:42:36:9f:a0:80:3e: 49:01:9e:28:6c:76:e1:83:27:cc:31:d2:40:0a:f3: af:20:ef:32:03:6a:be:22:fa:95:72:a3:3f:df:b0: 7c:0d:d6:92:9b:c5:fc:a6:a3:9e:07:ee:70:78:c8: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:18:EF:80:45:25:5D:EC:AB:A6:64:63:CF:AF:E0:B2:5D:40:B1 X509v3 Authority Key Identifier: keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:54:6c:97:7b:8a:54:91:2d:39:1a:1c:c3:e7:58:52:69:cf: 65:b2:ad:0d:1e:b0:30:08:79:b1:51:50:02:74:c7:1d:4d:29: ed:80:98:e4:d6:07:eb:0b:5b:d6:ba:77:f4:c7:4b:20:3a:8c: 24:93:a1:3e:e6:b6:65:cf:56:bf:ec:76:ab:99:a0:1b:cc:66: 93:71:f0:41:6d:c3:6d:95:2d:bd:0a:16:ac:ec:48:d8:67:6d: aa:27:fc:ff:cb:6d:52:c3:46:51:c9:81:c3:36:f7:05:03:76: 00:fe:64:99:5d:e4:ff:78:dc:05:3e:78:7a:8c:e8:30:9b:0e: 8b:b6:07:01:fd:8e:81:00:d8:c0:cc:4c:1f:6c:71:e5:28:4a: bc:50:bd:a1:cd:c3:85:24:fc:56:3d:8f:d4:82:26:2c:b5:7c: f5:14:a4:93:7d:44:79:76:ef:e2:93:47:d8:4a:88:df:47:c6: cf:2d:8b:39:75:91:b3:e2:0a:41:3d:97:2e:2c:62:f3:5c:32: a1:f2:76:22:74:e7:31:f3:20:8f:57:8f:b4:96:7b:66:6d:3f: 36:87:36:f4:d6:87:6e:0a:01:fd:d5:73:a9:7e:f8:e6:de:cf: bf:b9:47:a5:cb:e7:69:fa:c4:96:b3:7b:09:56:26:bb:9d:8d: 2b:24:c2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3 MzJEOUREQTYwHhcNMjQwNDI2MTgxNTQ4WhcNMjQwNTAzMTgxNTQ4WjAYMRYwFAYD VQQDEw02NjJiZWY1NS1iNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QIHT43EvwkQiHcHMrUUP8FeEGTJsJyTG2WjRfNv5+34bW5D33uQYQBZUoxH 0IdSzHI1oxbbneetXRMkU3r0fsoY1T/Ow6elBIT6XGn0MX9xSn0T5Vln8i/bqXzE psJOAy1XANZ4Qd88Zh+QXFQoq5R49NXEywdOojuV8z8n+yAmqmi8jHzcAnAIyZv9 sRaLTh0NWktzUGDBOajKELDs/A4FFI6HYPgxflAPdxxMltb7C9KvzG/939+uoM/0 5oFnqSD8AHdpkhGzemFCNp+ggD5JAZ4obHbhgyfMMdJACvOvIO8yA2q+IvqVcqM/ 37B8DdaSm8X8pqOeB+5weMiICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs3GO+A RSVd7KumZGPPr+CyXUCxMB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1 RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU5Ni9FREE2NUFDNDU1RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlB bXZIc21lbW54LUp6TFozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOVGyXe4pUkS05GhzD51hSac9lsq0NHrAwCHmxUVACdMcdTSntgJjk 1gfrC1vWunf0x0sgOowkk6E+5rZlz1a/7HarmaAbzGaTcfBBbcNtlS29Chas7EjY Z22qJ/z/y21Sw0ZRyYHDNvcFA3YA/mSZXeT/eNwFPnh6jOgwmw6LtgcB/Y6BANjA zEwfbHHlKEq8UL2hzcOFJPxWPY/UgiYstXz1FKSTfUR5du/ik0fYSojfR8bPLYs5 dZGz4gpBPZcuLGLzXDKh8nYidOcx8yCPV4+0lntmbT82hzb01oduCgH91XOpfvjm 3s+/uUely+dp+sSWs3sJVia7nY0rJMKD -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:51 2024 by rpki-client on console-ams.rpki-client.org