$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: 18Kj+oRdW/wUE3AL9LCg2hzPHBvBcKu61TqyPT4pSXQ= Subject key identifier: B8:C0:87:EC:C0:D4:BE:03:D8:9F:5D:A6:D3:AF:40:62:B5:86:4F:7C Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 56 Signing time: Fri 17 May 2024 07:58:12 +0000 Manifest this update: Fri 17 May 2024 07:58:12 +0000 Manifest next update: Fri 24 May 2024 07:58:12 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: p4Q6K8W4lqcOH3ylDBeGgU5NsdlSW4GMNUv2A4zySGQ=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: dHFLxgSsgo+z3XxuxFpoEUI8EzLPDRLpmKSFR+o9NyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: May 17 07:58:12 2024 GMT Not After : May 24 07:58:12 2024 GMT Subject: CN=66470e14-24fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:d2:86:13:7d:1f:0b:e3:ea:a7:9c:6a:3c: d4:fc:8c:ab:7e:a1:36:8e:5b:6b:df:0a:fe:46:0d: e3:53:cc:d9:47:76:15:8b:d4:47:4b:44:fb:3d:38: 3d:86:47:19:ea:7c:3a:b4:7f:6d:63:c5:88:53:cf: c6:84:b0:e5:5e:6c:e5:8d:ab:dc:72:60:1c:53:1f: 17:d9:5f:5d:07:d2:6d:19:e3:6a:f1:4d:09:43:76: bd:89:89:ed:23:ea:67:87:60:66:ac:63:e1:4d:06: c7:75:e8:3e:7e:7a:16:f9:c7:81:87:b6:4e:16:d6: 0a:e2:49:22:39:51:4f:a2:c2:d6:e5:d3:17:67:09: ac:2b:d9:6b:cb:61:c4:17:8f:98:b6:a9:c9:02:40: 3f:2e:fb:b3:21:da:c2:21:18:20:d0:43:dd:5f:da: 9c:06:b2:4d:d0:cc:5b:98:87:04:8b:99:9e:59:24: d8:09:23:82:f0:6f:a6:33:da:35:76:dc:a1:63:9b: 56:51:31:0c:f5:ec:30:f1:62:9c:63:6a:e4:8c:61: f9:82:4b:81:2d:f7:91:57:de:82:ce:02:d7:c8:68: 2a:7a:4a:c2:ca:5e:7e:94:ed:c5:87:93:cc:2b:01: e6:64:2e:c6:e2:d8:61:f8:be:41:14:14:ad:bf:3b: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C0:87:EC:C0:D4:BE:03:D8:9F:5D:A6:D3:AF:40:62:B5:86:4F:7C X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2e:5f:78:cf:49:30:a0:a7:0e:11:07:02:e1:7f:af:09:e3: f5:1c:a1:f1:a4:62:e0:c1:0a:e6:40:d0:7e:46:20:55:86:b3: 66:4c:38:6b:e1:26:9a:2a:e6:34:2a:d2:9c:ff:82:00:d9:6f: 53:81:ba:5e:0a:60:a9:d2:92:5f:6b:3f:4a:6f:a6:11:70:47: e0:83:25:aa:b7:3c:55:74:a2:6b:c7:78:df:8a:56:04:bc:e7: 89:f2:4d:e4:c5:8d:d8:88:ab:3e:74:e7:1c:9d:18:51:2d:43: 04:4e:5e:67:d5:eb:47:03:21:f2:ee:e6:34:30:63:e5:77:bb: 18:57:25:78:9e:6e:71:5a:71:42:49:31:70:fd:0d:8e:90:df: 34:94:37:8b:b9:9f:96:8e:18:7f:ad:25:58:ec:d5:10:08:79: 3b:ef:18:d2:e0:ad:c1:66:25:3c:be:a7:9c:da:a6:1c:cc:56: 71:0f:3b:ec:fb:13:76:3a:5c:ca:33:9c:d4:04:6a:13:c1:59: 28:02:08:09:96:82:9e:ec:d0:b8:82:c3:6a:8e:f8:92:75:4c: ad:26:6d:c9:e6:2f:fe:48:6e:0e:51:22:16:08:6d:9c:c1:af: 23:fb:5d:d0:9e:3a:54:70:69:af:80:21:62:a8:1d:35:11:e2: 00:f3:3c:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzM3ODExMC8GA1UEBRMoOTBCOUJBQkQ3NDJCMjc1NzQzRkI3MTVFMTM1OTc1NjM4 RTlDMkYyNTAeFw0yNDA1MTcwNzU4MTJaFw0yNDA1MjQwNzU4MTJaMBgxFjAUBgNV BAMTDTY2NDcwZTE0LTI0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9gNKGE30fC+Pqp5xqPNT8jKt+oTaOW2vfCv5GDeNTzNlHdhWL1EdLRPs9OD2G RxnqfDq0f21jxYhTz8aEsOVebOWNq9xyYBxTHxfZX10H0m0Z42rxTQlDdr2Jie0j 6meHYGasY+FNBsd16D5+ehb5x4GHtk4W1griSSI5UU+iwtbl0xdnCawr2WvLYcQX j5i2qckCQD8u+7Mh2sIhGCDQQ91f2pwGsk3QzFuYhwSLmZ5ZJNgJI4Lwb6Yz2jV2 3KFjm1ZRMQz17DDxYpxjauSMYfmCS4Et95FX3oLOAtfIaCp6SsLKXn6U7cWHk8wr AeZkLsbi2GH4vkEUFK2/O1STAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuMCH7MDU vgPYn12m069AYrWGT3wwHwYDVR0jBBgwFoAUkLm6vXQrJ1dD+3FeE1l1Y46cLyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Mzc4LzBBODhDN0YyOTNF MzExRUU5M0M4RTU4MkM0RjlBRTAyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xtNnZYUXJKMWRELTNGZUUxbDFZNDZjTHlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Mzc4LzBBODhDN0YyOTNFMzExRUU5M0M4RTU4MkM0RjlBRTAyL2tMbTZ2WFFySjFk RC0zRmVFMWwxWTQ2Y0x5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABcuX3jPSTCgpw4RBwLhf68J4/UcofGkYuDBCuZA0H5GIFWGs2ZMOGvh Jpoq5jQq0pz/ggDZb1OBul4KYKnSkl9rP0pvphFwR+CDJaq3PFV0omvHeN+KVgS8 54nyTeTFjdiIqz505xydGFEtQwROXmfV60cDIfLu5jQwY+V3uxhXJXiebnFacUJJ MXD9DY6Q3zSUN4u5n5aOGH+tJVjs1RAIeTvvGNLgrcFmJTy+p5zaphzMVnEPO+z7 E3Y6XMoznNQEahPBWSgCCAmWgp7s0LiCw2qO+JJ1TK0mbcnmL/5Ibg5RIhYIbZzB ryP7XdCeOlRwaa+AIWKoHTUR4gDzPBg= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org