$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: o66KpOaPofv3bR2mpeaj+3Oe+KFCTyjsCM/q7P+4EU4= Subject key identifier: 6F:75:E3:DC:33:C9:5C:B7:07:42:7B:23:76:4B:E9:44:4C:EA:11:86 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2447 Signing time: Sat 04 May 2024 16:07:53 +0000 Manifest this update: Sat 04 May 2024 16:07:53 +0000 Manifest next update: Sat 11 May 2024 16:07:53 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: SpW8I0NQxGS7cYd2mJxzKpxVySczNLhxeOqEXHbM44A=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: BoFd3VOPpskU6gmC/Fd4ApjXUdAiVadLjpSwmo30Xn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9305 (0x2459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: May 4 16:07:53 2024 GMT Not After : May 11 16:07:53 2024 GMT Subject: CN=66365d59-8b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:4d:84:9a:3a:a6:ec:5a:24:29:d9:ca:6c: cb:f0:27:f3:42:64:ed:77:2c:f9:6e:60:79:ef:fc: fa:22:df:8e:cc:b7:20:e2:11:c4:96:99:de:b5:47: 85:47:0e:a9:69:a3:68:17:1d:5b:12:90:9b:e5:f7: 06:35:1c:d4:c0:4f:77:9a:30:30:42:8c:5d:87:0e: 0e:c5:3b:bc:6b:c3:06:1b:1d:3e:c6:17:ab:27:20: fc:c2:5d:44:46:11:e4:d2:aa:48:1c:50:41:c5:9e: ac:62:1c:ec:19:52:da:3d:a5:a7:81:20:a6:23:61: a6:83:c7:82:11:82:32:1f:9b:ef:f4:90:fa:6e:e0: 73:d9:37:10:29:55:7f:29:33:94:d2:25:7e:fb:d6: c3:c8:dc:ec:70:31:da:f3:d6:d3:4d:72:9b:ef:b4: 98:e8:2a:25:c3:52:d5:63:5a:75:cc:1e:a4:54:10: 20:ba:8b:7e:88:0b:78:44:12:e8:90:d0:f1:bc:1e: 31:c1:d8:b5:41:de:49:84:ad:cd:eb:4e:64:65:ab: 61:2c:cf:29:a5:40:3c:25:40:f6:23:e7:f7:cd:4a: 02:8a:ca:41:dd:ef:4a:1e:1b:5f:5e:d0:3d:65:fb: cc:02:53:36:9c:0c:e9:b6:77:37:10:ec:a0:43:4a: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:75:E3:DC:33:C9:5C:B7:07:42:7B:23:76:4B:E9:44:4C:EA:11:86 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:68:58:79:9d:73:47:a1:47:39:76:53:dd:09:50:04:b1:8e: ff:1b:12:99:3f:08:01:f2:90:a5:74:aa:66:e6:62:c4:f4:c8: 23:be:43:77:9f:da:03:83:7f:43:c6:72:35:6d:43:a0:4c:39: 84:20:4f:8b:4b:e8:b0:7c:a0:1b:c4:a1:56:05:f7:f7:ab:20: cb:71:db:ff:3e:c1:2e:2a:1e:e6:e9:8f:55:10:a4:c8:6b:94: a2:d2:d9:71:26:a3:25:8c:36:9c:2c:2f:eb:05:99:b9:48:6d: 94:6c:89:3b:fc:84:05:21:6a:43:b3:76:71:aa:cf:e0:5d:bb: 7e:38:37:6e:06:84:a1:2b:2d:77:1a:60:31:2a:55:da:0a:10: 57:05:69:cb:98:12:f9:aa:b6:91:d5:c5:ce:5f:18:b3:53:ee: ae:e9:eb:92:87:c7:37:e5:f5:87:9e:b6:48:b6:e0:af:ce:95: b5:d3:71:d1:58:00:1d:6a:4c:09:65:fb:22:55:19:dd:b9:29: fb:fc:56:e8:3c:e4:dc:18:95:bf:68:ab:ac:ca:f6:61:25:bc: 45:b7:56:6e:6c:ed:d8:0c:a8:af:13:64:5a:ee:56:e6:b0:43: 91:79:de:21:da:a8:8e:fc:94:88:9e:a5:3d:db:55:9c:d2:ab: fb:8d:93:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjQwNTA0MTYwNzUzWhcNMjQwNTExMTYwNzUzWjAYMRYwFAYD VQQDEw02NjM2NWQ1OS04YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr31NhJo6puxaJCnZymzL8CfzQmTtdyz5bmB57/z6It+OzLcg4hHElpnetUeF Rw6paaNoFx1bEpCb5fcGNRzUwE93mjAwQoxdhw4OxTu8a8MGGx0+xherJyD8wl1E RhHk0qpIHFBBxZ6sYhzsGVLaPaWngSCmI2Gmg8eCEYIyH5vv9JD6buBz2TcQKVV/ KTOU0iV++9bDyNzscDHa89bTTXKb77SY6Colw1LVY1p1zB6kVBAguot+iAt4RBLo kNDxvB4xwdi1Qd5JhK3N605kZathLM8ppUA8JUD2I+f3zUoCispB3e9KHhtfXtA9 ZfvMAlM2nAzptnc3EOygQ0pOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9149wz yVy3B0J7I3ZL6URM6hGGMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIaFh5nXNHoUc5dlPdCVAEsY7/GxKZPwgB8pCldKpm5mLE9MgjvkN3 n9oDg39DxnI1bUOgTDmEIE+LS+iwfKAbxKFWBff3qyDLcdv/PsEuKh7m6Y9VEKTI a5Si0tlxJqMljDacLC/rBZm5SG2UbIk7/IQFIWpDs3Zxqs/gXbt+ODduBoShKy13 GmAxKlXaChBXBWnLmBL5qraR1cXOXxizU+6u6euSh8c35fWHnrZItuCvzpW103HR WAAdakwJZfsiVRnduSn7/FboPOTcGJW/aKusyvZhJbxFt1ZubO3YDKivE2Ra7lbm sEORed4h2qiO/JSInqU921Wc0qv7jZNV -----END CERTIFICATE-----Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org