$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: GUnAOSEmqaGJexIti31Gk2LinTQO0ch9/nVO09A/xGE= Subject key identifier: 25:DE:DA:5D:07:EF:7F:E9:59:B9:2A:48:78:5E:80:99:CC:C5:57:99 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 05A8 Signing time: Wed 01 May 2024 00:35:49 +0000 Manifest this update: Wed 01 May 2024 00:35:48 +0000 Manifest next update: Wed 08 May 2024 00:35:48 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: RlU8zo1LZHU8ZPAv8bOI/IF5FWDlhXruIU5puofXpUE=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: JnE8YOt8k5stLHGvhUXv9i++NuiB7eRDBXg4yo9a9/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: May 1 00:35:48 2024 GMT Not After : May 8 00:35:48 2024 GMT Subject: CN=66318e64-b6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:11:7e:af:d2:55:17:11:af:2e:29:ed:6c: 07:f9:d6:88:30:72:5b:1d:97:30:81:27:27:24:45: 7e:43:87:c4:c5:5c:30:5f:40:35:76:aa:dc:7b:53: 03:29:e7:6f:a1:c4:8c:79:74:45:81:69:e2:45:d9: b2:d5:ee:f1:32:96:e8:1f:55:f2:d9:90:2e:c8:7b: 8e:e8:8b:a6:64:8c:b7:fa:6a:dc:0d:84:80:44:7e: 09:35:41:6d:61:72:4c:0c:bd:7d:a6:ba:30:49:c8: 46:9b:87:3b:71:51:a3:b5:f7:86:59:e9:85:2d:e8: de:03:61:83:48:6a:df:96:56:fd:c5:07:43:da:9e: c2:3c:50:f2:de:ad:0e:10:ec:4d:27:f3:0b:6f:38: eb:91:65:da:00:a2:ae:0c:0a:39:40:ef:a6:8a:96: 73:3b:45:c8:be:3a:ac:a8:e2:fc:00:6a:29:43:1c: 5d:38:f3:a6:9c:2d:30:0b:09:ba:cf:d2:e9:5c:fd: a5:8d:cd:2f:62:ab:2a:98:53:4d:1d:eb:dd:8c:48: 2b:1e:f7:9d:35:fd:b5:9b:49:ed:38:0b:26:e5:25: 31:e3:74:90:47:59:04:74:24:a9:cb:4f:ef:c6:8a: 98:48:f9:b8:6d:d8:52:47:79:d8:bc:e2:a7:10:c8: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:DA:5D:07:EF:7F:E9:59:B9:2A:48:78:5E:80:99:CC:C5:57:99 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4f:ba:86:3a:18:0b:1c:67:f9:66:dd:9d:53:a8:42:7a:14: 25:5b:ea:b8:29:55:57:ed:12:ee:2e:bf:41:cf:e5:c8:fe:64: db:66:98:65:28:7b:54:4f:4c:6c:cd:aa:cf:fb:a1:be:12:60: 5a:9c:8d:e4:21:61:e6:a6:89:2a:6b:90:70:bf:8f:35:90:ff: 2a:9c:99:53:4f:6d:9c:d9:8e:76:2c:38:2f:24:d0:81:4d:7c: b7:cb:6c:75:50:4d:7c:71:3f:10:a3:f9:c8:81:5c:b1:6e:1f: 12:f2:50:df:d6:f4:14:ce:b2:b6:d3:ce:7b:97:1d:b0:0e:89: 73:63:8b:52:4f:c0:ec:c7:77:25:2d:be:8e:16:60:cf:f1:ed: 84:62:e3:7a:28:5e:ae:ea:57:52:3a:32:1c:8f:dd:80:b0:10: 6a:dd:54:ce:40:e2:08:a9:d5:34:1a:97:30:3a:c3:f1:07:86: b5:b3:94:ce:11:ff:74:c5:2b:ff:44:3e:90:6a:79:48:fc:6b: ed:b4:9b:11:c3:fe:50:55:19:c1:30:fc:5b:8f:11:af:b3:b3: ea:b4:e8:d6:82:0a:a3:bc:2a:27:9d:a9:97:e1:cd:9a:8e:4d: 14:e9:89:67:e8:e8:65:b6:03:fc:f8:2b:f7:e8:b0:50:14:19: 12:0e:71:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjQwNTAxMDAzNTQ4WhcNMjQwNTA4MDAzNTQ4WjAYMRYwFAYD VQQDEw02NjMxOGU2NC1iNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAph4Rfq/SVRcRry4p7WwH+daIMHJbHZcwgScnJEV+Q4fExVwwX0A1dqrce1MD KedvocSMeXRFgWniRdmy1e7xMpboH1Xy2ZAuyHuO6IumZIy3+mrcDYSARH4JNUFt YXJMDL19prowSchGm4c7cVGjtfeGWemFLejeA2GDSGrfllb9xQdD2p7CPFDy3q0O EOxNJ/MLbzjrkWXaAKKuDAo5QO+mipZzO0XIvjqsqOL8AGopQxxdOPOmnC0wCwm6 z9LpXP2ljc0vYqsqmFNNHevdjEgrHvedNf21m0ntOAsm5SUx43SQR1kEdCSpy0/v xoqYSPm4bdhSR3nYvOKnEMiDrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXe2l0H 73/pWbkqSHhegJnMxVeZMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlT7qGOhgLHGf5Zt2dU6hCehQlW+q4KVVX7RLuLr9Bz+XI/mTbZphl KHtUT0xszarP+6G+EmBanI3kIWHmpokqa5Bwv481kP8qnJlTT22c2Y52LDgvJNCB TXy3y2x1UE18cT8Qo/nIgVyxbh8S8lDf1vQUzrK20857lx2wDolzY4tST8Dsx3cl Lb6OFmDP8e2EYuN6KF6u6ldSOjIcj92AsBBq3VTOQOIIqdU0GpcwOsPxB4a1s5TO Ef90xSv/RD6QanlI/GvttJsRw/5QVRnBMPxbjxGvs7PqtOjWggqjvConnamX4c2a jk0U6Yln6OhltgP8+Cv36LBQFBkSDnGR -----END CERTIFICATE-----Generated at Wed May 1 01:38:27 2024 by rpki-client on console-ams.rpki-client.org