$ rpki-client -vvf rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft File: kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft (raw, json) Hash identifier: 2SZMnBEzwFrOPcdSg5xXjo6RUevT0QHmJ0fLUSOyUFM= Subject key identifier: 0F:49:78:EB:A2:9D:71:F3:40:DF:C0:16:D6:61:0E:6C:48:97:71:B3 Authority key identifier: 91:C3:C4:80:EE:8B:CD:C1:52:8B:1E:8B:97:46:B6:5F:DC:61:97:4C Certificate issuer: /CN=A9164CD2/serialNumber=91C3C480EE8BCDC1528B1E8B9746B65FDC61974C Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft Manifest number: 0ACE Signing time: Sat 04 May 2024 20:17:40 +0000 Manifest this update: Sat 04 May 2024 20:17:39 +0000 Manifest next update: Sat 11 May 2024 20:17:39 +0000 Files and hashes: 1: kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl (hash: UqOKIBm+p1zn6GxBZ6usa+mLKx/M7t5F3dumy/fB5Qg=) 2: 7DCDEBBCAA8911EA93873A4BC4F9AE02.roa (hash: W6fct4LnE08x6j8ZN9HPGMufFtROWbAnAcABwGTf1Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164CD2/serialNumber=91C3C480EE8BCDC1528B1E8B9746B65FDC61974C Validity Not Before: May 4 20:17:39 2024 GMT Not After : May 11 20:17:39 2024 GMT Subject: CN=663697e4-2a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:2c:33:31:10:a6:e8:52:79:05:a3:1b:08: 74:59:b4:46:7a:19:6f:1a:d4:c3:30:5c:87:dc:d6: 14:6f:67:f8:8e:8a:9f:fa:92:98:db:6f:e4:35:00: 7e:4f:73:44:35:8a:c2:7f:be:a3:cd:bf:b6:a2:2e: 25:a3:1e:06:81:06:39:2c:15:06:c0:ff:5c:93:5f: 50:9c:7a:c7:97:d1:46:b9:f5:b0:2f:bd:e6:1a:d6: 22:25:6d:11:d5:81:72:7e:f4:97:f7:79:a1:3e:4c: c0:d3:b1:95:c5:bf:67:21:51:71:81:4e:00:ce:05: 87:17:19:3c:20:af:3c:db:1b:f5:6a:74:40:bd:b3: 04:b9:11:a3:86:84:92:13:9d:f8:e8:d4:24:be:cc: ad:ee:cf:93:33:d5:c4:95:5b:96:db:a2:91:23:6e: f6:7c:9b:73:17:83:cb:f6:1b:dd:fa:3d:39:fe:46: e7:30:04:d6:59:5f:be:4d:e3:c5:5c:c5:03:21:86: 87:ef:5a:78:d8:a0:17:46:8e:e5:09:09:fe:5f:1f: 56:15:9a:54:ad:4e:f8:62:84:af:0b:59:dd:b2:9c: 6b:4f:6c:3c:36:e2:ce:6e:0b:c1:8f:97:97:ac:0a: 62:68:86:18:3d:2d:6b:29:8f:70:cb:3e:d1:55:78: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:78:EB:A2:9D:71:F3:40:DF:C0:16:D6:61:0E:6C:48:97:71:B3 X509v3 Authority Key Identifier: keyid:91:C3:C4:80:EE:8B:CD:C1:52:8B:1E:8B:97:46:B6:5F:DC:61:97:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPEgO6LzcFSix6Ll0a2X9xhl0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164CD2/D78AF74428F211EABD81F164C4F9AE02/kcPEgO6LzcFSix6Ll0a2X9xhl0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b1:bb:b0:a3:c3:b3:a4:02:ba:d3:74:69:37:f4:16:57:c8: e3:33:49:7f:ab:f7:77:a5:e5:ef:6e:7b:da:4e:dc:d3:49:d7: a9:d9:90:04:4f:59:b1:09:15:c6:52:51:72:af:91:aa:e2:19: fb:36:0c:68:ab:1c:5e:39:d2:15:0a:8b:c7:48:19:8c:df:69: c2:df:7a:d7:ab:9d:c3:19:19:d7:41:a2:1f:ef:a3:a8:3e:89: b8:2d:c0:9d:b8:36:46:82:13:52:b7:c5:85:10:38:66:3d:10: de:eb:17:5b:f4:bb:48:30:7e:7e:cd:6b:4b:1f:5e:8e:39:42: dc:e5:f3:54:94:62:1c:9f:ff:a8:24:81:55:83:c6:30:f9:4a: b2:d2:f3:d3:e9:72:16:9d:3f:5b:19:f8:07:24:9b:e0:a1:94: 43:e2:cb:c8:74:58:23:41:ad:32:0d:23:d2:a4:67:7a:57:2e: 1a:30:0d:e0:3f:a7:2e:07:19:1e:60:1f:02:f2:73:c8:6f:e7: 6c:5d:c8:37:f6:22:42:8f:f5:26:8d:37:e9:b6:61:45:ae:3a: 07:2f:0b:1d:a1:12:bd:8a:9d:02:06:88:61:c8:e5:b9:89:1f: 99:20:9e:e3:dd:f8:68:c5:b0:14:ab:17:43:c2:67:ee:96:e3: 26:fd:62:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRDRDIxMTAvBgNVBAUTKDkxQzNDNDgwRUU4QkNEQzE1MjhCMUU4Qjk3NDZCNjVG REM2MTk3NEMwHhcNMjQwNTA0MjAxNzM5WhcNMjQwNTExMjAxNzM5WjAYMRYwFAYD VQQDEw02NjM2OTdlNC0yYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNssMzEQpuhSeQWjGwh0WbRGehlvGtTDMFyH3NYUb2f4joqf+pKY22/kNQB+ T3NENYrCf76jzb+2oi4lox4GgQY5LBUGwP9ck19QnHrHl9FGufWwL73mGtYiJW0R 1YFyfvSX93mhPkzA07GVxb9nIVFxgU4AzgWHFxk8IK882xv1anRAvbMEuRGjhoSS E5346NQkvsyt7s+TM9XElVuW26KRI272fJtzF4PL9hvd+j05/kbnMATWWV++TePF XMUDIYaH71p42KAXRo7lCQn+Xx9WFZpUrU74YoSvC1ndspxrT2w8NuLObgvBj5eX rApiaIYYPS1rKY9wyz7RVXhrFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9JeOui nXHzQN/AFtZhDmxIl3GzMB8GA1UdIwQYMBaAFJHDxIDui83BUosei5dGtl/cYZdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NENEMi9ENzhBRjc0NDI4 RjIxMUVBQkQ4MUYxNjRDNEY5QUUwMi9rY1BFZ082THpjRlNpeDZMbDBhMlg5eGhs MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEVnTzZMemNGU2l4NkxsMGEyWDl4aGwwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NENEMi9ENzhBRjc0NDI4RjIxMUVBQkQ4MUYxNjRDNEY5QUUwMi9rY1BFZ082THpj RlNpeDZMbDBhMlg5eGhsMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZsbuwo8OzpAK603RpN/QWV8jjM0l/q/d3peXvbnvaTtzTSdep2ZAE T1mxCRXGUlFyr5Gq4hn7NgxoqxxeOdIVCovHSBmM32nC33rXq53DGRnXQaIf76Oo Pom4LcCduDZGghNSt8WFEDhmPRDe6xdb9LtIMH5+zWtLH16OOULc5fNUlGIcn/+o JIFVg8Yw+Uqy0vPT6XIWnT9bGfgHJJvgoZRD4svIdFgjQa0yDSPSpGd6Vy4aMA3g P6cuBxkeYB8C8nPIb+dsXcg39iJCj/UmjTfptmFFrjoHLwsdoRK9ip0CBohhyOW5 iR+ZIJ7j3fhoxbAUqxdDwmfuluMm/WIm -----END CERTIFICATE-----Generated at Sat May 4 21:19:28 2024 by rpki-client on console-ams.rpki-client.org