$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json) Hash identifier: NRaHxgtez+EfWMmP5R8wr7k74zsLKSuQQKlftZROLcA= Subject key identifier: 22:43:84:7E:35:65:A7:75:48:51:A4:0C:1E:29:7B:4E:B2:67:77:BE Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft Manifest number: E1 Signing time: Sat 27 Apr 2024 05:54:31 +0000 Manifest this update: Sat 27 Apr 2024 05:54:31 +0000 Manifest next update: Sat 04 May 2024 05:54:31 +0000 Files and hashes: 1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: hPjLqVYHGGU3uR6Ot/wn/w4DxVMNU7SumA+erstvKao=) 2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: vybML0f9LMBAv/onS8eSVVTR8XtBJYNWvROz/vtKHKk=) 3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: I6vDZeTV0tO1kVtLGCaj1SwgxmJCQ+MVEeZJxjP4BeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Validity Not Before: Apr 27 05:54:31 2024 GMT Not After : May 4 05:54:31 2024 GMT Subject: CN=662c9317-866a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:12:d2:ec:22:25:df:7d:80:62:6e:70:c7: 2c:dc:23:b0:1e:b5:f3:43:12:5b:21:d2:ce:a4:67: a0:ff:74:2b:3b:b3:77:df:7e:5a:51:7f:14:55:45: 11:6c:30:6b:1c:2a:54:62:47:2e:0c:30:77:dc:c3: 85:37:1b:5d:a7:63:8f:12:cc:1a:ca:ba:8b:ef:4a: 94:06:84:c2:bb:b1:e0:6b:cd:8f:16:ae:ce:d6:88: 18:d5:61:05:a9:e9:fe:e6:cb:46:b5:d9:41:cc:bc: 42:18:24:a6:c5:8f:ae:58:e9:ea:35:4c:0d:64:57: c3:d2:b7:95:38:f0:ba:c7:26:d9:ea:29:4b:5f:d9: bf:58:e5:b3:3e:24:04:fd:88:de:f8:5d:31:40:7f: cc:94:94:d8:a4:60:5f:4c:a3:78:02:8d:8b:54:91: c8:72:cf:a4:8e:e8:8b:f7:3e:d1:b5:37:ff:b9:62: 8e:3f:85:32:01:f8:94:ba:08:76:96:e6:f5:1b:71: 93:32:f1:14:af:7d:6e:da:f5:e0:b0:4b:bb:ab:29: c1:a6:7d:0c:d7:ed:b6:a7:72:d2:67:03:21:95:58: 55:9a:9b:6b:a8:16:af:61:61:9b:e4:4b:8d:a1:57: 2c:aa:96:94:ae:c3:c2:5f:45:c7:92:df:c0:2c:41: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:84:7E:35:65:A7:75:48:51:A4:0C:1E:29:7B:4E:B2:67:77:BE X509v3 Authority Key Identifier: keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f3:d7:bb:e2:1e:15:f7:3a:b1:52:04:cc:66:26:a0:41:26: 60:f4:9a:8c:b8:22:41:b6:24:31:34:04:cf:fd:86:06:b8:be: a7:11:69:4b:a1:5b:c9:58:4e:73:43:37:6c:7f:18:fe:d1:9f: fb:b7:2e:bd:ec:67:c0:fb:a6:65:15:d6:ce:4a:1c:72:7c:12: 48:22:6c:a3:3e:48:80:e3:33:22:9b:c9:81:15:2c:23:b2:bc: 22:fb:00:d8:be:a6:3c:57:b8:92:4e:76:82:ab:e5:c9:86:c4: 42:c6:40:8c:11:f6:1b:81:3e:bc:04:b8:4d:9e:da:c0:be:fb: 78:01:bd:6b:f8:0a:b7:08:7d:66:48:87:55:4d:73:5c:d9:e9: 2b:8c:ac:6c:22:e4:a5:f3:29:d3:4e:cd:05:12:5b:be:fe:9d: 41:79:5d:d6:a3:d3:33:32:32:84:3d:ad:80:35:57:1b:8b:79: 6f:e4:7f:96:57:7f:33:4d:31:63:71:d3:1e:05:05:1e:a1:71: 0c:9f:fd:c2:04:c8:55:16:b5:88:e6:93:c3:52:8a:bc:08:e0: 2f:74:5c:c4:0c:04:22:4d:e4:24:59:a3:01:10:89:50:c5:b1: 47:7e:1a:7e:b7:6c:a1:cc:b8:c0:6d:8e:9c:12:06:c1:39:21: e9:03:6f:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MjcxMTAvBgNVBAUTKDJBNjlENjk5RjEzQzA0MUJGREEzREFBNTdFMjFGRkFC M0M1M0VENUYwHhcNMjQwNDI3MDU1NDMxWhcNMjQwNTA0MDU1NDMxWjAYMRYwFAYD VQQDEw02NjJjOTMxNy04NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+cS0uwiJd99gGJucMcs3COwHrXzQxJbIdLOpGeg/3QrO7N3335aUX8UVUUR bDBrHCpUYkcuDDB33MOFNxtdp2OPEswayrqL70qUBoTCu7Hga82PFq7O1ogY1WEF qen+5stGtdlBzLxCGCSmxY+uWOnqNUwNZFfD0reVOPC6xybZ6ilLX9m/WOWzPiQE /Yje+F0xQH/MlJTYpGBfTKN4Ao2LVJHIcs+kjuiL9z7RtTf/uWKOP4UyAfiUugh2 lub1G3GTMvEUr31u2vXgsEu7qynBpn0M1+22p3LSZwMhlVhVmptrqBavYWGb5EuN oVcsqpaUrsPCX0XHkt/ALEF8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJDhH41 Zad1SFGkDB4pe06yZ3e+MB8GA1UdIwQYMBaAFCpp1pnxPAQb/aPapX4h/6s8U+1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkyNy9GRDhCMjJCMEJD MkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJCdjlvOXFsZmlIX3F6eFQ3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttbldtZkU4QkJ2OW85cWxmaUhfcXp4VDdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkyNy9GRDhCMjJCMEJDMkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJC djlvOXFsZmlIX3F6eFQ3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw89e74h4V9zqxUgTMZiagQSZg9JqMuCJBtiQxNATP/YYGuL6nEWlL oVvJWE5zQzdsfxj+0Z/7ty697GfA+6ZlFdbOShxyfBJIImyjPkiA4zMim8mBFSwj srwi+wDYvqY8V7iSTnaCq+XJhsRCxkCMEfYbgT68BLhNntrAvvt4Ab1r+Aq3CH1m SIdVTXNc2ekrjKxsIuSl8ynTTs0FElu+/p1BeV3Wo9MzMjKEPa2ANVcbi3lv5H+W V38zTTFjcdMeBQUeoXEMn/3CBMhVFrWI5pPDUoq8COAvdFzEDAQiTeQkWaMBEIlQ xbFHfhp+t2yhzLjAbY6cEgbBOSHpA2+/ -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:10 2024 by rpki-client on console-ams.rpki-client.org