$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json) Hash identifier: GYO8St5hS3ldMv2v18VnibTAlm5+pn019Ye+zpR/2/U= Subject key identifier: 14:FA:61:C9:47:A0:F9:F4:47:10:D7:BA:12:FD:65:4C:07:A5:BC:79 Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft Manifest number: 046C Signing time: Tue 07 May 2024 01:43:44 +0000 Manifest this update: Tue 07 May 2024 01:43:43 +0000 Manifest next update: Tue 14 May 2024 01:43:43 +0000 Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: gd+0Xb3bsWVjPXeuaCMvgT9cgqYPBIvoKRe20pHBc/0=) 2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: W2CC03Iszn8+ulcJ3T40dvVEepYKJ/v5C7sNO7bHna0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Validity Not Before: May 7 01:43:43 2024 GMT Not After : May 14 01:43:43 2024 GMT Subject: CN=6639874f-5499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:1c:c5:ea:bb:22:66:49:54:89:bc:6e:6c: be:15:d9:b8:ad:15:c0:c6:78:e3:4f:65:4d:25:f7: f8:3c:13:1d:9f:f3:ea:97:a4:2c:a6:0f:65:f2:62: d1:13:4b:2f:6c:4c:5e:a6:27:54:cb:d1:6b:37:fa: 39:d0:a5:4f:f8:5b:0e:95:2f:4b:c9:3d:b5:fe:8e: 6d:cd:90:0a:cf:dd:18:4d:90:cf:1c:01:b6:26:4b: 60:8f:36:18:06:94:34:17:b2:d9:75:51:25:6e:34: bb:23:4a:d9:f7:c6:40:39:5c:96:8b:d9:8a:03:58: 0a:66:a9:de:15:10:22:85:ae:bd:f4:5d:40:64:00: d4:29:5a:15:c6:06:88:de:c3:27:fc:65:d7:82:6c: 0d:09:72:44:a0:ae:c6:28:ab:d8:fd:01:df:53:83: 01:c3:17:ff:0d:a5:79:95:4b:b6:bb:61:5f:fd:b0: 8b:e7:5e:82:db:c6:96:f8:f6:2a:c0:9d:a2:c8:df: f7:ed:3b:52:3d:92:05:70:84:a3:9a:94:f8:3c:84: e3:45:69:00:80:78:82:c5:bd:48:e1:57:ab:28:1e: c9:aa:cd:aa:10:7c:60:8d:ab:d3:85:ce:21:59:57: 88:2c:1c:20:8e:07:f6:38:fd:6f:9f:b6:ae:2f:85: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:61:C9:47:A0:F9:F4:47:10:D7:BA:12:FD:65:4C:07:A5:BC:79 X509v3 Authority Key Identifier: keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:72:94:55:e4:90:33:4b:92:85:fc:d5:0f:88:8e:9a:2c:f2: a3:8b:75:4d:57:92:19:f3:2d:45:c2:2c:12:89:a0:51:af:e2: f3:71:3a:51:10:bd:ed:e3:7b:cd:34:0b:6a:33:1f:93:80:8f: 17:d6:dd:90:5f:c8:2d:28:2f:d0:e8:69:a2:a1:71:4e:77:a9: d8:40:07:06:44:f5:51:c1:11:b8:e2:c4:0e:39:48:a4:00:94: 9e:2c:42:ed:8a:cb:bb:2f:9f:24:3f:41:90:51:52:a0:67:c6: b1:d6:2f:ea:8b:a2:83:c8:f0:d6:97:a5:98:62:c0:81:70:6f: 47:e1:34:0e:20:a5:23:25:c2:d1:7f:81:27:81:a2:f8:f9:c1: a7:9e:cb:ce:ec:5a:01:25:e7:60:ed:5f:9a:0f:36:7b:75:dd: 55:e3:9a:60:be:51:98:bd:d4:03:c7:28:d3:4f:26:db:cd:93: 7f:04:f2:59:7d:34:2f:3c:73:5b:a7:8d:b3:ec:a7:dd:82:b3: 73:16:03:56:f9:b7:2e:0c:36:d0:4a:27:67:b7:27:06:b6:9c: 7b:32:e7:41:0f:0f:70:50:8d:93:35:73:b5:51:0a:ac:25:80: 7e:40:c0:23:e3:24:bb:2b:b0:58:b6:9b:c7:f7:6d:43:63:2f: 79:eb:41:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx RjBCRUZFRTcwHhcNMjQwNTA3MDE0MzQzWhcNMjQwNTE0MDE0MzQzWjAYMRYwFAYD VQQDEw02NjM5ODc0Zi01NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYEcxeq7ImZJVIm8bmy+Fdm4rRXAxnjjT2VNJff4PBMdn/Pql6Qspg9l8mLR E0svbExepidUy9FrN/o50KVP+FsOlS9LyT21/o5tzZAKz90YTZDPHAG2JktgjzYY BpQ0F7LZdVElbjS7I0rZ98ZAOVyWi9mKA1gKZqneFRAiha699F1AZADUKVoVxgaI 3sMn/GXXgmwNCXJEoK7GKKvY/QHfU4MBwxf/DaV5lUu2u2Ff/bCL516C28aW+PYq wJ2iyN/37TtSPZIFcISjmpT4PITjRWkAgHiCxb1I4VerKB7Jqs2qEHxgjavThc4h WVeILBwgjgf2OP1vn7auL4V7kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT6YclH oPn0RxDXuhL9ZUwHpbx5MB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5 QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N TjdkX2w1QTNCcllmQy1fdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbcpRV5JAzS5KF/NUPiI6aLPKji3VNV5IZ8y1FwiwSiaBRr+LzcTpR EL3t43vNNAtqMx+TgI8X1t2QX8gtKC/Q6GmioXFOd6nYQAcGRPVRwRG44sQOOUik AJSeLELtisu7L58kP0GQUVKgZ8ax1i/qi6KDyPDWl6WYYsCBcG9H4TQOIKUjJcLR f4EngaL4+cGnnsvO7FoBJedg7V+aDzZ7dd1V45pgvlGYvdQDxyjTTybbzZN/BPJZ fTQvPHNbp42z7KfdgrNzFgNW+bcuDDbQSidntycGtpx7MudBDw9wUI2TNXO1UQqs JYB+QMAj4yS7K7BYtpvH921DYy9560H9 -----END CERTIFICATE-----Generated at Tue May 7 03:10:20 2024 by rpki-client on console-ams.rpki-client.org