$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: fPOsD8B4vth6kXvws1YUvQS74RspbsN30B949zjUAh8= Subject key identifier: AF:DC:AB:B5:1A:0B:29:DE:4A:05:51:71:68:D0:BA:A4:7F:DD:50:E7 Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 0313 Signing time: Sat 01 Jun 2024 04:16:21 +0000 Manifest this update: Sat 01 Jun 2024 04:16:20 +0000 Manifest next update: Sat 08 Jun 2024 04:16:20 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: fCPYW88K0TvSKYAa+XQNBqC34R3r7o+on3lIMzkPQ6Q=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: zNdiJ1pBffbcNnWg75GFO6PkHkmsjOTQiX3Av0Ret+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: Jun 1 04:16:20 2024 GMT Not After : Jun 8 04:16:20 2024 GMT Subject: CN=665aa095-b144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:ec:38:3c:22:4c:b8:a3:79:12:81:fd:a2: 0c:ed:c4:66:f6:3e:7a:a7:3c:93:d1:18:8b:44:f2: a6:5b:65:55:f5:98:95:1f:69:f8:94:16:20:9e:93: ee:a3:55:86:1a:55:0c:09:9d:0c:c4:b1:a4:e8:97: 2b:07:8d:07:54:2d:92:84:22:75:5c:35:e9:3d:cd: e2:1f:a0:b3:2a:2a:38:82:13:45:63:de:ff:be:a3: 6a:ad:50:3d:81:39:98:bd:a5:36:12:37:c3:8d:2c: 51:bb:09:21:0a:ef:4e:8b:66:8e:fd:17:09:94:5c: e6:40:5e:89:c6:ce:e1:87:63:43:b7:4a:2d:c1:16: cf:9c:04:e3:c3:6f:20:f6:41:73:b5:b7:70:db:b4: 64:d5:de:aa:6f:85:da:4c:e1:53:08:c2:3b:fd:6c: 93:5b:e3:c5:95:9d:fd:24:39:44:81:07:e6:1c:41: bc:a7:39:f8:cb:a5:72:39:bf:6c:16:91:b2:e9:26: ab:11:96:01:fc:cc:cc:25:d2:6b:3f:4f:52:43:96: b8:fa:4d:06:30:e8:d7:90:b9:f3:cc:29:2b:44:53: 20:3b:b8:f9:29:54:a4:fd:6a:90:52:db:33:4f:8c: 6f:11:31:b7:ad:0e:7f:f0:1f:ce:be:70:76:6c:b6: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DC:AB:B5:1A:0B:29:DE:4A:05:51:71:68:D0:BA:A4:7F:DD:50:E7 X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e0:20:be:9c:d4:c6:21:1f:60:f8:9b:e4:4e:b2:44:17:b2: 0c:d4:fa:85:85:82:69:02:89:4f:b0:bc:3c:79:ba:8f:30:52: 89:38:83:1b:3a:a7:90:b3:e0:e3:82:80:a4:0b:7c:fb:7f:62: 0b:3e:b8:97:23:1b:ef:d3:55:f6:86:8b:36:5a:27:e2:06:4f: f6:02:9f:a6:1e:d9:21:36:0d:d5:3e:d7:7f:c5:65:00:ab:5a: 12:08:84:ee:b1:50:47:9d:92:8e:26:12:d2:03:e5:41:f7:ac: 17:5a:53:7f:7d:c9:18:d3:05:08:0e:87:e4:78:e2:f2:83:c1: 71:b1:e3:20:b5:a0:a2:3d:4d:6a:e6:24:5b:90:ef:36:f2:a3: f3:7e:71:59:c6:dd:ed:c2:a0:5a:2b:18:c6:26:0f:ab:c3:4b: 3f:7e:4b:b3:60:8e:85:08:c5:54:ed:4d:39:19:9b:f4:b2:66: 8f:36:44:a7:b3:60:01:6a:22:2e:b4:02:83:ff:a5:a4:fa:82: 29:65:62:71:97:bb:3c:c7:2b:dc:b5:33:46:6c:67:88:89:99: 33:ef:a7:f4:00:7b:d6:6e:dc:48:57:3c:7b:c6:60:ea:59:69: a8:42:fa:cc:81:4c:0b:64:c5:81:ae:34:70:25:38:be:45:5f: 22:4f:35:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjQwNjAxMDQxNjIwWhcNMjQwNjA4MDQxNjIwWjAYMRYwFAYD VQQDEw02NjVhYTA5NS1iMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0jsODwiTLijeRKB/aIM7cRm9j56pzyT0RiLRPKmW2VV9ZiVH2n4lBYgnpPu o1WGGlUMCZ0MxLGk6JcrB40HVC2ShCJ1XDXpPc3iH6CzKio4ghNFY97/vqNqrVA9 gTmYvaU2EjfDjSxRuwkhCu9Oi2aO/RcJlFzmQF6Jxs7hh2NDt0otwRbPnATjw28g 9kFztbdw27Rk1d6qb4XaTOFTCMI7/WyTW+PFlZ39JDlEgQfmHEG8pzn4y6VyOb9s FpGy6SarEZYB/MzMJdJrP09SQ5a4+k0GMOjXkLnzzCkrRFMgO7j5KVSk/WqQUtsz T4xvETG3rQ5/8B/OvnB2bLaBDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/cq7Ua CyneSgVRcWjQuqR/3VDnMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz4CC+nNTGIR9g+JvkTrJEF7IM1PqFhYJpAolPsLw8ebqPMFKJOIMb OqeQs+DjgoCkC3z7f2ILPriXIxvv01X2hos2WifiBk/2Ap+mHtkhNg3VPtd/xWUA q1oSCITusVBHnZKOJhLSA+VB96wXWlN/fckY0wUIDofkeOLyg8FxseMgtaCiPU1q 5iRbkO828qPzfnFZxt3twqBaKxjGJg+rw0s/fkuzYI6FCMVU7U05GZv0smaPNkSn s2ABaiIutAKD/6Wk+oIpZWJxl7s8xyvctTNGbGeIiZkz76f0AHvWbtxIVzx7xmDq WWmoQvrMgUwLZMWBrjRwJTi+RV8iTzW3 -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org