$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: UK2Tq4h6wkhDYaK+pn98iLhQxI0ldE1yd9cd3RbRExg= Subject key identifier: CA:EF:15:07:03:8F:05:79:81:4E:4A:9A:B5:84:0E:3F:FA:AC:9D:EE Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 090B Signing time: Thu 02 May 2024 21:20:50 +0000 Manifest this update: Thu 02 May 2024 21:20:50 +0000 Manifest next update: Thu 09 May 2024 21:20:50 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: cwZ5duioVH2jbXaIb8goQ49MpyF/eV9GP53drtjMPxY=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: mK0s5aaGhw640HruFxFwBjktga5oykssMZohcdwwFq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: May 2 21:20:50 2024 GMT Not After : May 9 21:20:50 2024 GMT Subject: CN=663403b2-6d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:bc:e3:00:57:43:6e:28:64:3b:62:af:7a: 17:4d:70:11:96:0d:25:7a:3c:5e:03:44:c8:e6:cf: 52:80:25:74:51:9b:51:31:ca:74:7d:09:ed:cd:29: 1c:77:97:b7:39:f5:53:01:92:24:3f:aa:30:21:f1: e6:6e:08:fe:54:52:23:00:2c:ad:02:63:77:8d:d4: 20:43:db:d3:5b:87:f0:dd:56:8e:38:f2:da:10:ca: d2:51:6a:6f:63:58:70:90:a0:78:cc:a1:00:a2:b1: 43:63:e4:56:42:bc:a7:8f:4b:98:ec:83:02:f9:5b: bd:ba:f9:ad:7d:85:ba:2a:89:41:f2:3e:83:23:e6: 55:44:7f:c5:53:e2:9a:f6:d4:91:3a:a4:0a:a9:a7: 35:8d:3b:2d:c1:7c:1c:50:3a:5f:d4:f0:6c:5f:ca: 15:80:4a:32:c6:b9:e3:5f:99:12:8b:63:35:03:67: b9:cb:a8:35:ba:90:0d:8e:48:92:8f:25:ab:67:4b: a5:e1:f8:91:3c:c2:03:c5:ad:aa:c1:0f:e2:ce:60: 9e:98:a2:aa:23:6f:3e:34:23:b1:5d:1b:cb:4b:8c: 08:34:60:bf:91:2f:30:de:65:01:09:16:c3:e0:d6: 80:fc:c1:e8:51:c5:a7:dd:11:ae:77:32:55:6f:43: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:15:07:03:8F:05:79:81:4E:4A:9A:B5:84:0E:3F:FA:AC:9D:EE X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:19:c8:24:3c:4b:8d:58:df:5b:23:f8:01:d4:51:5e:22:b6: 55:ad:2b:c6:9f:b0:13:e0:1a:94:7c:58:3e:08:88:75:9d:ff: 96:36:16:50:71:22:34:31:ee:67:d8:0e:0b:a6:47:09:40:df: ce:c7:81:a9:54:37:1f:9d:04:69:3b:30:7e:0f:87:4e:03:ef: c1:38:fe:cb:60:2e:ad:cc:66:46:57:56:cd:79:3a:3c:33:60: a0:f9:d2:6c:8a:9b:42:30:2a:c8:87:0d:31:c3:90:e7:95:ab: f3:1e:2f:74:9d:81:1d:8f:a8:a9:86:2a:65:f3:22:ae:63:76: 93:3c:86:67:6e:11:00:eb:a8:bd:02:58:48:3f:68:7e:74:74: 89:0f:b5:e8:f3:b6:80:d3:85:43:6c:07:57:d4:a6:10:21:d1: 39:7c:c7:54:9b:c9:9f:f5:ac:9b:8e:98:1d:13:98:21:35:88: 31:76:6a:7d:31:5e:28:d6:31:86:ce:8f:0f:3f:0a:dd:fc:ef: 9c:37:22:44:eb:40:03:46:5b:fc:91:c1:bd:2b:a2:04:81:4b: b2:3b:82:a7:d6:8e:01:cd:dc:43:5d:36:fb:d6:6d:b9:b4:a3: f5:01:a7:04:01:dc:c9:01:5f:17:0c:d3:41:47:e2:68:99:6b: 9a:ea:6c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjQwNTAyMjEyMDUwWhcNMjQwNTA5MjEyMDUwWjAYMRYwFAYD VQQDEw02NjM0MDNiMi02ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgW84wBXQ24oZDtir3oXTXARlg0lejxeA0TI5s9SgCV0UZtRMcp0fQntzSkc d5e3OfVTAZIkP6owIfHmbgj+VFIjACytAmN3jdQgQ9vTW4fw3VaOOPLaEMrSUWpv Y1hwkKB4zKEAorFDY+RWQrynj0uY7IMC+Vu9uvmtfYW6KolB8j6DI+ZVRH/FU+Ka 9tSROqQKqac1jTstwXwcUDpf1PBsX8oVgEoyxrnjX5kSi2M1A2e5y6g1upANjkiS jyWrZ0ul4fiRPMIDxa2qwQ/izmCemKKqI28+NCOxXRvLS4wINGC/kS8w3mUBCRbD 4NaA/MHoUcWn3RGudzJVb0NY6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrvFQcD jwV5gU5KmrWEDj/6rJ3uMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeGcgkPEuNWN9bI/gB1FFeIrZVrSvGn7AT4BqUfFg+CIh1nf+WNhZQ cSI0Me5n2A4LpkcJQN/Ox4GpVDcfnQRpOzB+D4dOA+/BOP7LYC6tzGZGV1bNeTo8 M2Cg+dJsiptCMCrIhw0xw5DnlavzHi90nYEdj6iphipl8yKuY3aTPIZnbhEA66i9 AlhIP2h+dHSJD7Xo87aA04VDbAdX1KYQIdE5fMdUm8mf9aybjpgdE5ghNYgxdmp9 MV4o1jGGzo8PPwrd/O+cNyJE60ADRlv8kcG9K6IEgUuyO4Kn1o4BzdxDXTb71m25 tKP1AacEAdzJAV8XDNNBR+JomWua6mwJ -----END CERTIFICATE-----Generated at Thu May 2 22:28:52 2024 by rpki-client on console-ams.rpki-client.org