$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: J7diJ0aPkPFIZ+RnESPs0vFt2N04ySw5EEPc9XdhPNo= Subject key identifier: 30:A3:18:EB:FD:C7:A3:40:19:84:D0:B1:77:0E:03:DD:16:AF:02:30 Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 039E Signing time: Tue 07 May 2024 02:33:08 +0000 Manifest this update: Tue 07 May 2024 02:33:07 +0000 Manifest next update: Tue 14 May 2024 02:33:07 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: nB5fCNpQjl/wSTwJXn5/cEqMgK15g6obMeDCMHlCe7c=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: AKgYP14OAlRk/lcaz4LVDHsyIfRAFrNi3p9qKvKafh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: May 7 02:33:07 2024 GMT Not After : May 14 02:33:07 2024 GMT Subject: CN=663992e3-f7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1a:cc:6a:2e:6c:d9:e7:5d:8a:0f:ca:ff:3e: 70:b0:c8:52:1c:6e:84:e6:fa:d4:96:7d:46:c6:42: 38:81:06:85:86:1f:6e:90:42:6f:8c:4b:61:db:49: 68:f9:3d:1e:3a:54:f4:ea:02:c5:d0:95:39:6d:b5: 51:75:45:14:f5:e6:0d:e5:42:50:63:99:8e:40:d0: 51:8e:c9:58:a0:21:3a:73:0c:d8:70:49:15:f4:c5: 88:55:4a:87:7f:8f:87:c2:24:0a:bb:11:96:ca:02: c2:dc:42:46:1c:e0:30:2b:b6:f4:2c:79:bb:a4:e3: 54:a4:84:1d:59:32:7e:c5:19:6a:9e:ce:5a:76:c4: 7b:e1:92:ac:af:56:81:38:cd:25:c3:7e:3d:ea:09: 93:dc:60:fd:d7:32:14:08:10:6d:c4:02:07:b9:bf: 2a:1b:8d:b4:c1:bc:8a:96:1b:79:0e:c5:1e:98:e1: 17:ce:42:9c:67:a4:4b:41:1d:d2:c6:1d:39:38:8b: 74:75:73:f9:09:00:4a:f1:2a:1d:21:3f:9f:1a:28: d0:73:7d:9b:12:0f:e5:36:54:cd:08:29:d4:b4:cc: 29:f9:a2:8e:31:32:64:94:fc:8a:47:ca:eb:14:5c: dc:61:5c:72:7f:89:f3:a6:3e:14:64:55:80:17:1f: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:18:EB:FD:C7:A3:40:19:84:D0:B1:77:0E:03:DD:16:AF:02:30 X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:74:f7:3c:57:6a:d8:0b:85:81:33:b8:74:aa:7a:7d:11:58: 4c:62:db:cb:4e:e5:07:5b:66:a5:f6:d6:96:d6:f1:33:54:bc: b5:ad:ac:4c:e1:71:53:03:99:32:d4:29:0a:95:93:bd:1b:a0: 59:77:33:ed:62:c2:86:44:b3:f5:bd:fe:d2:93:4b:93:39:9d: ae:f4:77:b4:f3:f2:d9:bc:d0:c8:99:af:19:a0:d7:90:9a:a4: b9:7b:31:98:0d:fc:c8:39:b5:8c:6d:3c:ae:2b:65:24:94:54: b6:80:02:de:bd:c6:1a:57:ef:6d:a2:69:a1:47:55:89:86:09: 03:c6:30:be:d9:f4:ae:e9:41:43:c4:23:84:71:c7:09:52:27: 53:89:46:08:57:50:03:f3:30:30:ae:4a:d6:6a:1c:42:1d:5d: 09:b4:59:94:91:cf:94:03:4a:15:a9:69:a4:9e:8b:1b:a4:2a: 3a:d6:b4:85:f8:9f:b8:17:11:e9:77:32:fe:69:bd:f0:0c:c3: 6e:b5:6b:f0:ea:21:fb:4d:84:62:e7:37:ee:36:af:0c:35:e0: 45:04:10:20:14:db:ed:84:44:45:d1:54:61:d1:4a:a2:2b:94: 4e:e7:e5:ce:dd:10:31:a1:a4:33:7f:d8:fd:18:1a:86:36:ec: 78:73:86:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjQwNTA3MDIzMzA3WhcNMjQwNTE0MDIzMzA3WjAYMRYwFAYD VQQDEw02NjM5OTJlMy1mN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BrMai5s2eddig/K/z5wsMhSHG6E5vrUln1GxkI4gQaFhh9ukEJvjEth20lo +T0eOlT06gLF0JU5bbVRdUUU9eYN5UJQY5mOQNBRjslYoCE6cwzYcEkV9MWIVUqH f4+HwiQKuxGWygLC3EJGHOAwK7b0LHm7pONUpIQdWTJ+xRlqns5adsR74ZKsr1aB OM0lw3496gmT3GD91zIUCBBtxAIHub8qG420wbyKlht5DsUemOEXzkKcZ6RLQR3S xh05OIt0dXP5CQBK8SodIT+fGijQc32bEg/lNlTNCCnUtMwp+aKOMTJklPyKR8rr FFzcYVxyf4nzpj4UZFWAFx+HQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCjGOv9 x6NAGYTQsXcOA90WrwIwMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAadPc8V2rYC4WBM7h0qnp9EVhMYtvLTuUHW2al9taW1vEzVLy1raxM 4XFTA5ky1CkKlZO9G6BZdzPtYsKGRLP1vf7Sk0uTOZ2u9He08/LZvNDIma8ZoNeQ mqS5ezGYDfzIObWMbTyuK2UklFS2gALevcYaV+9tommhR1WJhgkDxjC+2fSu6UFD xCOEcccJUidTiUYIV1AD8zAwrkrWahxCHV0JtFmUkc+UA0oVqWmknosbpCo61rSF +J+4FxHpdzL+ab3wDMNutWvw6iH7TYRi5zfuNq8MNeBFBBAgFNvthERF0VRh0Uqi K5RO5+XO3RAxoaQzf9j9GBqGNux4c4Ze -----END CERTIFICATE-----Generated at Tue May 7 03:10:20 2024 by rpki-client on console-ams.rpki-client.org