$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft File: KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json) Hash identifier: ZDZVZCOFUyDo3uqj3Lpg4SEjMTfyH16meG79q34aGVA= Subject key identifier: 00:8E:4A:D1:56:D9:F2:E7:6A:58:D6:C9:01:4F:B4:1B:CD:A4:A1:4B Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B Certificate issuer: /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft Manifest number: 029E Signing time: Tue 07 May 2024 03:38:26 +0000 Manifest this update: Tue 07 May 2024 03:38:26 +0000 Manifest next update: Tue 14 May 2024 03:38:26 +0000 Files and hashes: 1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: LDOh64R4NlpvTuC5Jl4RdEb8DKMvZC8/K3v8DQc7ul8=) 2: BFFAF880912711EE92065180C4F9AE02.roa (hash: usBBmsqJ17R+qU+xUFVVD1nF5mXi8I/Ggw/RKZoDCbQ=) 3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: 7aZh7gOo5JZg6nb9RiAw5wo8tjtVXlOT74jRS6icf8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Validity Not Before: May 7 03:38:26 2024 GMT Not After : May 14 03:38:26 2024 GMT Subject: CN=6639a232-ee7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:a8:8e:c7:a3:9a:e5:fa:aa:20:b8:8c:e2: f1:46:69:33:7c:0c:ae:71:86:ad:87:43:14:54:c7: 4a:a3:83:1f:ca:23:02:9b:fb:65:a4:e6:d5:06:00: ba:63:79:f9:80:46:e4:ea:d6:bf:38:e5:7d:c9:e7: 54:39:19:b0:d0:ef:cd:28:2c:84:82:76:ca:43:98: 15:e3:7a:6e:4a:20:88:a6:77:0e:32:3c:f9:5e:0a: 96:37:5f:7f:92:44:db:cb:71:6a:e6:72:df:c3:bd: 2a:18:92:4b:c2:d1:83:bd:02:ac:c3:bf:5a:d6:f1: 42:8f:25:87:dd:7d:34:8a:30:83:18:2b:80:24:aa: f5:b1:f0:db:21:69:91:1d:34:a2:e4:4e:0c:31:ab: f2:72:53:3c:0e:3f:8c:28:36:4d:1b:e8:61:07:f4: d2:6c:8a:0e:6b:e1:05:4b:9b:df:3f:5e:ad:4e:91: 5c:f8:92:80:2b:5d:04:9d:8d:37:66:cb:02:e0:93: e2:44:70:e0:0f:93:6b:53:bb:f5:63:0b:02:28:c5: f2:45:cf:cd:38:f3:55:c8:03:5e:57:cc:2a:e0:a0: 96:2c:7b:4a:78:50:6a:d0:46:50:22:92:c8:9a:41: 02:c9:d4:ca:ab:d5:24:bf:9c:88:a1:2b:ee:e3:96: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8E:4A:D1:56:D9:F2:E7:6A:58:D6:C9:01:4F:B4:1B:CD:A4:A1:4B X509v3 Authority Key Identifier: keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:d9:2e:63:40:d0:30:ca:48:d8:bf:ee:6d:cc:3f:35:50: ce:1d:2c:93:70:01:7e:3a:30:2d:25:b4:a3:44:b7:72:e3:ec: 24:87:d1:b5:9c:0b:87:59:79:08:fb:0c:40:78:6c:47:fb:c1: 61:44:7a:c8:98:69:74:7e:d0:85:d8:08:38:a2:0a:36:9b:df: ad:64:59:c7:cc:51:26:2e:11:23:ca:ab:e5:c1:b0:a7:26:18: ab:62:58:5c:67:63:1e:2f:35:b6:89:95:1a:cd:fb:a1:24:3b: 6c:bf:05:79:fb:6d:84:23:13:23:d2:2c:79:d0:28:5e:09:cd: 3b:9f:30:20:00:a9:36:ad:fb:45:9e:16:22:79:29:95:fa:31: fd:0a:4b:5c:bd:9b:dd:d7:25:9e:86:99:79:46:7b:58:c1:d8: a9:94:85:cf:0a:b3:6e:1d:c9:36:a6:9a:a1:19:c8:76:65:0e: 99:f1:9e:3b:1e:ad:3f:0b:0c:a8:de:f6:5e:d8:1e:db:cd:43: d9:c2:45:3d:41:f5:4a:6d:e6:4e:31:4b:4e:71:02:7f:65:68: c1:13:cf:d9:d3:3d:d8:e8:c4:bd:f1:df:9a:32:41:f3:c5:d5: 20:df:f2:c6:e5:c4:b1:38:14:90:75:6b:8a:a2:1c:7d:67:5f: b9:43:b6:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD MEE2MTAwNkIwHhcNMjQwNTA3MDMzODI2WhcNMjQwNTE0MDMzODI2WjAYMRYwFAYD VQQDEw02NjM5YTIzMi1lZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxCojsejmuX6qiC4jOLxRmkzfAyucYath0MUVMdKo4MfyiMCm/tlpObVBgC6 Y3n5gEbk6ta/OOV9yedUORmw0O/NKCyEgnbKQ5gV43puSiCIpncOMjz5XgqWN19/ kkTby3Fq5nLfw70qGJJLwtGDvQKsw79a1vFCjyWH3X00ijCDGCuAJKr1sfDbIWmR HTSi5E4MMavyclM8Dj+MKDZNG+hhB/TSbIoOa+EFS5vfP16tTpFc+JKAK10EnY03 ZssC4JPiRHDgD5NrU7v1YwsCKMXyRc/NOPNVyANeV8wq4KCWLHtKeFBq0EZQIpLI mkECydTKq9Ukv5yIoSvu45aaPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACOStFW 2fLnaljWyQFPtBvNpKFLMB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2 RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4 SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdu9kuY0DQMMpI2L/ubcw/NVDOHSyTcAF+OjAtJbSjRLdy4+wkh9G1 nAuHWXkI+wxAeGxH+8FhRHrImGl0ftCF2Ag4ogo2m9+tZFnHzFEmLhEjyqvlwbCn JhirYlhcZ2MeLzW2iZUazfuhJDtsvwV5+22EIxMj0ix50CheCc07nzAgAKk2rftF nhYieSmV+jH9CktcvZvd1yWehpl5RntYwdiplIXPCrNuHck2ppqhGch2ZQ6Z8Z47 Hq0/Cwyo3vZe2B7bzUPZwkU9QfVKbeZOMUtOcQJ/ZWjBE8/Z0z3Y6MS98d+aMkHz xdUg3/LG5cSxOBSQdWuKohx9Z1+5Q7a8 -----END CERTIFICATE-----Generated at Tue May 7 04:34:51 2024 by rpki-client on console-fra.rpki-client.org