$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: pepcmzADzoys4Iw4XsaKfsjf2xu2TD4wzvHufiv307s= Subject key identifier: 63:A2:D1:6E:08:BB:21:64:60:4A:E4:51:50:E2:71:FB:7E:2F:EF:8C Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0349 Signing time: Sat 27 Apr 2024 02:52:01 +0000 Manifest this update: Sat 27 Apr 2024 02:52:00 +0000 Manifest next update: Sat 04 May 2024 02:52:00 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: LmQEa/5/nu87/PNTkavKzC/jXUGN2WkmZ/ogAfqA8tk=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: lzoRu7PAU6kva5pswgNYItUig4xW0or+7Ba0dcJ8VHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Apr 27 02:52:00 2024 GMT Not After : May 4 02:52:00 2024 GMT Subject: CN=662c6851-27ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:59:86:84:ba:fe:4f:bd:95:ad:00:3a:c9: 8b:60:27:da:b8:18:b6:fa:db:52:11:4d:41:a9:ca: 3a:6d:d2:cf:50:35:c0:09:4c:f6:e3:0f:84:06:d7: 3c:be:a9:f0:cb:aa:aa:02:3e:32:c2:3e:52:84:32: 0a:82:3a:8f:3e:a3:91:6a:6d:19:69:09:bf:e1:4b: 3c:c5:cc:e0:6f:8a:a2:ab:87:8a:1e:be:cc:74:c5: f5:3b:7b:0a:8f:67:87:5c:4f:35:8b:25:78:78:9f: 12:12:9f:4a:46:22:39:f9:f7:82:9b:86:3c:ba:90: a4:d6:22:ed:0a:38:e4:ae:01:68:5e:e9:38:3b:cc: 09:b3:e8:70:3d:e5:42:2c:fc:3d:7e:e8:20:45:c7: ac:89:7f:76:56:f6:69:3b:ff:36:ce:ad:f1:ff:d4: 03:dc:34:f8:b6:4c:1b:07:7d:7b:0b:d8:2e:20:e6: eb:ee:97:87:f6:2c:00:cc:4a:34:e3:db:7a:0a:7e: 6a:ad:dc:db:fd:02:d9:04:8d:96:e9:b7:f8:a0:d2: 62:7b:49:05:30:86:d7:e6:c4:c8:e3:58:32:ad:ff: 8a:95:5a:69:ee:87:79:d6:36:b5:42:93:73:4b:7c: a3:9a:91:81:b5:56:d5:f7:1f:b9:6a:4e:67:6b:98: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:D1:6E:08:BB:21:64:60:4A:E4:51:50:E2:71:FB:7E:2F:EF:8C X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:35:d1:3b:e9:cd:27:1e:79:1b:aa:0d:94:4b:ac:fa:73: 74:43:94:42:53:cd:57:14:71:a0:28:81:6d:20:9e:21:6a:01: 94:1e:ce:60:6a:c8:ea:e4:cf:a0:11:3a:43:7b:38:fc:9b:2d: 7d:83:ec:07:64:42:c6:0a:ed:81:ff:ad:65:e7:c0:95:73:59: 4e:86:c2:b6:c5:da:59:55:c2:eb:f3:54:ad:74:68:65:29:c6: 0c:30:48:03:0c:1e:32:2b:23:08:4d:79:b4:67:9f:1e:c5:44: 77:c5:80:0f:76:6b:5f:78:f8:7f:6d:10:eb:c7:01:da:b1:42: d7:67:f1:af:81:3d:0a:90:3b:8f:54:1c:3a:83:d7:22:dd:49: 46:d7:cf:f3:de:9a:36:a5:9a:9e:15:5a:0c:65:32:4a:b4:01: 4c:9c:03:c6:30:70:4a:6c:f4:fc:b6:03:b4:00:8f:58:15:65: 4f:f9:f1:a0:67:e1:ab:e7:fc:e1:2c:5a:6c:0a:9c:58:97:42: e5:7d:f1:2e:2f:74:e8:50:cd:30:25:a0:ac:f3:ec:f5:6e:91: 52:3f:33:e2:6e:c4:ba:87:59:3f:69:28:b4:91:74:25:32:80: 85:44:ca:54:72:54:58:70:d5:c7:82:13:a6:86:b4:a1:f2:4a: 12:68:99:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjQwNDI3MDI1MjAwWhcNMjQwNTA0MDI1MjAwWjAYMRYwFAYD VQQDEw02NjJjNjg1MS0yN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQlZhoS6/k+9la0AOsmLYCfauBi2+ttSEU1Bqco6bdLPUDXACUz24w+EBtc8 vqnwy6qqAj4ywj5ShDIKgjqPPqORam0ZaQm/4Us8xczgb4qiq4eKHr7MdMX1O3sK j2eHXE81iyV4eJ8SEp9KRiI5+feCm4Y8upCk1iLtCjjkrgFoXuk4O8wJs+hwPeVC LPw9fuggRcesiX92VvZpO/82zq3x/9QD3DT4tkwbB317C9guIObr7peH9iwAzEo0 49t6Cn5qrdzb/QLZBI2W6bf4oNJie0kFMIbX5sTI41gyrf+KlVpp7od51ja1QpNz S3yjmpGBtVbV9x+5ak5na5gK7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOi0W4I uyFkYErkUVDicft+L++MMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWnjXRO+nNJx55G6oNlEus+nN0Q5RCU81XFHGgKIFtIJ4hagGUHs5g asjq5M+gETpDezj8my19g+wHZELGCu2B/61l58CVc1lOhsK2xdpZVcLr81StdGhl KcYMMEgDDB4yKyMITXm0Z58exUR3xYAPdmtfePh/bRDrxwHasULXZ/GvgT0KkDuP VBw6g9ci3UlG18/z3po2pZqeFVoMZTJKtAFMnAPGMHBKbPT8tgO0AI9YFWVP+fGg Z+Gr5/zhLFpsCpxYl0LlffEuL3ToUM0wJaCs8+z1bpFSPzPibsS6h1k/aSi0kXQl MoCFRMpUclRYcNXHghOmhrSh8koSaJlY -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:52 2024 by rpki-client on console-ams.rpki-client.org