$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: f3ad9kBPK3vwCsB8iHJ6MSzhzrKvmTtI7z09zj5jDzA= Subject key identifier: 15:DB:34:DF:BB:CB:EB:BA:DF:FA:72:71:50:5C:4C:76:21:25:F0:45 Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 03FB Signing time: Fri 03 May 2024 02:16:38 +0000 Manifest this update: Fri 03 May 2024 02:16:38 +0000 Manifest next update: Fri 10 May 2024 02:16:38 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: I1s/gZx+87AZfnl24k4iPlbwHnamWd4vCSOXKqkoKuA=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: xfX0OFFU9ucwd7GNHYjPTYMLnApyyVc1+dbqqZpDo/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: May 3 02:16:38 2024 GMT Not After : May 10 02:16:38 2024 GMT Subject: CN=66344906-e34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:05:42:a2:9c:56:46:55:71:05:8d:82:b0: 16:25:53:ff:cc:16:9e:1c:6b:ca:3f:90:9f:cd:fe: 0c:36:53:68:3e:7d:06:8e:98:d9:0e:d6:df:73:90: 01:02:53:f6:3d:70:15:13:61:75:f7:d5:23:77:dc: bf:86:25:78:a0:d3:bd:e4:0f:e3:63:6a:92:9d:9d: 0e:f9:f2:27:79:e2:66:17:45:53:72:bc:63:0c:4e: 32:3d:2b:94:e5:48:6e:8a:4d:74:2f:dc:49:1f:87: 19:a5:ad:7e:db:86:61:32:b5:af:6c:a1:85:c2:99: 9f:ba:46:a0:ed:8f:a7:68:d7:8b:df:cb:fc:e5:a7: cf:36:b4:b7:d7:67:19:21:36:ca:d3:81:89:75:81: a1:1c:b4:43:62:2d:89:cc:46:82:f7:b4:cc:6b:7b: 26:83:8e:a0:dc:5a:d3:d7:34:95:69:78:b8:1f:72: 68:78:a3:5d:7b:dd:47:ce:a1:3d:4a:18:17:b9:2e: 86:53:0b:f1:95:0f:7b:59:ae:3d:d6:5f:74:17:79: 9d:48:a9:b0:26:1b:15:d1:67:49:1f:7f:ce:f5:c7: 38:d3:e5:26:ac:ad:6b:11:1b:80:c7:ec:53:c6:41: 02:9c:33:27:74:0e:01:c7:aa:49:ef:ce:ca:e7:d2: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:34:DF:BB:CB:EB:BA:DF:FA:72:71:50:5C:4C:76:21:25:F0:45 X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:51:65:66:f1:bb:2c:70:f1:7f:a7:9e:81:9a:31:dc:a3:fa: 44:8d:3b:0c:d4:29:ba:1e:48:11:b0:96:d2:94:e8:a2:93:94: 9b:05:b6:be:52:cb:71:99:60:c7:a7:b5:80:3f:48:5c:63:31: 5d:86:de:a6:71:a0:94:b0:5c:0d:30:0b:d6:1b:1b:66:2e:37: 94:6e:15:29:41:c5:3b:9c:6a:4b:f1:18:5d:79:23:13:0f:ae: 46:78:d2:99:8d:2c:9e:5e:69:a0:fe:fa:93:00:0e:71:a5:8e: 77:d3:13:cc:9b:81:7c:27:63:f9:fc:68:08:77:16:6a:28:ea: e9:37:80:41:0d:00:33:b9:22:61:f1:21:6f:01:20:9d:c8:f4: 4b:2d:e2:dd:5c:3e:91:52:42:00:1f:bb:45:99:59:1d:dd:e5: 28:06:23:07:24:12:e1:d4:e7:85:2b:f2:23:33:80:09:d4:b5: 53:84:03:3f:51:2a:ff:9a:d2:fe:56:b6:a1:c6:e7:82:bc:1d: d7:fe:3c:e8:7d:37:d3:0d:21:7a:ed:1f:6b:b1:83:f0:67:eb: a9:02:26:c1:f9:11:ff:61:4c:bb:43:fc:ac:6e:27:3f:29:b0: 2a:bb:da:3b:98:75:24:64:be:ec:db:6f:79:3d:19:9a:9b:b9: 16:8a:3a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjQwNTAzMDIxNjM4WhcNMjQwNTEwMDIxNjM4WjAYMRYwFAYD VQQDEw02NjM0NDkwNi1lMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc0FQqKcVkZVcQWNgrAWJVP/zBaeHGvKP5Cfzf4MNlNoPn0GjpjZDtbfc5AB AlP2PXAVE2F199Ujd9y/hiV4oNO95A/jY2qSnZ0O+fIneeJmF0VTcrxjDE4yPSuU 5Uhuik10L9xJH4cZpa1+24ZhMrWvbKGFwpmfukag7Y+naNeL38v85afPNrS312cZ ITbK04GJdYGhHLRDYi2JzEaC97TMa3smg46g3FrT1zSVaXi4H3JoeKNde91HzqE9 ShgXuS6GUwvxlQ97Wa491l90F3mdSKmwJhsV0WdJH3/O9cc40+UmrK1rERuAx+xT xkECnDMndA4Bx6pJ787K59K1FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXbNN+7 y+u63/pycVBcTHYhJfBFMB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjUWVm8bsscPF/p56BmjHco/pEjTsM1Cm6HkgRsJbSlOiik5SbBba+ UstxmWDHp7WAP0hcYzFdht6mcaCUsFwNMAvWGxtmLjeUbhUpQcU7nGpL8RhdeSMT D65GeNKZjSyeXmmg/vqTAA5xpY530xPMm4F8J2P5/GgIdxZqKOrpN4BBDQAzuSJh 8SFvASCdyPRLLeLdXD6RUkIAH7tFmVkd3eUoBiMHJBLh1OeFK/IjM4AJ1LVThAM/ USr/mtL+VrahxueCvB3X/jzofTfTDSF67R9rsYPwZ+upAibB+RH/YUy7Q/ysbic/ KbAqu9o7mHUkZL7s2295PRmam7kWijo7 -----END CERTIFICATE-----Generated at Fri May 3 03:10:52 2024 by rpki-client on console-ams.rpki-client.org