$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: lSSGvh2i4+iVm00OGiCs5KUv7LJbBjbIP0qZicRxJLc= Subject key identifier: 62:62:B5:F1:62:3F:B4:15:66:F4:E4:7B:85:47:9F:E4:03:38:BF:A5 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: C3 Signing time: Wed 01 May 2024 06:40:52 +0000 Manifest this update: Wed 01 May 2024 06:40:51 +0000 Manifest next update: Wed 08 May 2024 06:40:51 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: VJ3fTz4SgGdpsKup6Knb5srpbxUSwBE49gMM/akASOM=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: Iyc8FGJn7lRUDG2Trj0ctvIim9nix2Q09XZIfcDlHh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: May 1 06:40:51 2024 GMT Not After : May 8 06:40:51 2024 GMT Subject: CN=6631e3f4-0223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:e4:a9:f4:57:58:82:b2:fd:89:25:52:f0: 28:66:6c:68:e6:cf:b6:80:a7:12:70:af:b9:5b:54: c4:67:c1:15:4e:8c:fd:1b:23:f8:24:e5:88:2e:a2: e4:e3:a6:07:f1:3d:fb:10:d6:6e:cd:9f:23:15:10: 24:67:39:96:f9:35:99:b9:94:4c:40:59:c5:27:a8: 09:be:7f:3e:f8:77:ee:4a:1d:ee:83:5b:e9:88:63: 50:56:37:c8:cc:24:46:fe:f2:e9:97:5c:98:e5:71: 6a:53:be:53:fb:38:e5:bf:af:41:4c:a1:f3:08:20: 86:56:49:24:91:f8:26:d1:4d:c1:58:a9:a9:a5:43: d0:26:38:0a:15:28:e0:dc:b3:22:6e:a9:ff:95:7e: 1b:41:1f:92:6c:0d:1b:f2:83:4a:e8:99:42:89:5c: f3:f9:1c:4d:74:92:ee:09:1c:8e:fb:eb:6b:8b:ee: 71:7b:87:cb:27:15:5c:5c:33:ea:f0:e2:b4:cc:b6: e1:3c:99:d9:0f:b6:b4:e1:12:aa:58:d3:7b:75:ae: 3b:72:5f:69:21:cc:82:b3:ae:56:9b:00:85:04:f4: 8a:23:38:17:a1:4c:e1:dd:e4:47:e2:62:15:e7:ba: 14:d2:7d:54:7f:93:02:8d:7b:7c:13:e2:19:00:41: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:B5:F1:62:3F:B4:15:66:F4:E4:7B:85:47:9F:E4:03:38:BF:A5 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0f:ab:e7:4c:f9:e8:a1:61:09:c5:61:7e:06:bf:43:8f:5c: b1:c1:c0:9f:c7:50:7c:6a:67:e4:40:ea:84:71:d8:93:d7:0c: 95:20:9c:eb:70:c2:b8:9e:95:9a:0a:73:ad:dc:c5:b6:3e:a4: 98:f8:b0:30:d4:20:55:30:88:ae:0f:e2:3c:03:16:d9:5b:fd: 36:a4:8d:19:9c:dd:5b:2b:0c:52:57:ef:92:b7:76:d8:78:15: b6:41:9a:df:ff:f5:b0:ce:07:00:50:b8:5e:3f:1a:1c:6d:00: 9c:20:a8:22:5a:81:87:46:26:50:a3:49:3b:06:c7:90:f9:57: 4e:34:de:e1:cd:f8:51:39:7a:43:30:3d:48:1a:f0:80:ff:55: a7:01:b5:fe:ed:74:a3:65:cb:dc:dc:54:a4:1e:1a:98:f6:22: e3:3a:5d:c9:ce:cf:74:eb:55:ec:5e:4f:b9:e7:f9:bf:cf:46: 45:77:9f:0f:83:0c:cf:4e:61:89:c4:d5:80:e1:4f:ab:a3:5c: b8:62:5e:38:38:d3:fc:4b:d1:15:f6:b2:a7:39:3d:a4:86:19: 1c:de:6e:e4:f6:3a:ba:e2:32:54:15:dd:04:bb:64:b2:2f:7d: f3:e1:ee:31:ab:01:45:2f:c5:84:82:99:c7:5e:ff:84:5b:df: f7:25:9a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjQwNTAxMDY0MDUxWhcNMjQwNTA4MDY0MDUxWjAYMRYwFAYD VQQDEw02NjMxZTNmNC0wMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5LkqfRXWIKy/YklUvAoZmxo5s+2gKcScK+5W1TEZ8EVToz9GyP4JOWILqLk 46YH8T37ENZuzZ8jFRAkZzmW+TWZuZRMQFnFJ6gJvn8++HfuSh3ug1vpiGNQVjfI zCRG/vLpl1yY5XFqU75T+zjlv69BTKHzCCCGVkkkkfgm0U3BWKmppUPQJjgKFSjg 3LMibqn/lX4bQR+SbA0b8oNK6JlCiVzz+RxNdJLuCRyO++tri+5xe4fLJxVcXDPq 8OK0zLbhPJnZD7a04RKqWNN7da47cl9pIcyCs65WmwCFBPSKIzgXoUzh3eRH4mIV 57oU0n1Uf5MCjXt8E+IZAEHGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJitfFi P7QVZvTke4VHn+QDOL+lMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDD6vnTPnooWEJxWF+Br9Dj1yxwcCfx1B8amfkQOqEcdiT1wyVIJzr cMK4npWaCnOt3MW2PqSY+LAw1CBVMIiuD+I8AxbZW/02pI0ZnN1bKwxSV++St3bY eBW2QZrf//WwzgcAULhePxocbQCcIKgiWoGHRiZQo0k7BseQ+VdONN7hzfhROXpD MD1IGvCA/1WnAbX+7XSjZcvc3FSkHhqY9iLjOl3Jzs9061XsXk+55/m/z0ZFd58P gwzPTmGJxNWA4U+ro1y4Yl44ONP8S9EV9rKnOT2khhkc3m7k9jq64jJUFd0Eu2Sy L33z4e4xqwFFL8WEgpnHXv+EW9/3JZqj -----END CERTIFICATE-----Generated at Wed May 1 07:55:39 2024 by rpki-client on console-fra.rpki-client.org