$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: 3azejPkMKKKn0nwh9/1DIfmh3bWNgrj5OD40b+EYe4E= Subject key identifier: 8D:D1:20:96:21:71:2E:FC:AD:77:92:BF:1B:98:61:8B:26:E9:7A:C8 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 3729 Signing time: Thu 02 May 2024 14:40:33 +0000 Manifest this update: Thu 02 May 2024 14:40:32 +0000 Manifest next update: Thu 09 May 2024 14:40:32 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: Zlib31RCZ30jBgyZ6hbeytAvxxsds0Jq1444M8tSNWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: May 2 14:40:32 2024 GMT Not After : May 9 14:40:32 2024 GMT Subject: CN=6633a5e0-2102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:fb:f7:5c:d5:e7:18:4a:6c:e0:ba:16:06: 91:0e:76:55:55:69:f4:91:13:ad:cd:83:c5:1e:1d: 0a:21:d9:36:54:dd:af:94:1c:1c:20:d5:9b:86:fc: b2:85:7d:34:df:fb:e2:d2:31:67:bb:82:ca:68:dc: 60:ed:3d:24:cb:5d:85:6a:7c:7a:d8:4c:30:bf:ba: 66:db:c3:ad:3b:e1:a9:ba:06:47:bd:e8:17:8e:94: 16:c2:43:16:b2:78:bd:6d:0c:e6:cd:e6:9f:d6:34: 90:09:68:3f:d0:95:53:bb:b8:16:92:19:64:fb:6a: 24:8e:14:c3:df:f1:cc:91:e6:6b:8a:47:7a:69:95: cf:98:7a:91:91:6c:11:d7:53:70:ca:bf:2c:be:38: 21:bd:f9:d2:d5:0f:5c:30:21:fa:c3:2a:48:51:59: ba:38:36:21:32:7b:47:c5:b0:4d:fe:0d:e9:a9:2c: 3d:f1:5a:b4:c2:10:8a:21:d4:06:22:5f:3e:fe:32: fa:04:43:c0:8b:e0:36:23:f9:52:e9:b8:89:3e:ff: 09:47:d0:14:55:83:2a:39:87:09:c3:b0:88:4c:b7: 02:d8:9b:78:77:0e:b5:d4:4d:91:a6:93:77:c8:66: 0b:0a:e0:f3:e6:b4:0a:3a:59:bd:14:22:b2:cf:5f: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:20:96:21:71:2E:FC:AD:77:92:BF:1B:98:61:8B:26:E9:7A:C8 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:99:43:bb:f4:6a:2e:f3:f3:b2:63:57:12:e2:98:91:06:cd: 29:94:18:55:ae:27:2d:1a:97:bc:62:e2:62:35:20:d7:b5:53: 92:7c:9d:09:68:2d:78:33:cd:e6:e8:94:67:c3:ce:62:21:b6: a0:ad:3f:06:bf:0b:0f:f0:5d:06:99:3b:58:af:d1:c7:1a:2d: d4:3d:01:4e:f5:f3:75:e4:5a:28:4d:e7:c1:f5:d2:ca:c2:54: 97:09:69:d7:d3:c4:3f:51:51:bb:7c:39:57:ed:6d:29:0b:28: dd:4f:16:10:15:80:19:71:1b:51:c0:99:50:05:00:8d:bd:cc: 95:80:a6:73:c2:11:1e:82:8c:c1:6c:72:1c:30:cb:ca:31:6e: 3b:1a:7e:62:08:db:d9:af:51:4a:f7:e7:a7:9a:f0:e0:be:19: 99:f9:3a:09:19:7a:6e:c0:f1:51:a0:e2:9e:2f:f0:42:03:97: 81:cd:0a:93:b1:ec:fe:71:98:6b:48:44:b8:56:37:8d:49:84: 4e:a8:a0:0c:e3:12:0b:03:12:bb:76:13:70:e4:bc:ed:1f:4b: 6b:5a:44:ba:f8:88:4c:ae:83:b0:ca:57:bf:d2:ec:40:8e:54: 39:c2:e0:14:d2:04:a1:65:0e:62:d8:2c:2a:5e:26:d2:69:a9: c8:a2:42:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjQwNTAyMTQ0MDMyWhcNMjQwNTA5MTQ0MDMyWjAYMRYwFAYD VQQDEw02NjMzYTVlMC0yMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/H791zV5xhKbOC6FgaRDnZVVWn0kROtzYPFHh0KIdk2VN2vlBwcINWbhvyy hX003/vi0jFnu4LKaNxg7T0ky12Fanx62Ewwv7pm28OtO+GpugZHvegXjpQWwkMW sni9bQzmzeaf1jSQCWg/0JVTu7gWkhlk+2okjhTD3/HMkeZrikd6aZXPmHqRkWwR 11Nwyr8svjghvfnS1Q9cMCH6wypIUVm6ODYhMntHxbBN/g3pqSw98Vq0whCKIdQG Il8+/jL6BEPAi+A2I/lS6biJPv8JR9AUVYMqOYcJw7CITLcC2Jt4dw611E2RppN3 yGYLCuDz5rQKOlm9FCKyz1/HaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3RIJYh cS78rXeSvxuYYYsm6XrIMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcmUO79Gou8/OyY1cS4piRBs0plBhVrictGpe8YuJiNSDXtVOSfJ0J aC14M83m6JRnw85iIbagrT8GvwsP8F0GmTtYr9HHGi3UPQFO9fN15FooTefB9dLK wlSXCWnX08Q/UVG7fDlX7W0pCyjdTxYQFYAZcRtRwJlQBQCNvcyVgKZzwhEegozB bHIcMMvKMW47Gn5iCNvZr1FK9+enmvDgvhmZ+ToJGXpuwPFRoOKeL/BCA5eBzQqT sez+cZhrSES4VjeNSYROqKAM4xILAxK7dhNw5LztH0trWkS6+IhMroOwyle/0uxA jlQ5wuAU0gShZQ5i2CwqXibSaanIokKw -----END CERTIFICATE-----Generated at Thu May 2 17:43:45 2024 by rpki-client on console-fra.rpki-client.org