$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: q0dXcNblZvJC88lrRpbHYXm3PCgjTcEWbc6HyNDtO4c= Subject key identifier: DA:EC:FA:50:80:CF:6F:BC:B8:9A:2D:82:13:24:2D:DD:F7:8B:75:2D Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0955 Signing time: Sun 28 Apr 2024 21:03:33 +0000 Manifest this update: Sun 28 Apr 2024 21:03:32 +0000 Manifest next update: Sun 05 May 2024 21:03:32 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: ZhSemE9tO9LrKeDc7+vJjRPORo8OdMXQiyEKwY3FydI=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: EJ03yQUcLnyZ8pKLqfNvkrNhpZJMhKPyz+qSkd9zL9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Apr 28 21:03:32 2024 GMT Not After : May 5 21:03:32 2024 GMT Subject: CN=662eb9a4-7f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:66:1b:94:a2:f5:d3:3d:6c:d2:d3:9c:52:a3: 1c:bd:3c:0d:90:23:21:a3:f1:51:29:14:83:02:af: 5e:7b:b0:69:50:6e:6e:32:f7:a6:57:13:48:a5:ab: 10:d8:80:b3:6d:37:74:d3:02:77:18:95:08:4e:c5: 2c:60:57:37:7b:d1:81:91:a8:af:6b:fe:07:77:24: f0:63:03:d0:c3:04:84:c3:59:b6:00:b6:bc:64:30: 5a:e5:de:46:a7:99:aa:15:ed:35:6c:70:75:7f:f4: 60:05:5a:80:2e:ec:3e:b0:94:5a:ae:58:3c:0f:47: d5:da:c6:c1:7f:e5:75:80:06:37:5d:5d:f5:ba:92: 6d:ae:94:d8:7e:ed:f8:6f:88:8d:e3:be:c9:48:c5: 0b:fc:35:36:fe:f0:4f:3f:47:1a:18:3d:f0:0a:0d: e6:31:83:1d:6a:b4:2d:37:88:ba:eb:80:75:3a:9a: 34:7b:7e:ec:9e:33:a7:5e:1a:0e:7b:98:4a:3b:c1: 4a:5b:31:52:61:4b:6d:e4:86:02:48:77:21:8f:2e: 1f:7a:49:7d:9b:b2:ac:3f:83:91:40:e9:3e:d5:1c: 93:9e:cf:14:37:40:c7:d1:e6:33:17:9e:07:5c:0d: 05:ce:83:36:75:3f:06:a4:e4:ac:ac:12:49:95:55: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EC:FA:50:80:CF:6F:BC:B8:9A:2D:82:13:24:2D:DD:F7:8B:75:2D X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:da:3d:d9:1f:e4:4f:3f:f8:9b:34:f0:6c:f0:05:c4:85:46: 8d:59:2b:d9:1f:e4:57:34:43:d6:da:d0:cb:c0:00:d0:dd:ba: b4:fe:44:61:f2:ce:ed:10:75:c3:90:65:b8:ef:cf:c1:e3:2c: 64:e1:67:46:0c:a8:d5:39:77:d4:8d:37:3a:cf:f6:0a:85:e6: ac:34:ed:ad:c9:8a:89:7f:01:2d:5c:70:a6:58:09:f1:c2:c2: 87:5e:d9:d0:ac:cd:77:67:6c:b6:56:07:5c:53:ac:f5:fb:53: 6f:de:99:14:41:63:9a:e5:6f:f4:6e:6e:d8:c6:0f:63:7c:5d: 5a:36:ea:3f:e5:eb:cd:b1:45:83:dc:15:f0:a7:8c:48:c1:e6: c3:dd:70:58:14:46:85:38:5c:95:67:8b:0d:75:f6:7a:f5:42: c9:50:67:3a:af:55:1c:7d:db:2d:b9:c9:b6:c5:0f:af:c3:83: b9:53:9c:5c:40:da:b0:7e:12:8a:4d:4c:28:8a:74:88:e3:f5: b6:41:89:1b:ec:64:59:d8:a2:a4:ef:f5:a9:45:46:cd:6a:4b: 17:28:44:e0:f5:59:9c:dd:de:2a:97:71:11:c9:97:03:c5:b3: 57:64:b6:80:7c:ad:cd:8d:84:02:3d:e5:40:56:9e:bc:df:97: 16:d6:bb:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjQwNDI4MjEwMzMyWhcNMjQwNTA1MjEwMzMyWjAYMRYwFAYD VQQDEw02NjJlYjlhNC03ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+2YblKL10z1s0tOcUqMcvTwNkCMho/FRKRSDAq9ee7BpUG5uMvemVxNIpasQ 2ICzbTd00wJ3GJUITsUsYFc3e9GBkaiva/4HdyTwYwPQwwSEw1m2ALa8ZDBa5d5G p5mqFe01bHB1f/RgBVqALuw+sJRarlg8D0fV2sbBf+V1gAY3XV31upJtrpTYfu34 b4iN477JSMUL/DU2/vBPP0caGD3wCg3mMYMdarQtN4i664B1Opo0e37snjOnXhoO e5hKO8FKWzFSYUtt5IYCSHchjy4fekl9m7KsP4ORQOk+1RyTns8UN0DH0eYzF54H XA0FzoM2dT8GpOSsrBJJlVV3jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrs+lCA z2+8uJotghMkLd33i3UtMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ2j3ZH+RPP/ibNPBs8AXEhUaNWSvZH+RXNEPW2tDLwADQ3bq0/kRh 8s7tEHXDkGW478/B4yxk4WdGDKjVOXfUjTc6z/YKheasNO2tyYqJfwEtXHCmWAnx wsKHXtnQrM13Z2y2VgdcU6z1+1Nv3pkUQWOa5W/0bm7Yxg9jfF1aNuo/5evNsUWD 3BXwp4xIwebD3XBYFEaFOFyVZ4sNdfZ69ULJUGc6r1Ucfdstucm2xQ+vw4O5U5xc QNqwfhKKTUwoinSI4/W2QYkb7GRZ2KKk7/WpRUbNaksXKETg9Vmc3d4ql3ERyZcD xbNXZLaAfK3NjYQCPeVAVp6835cW1ruf -----END CERTIFICATE-----Generated at Sun Apr 28 21:33:37 2024 by rpki-client on console-ams.rpki-client.org