$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: ZF+v+TThETPYAQg2QDsBYXrS/YF1pIF7B37lLp/tWD4= Subject key identifier: 79:9F:03:70:33:62:BC:FD:B7:17:3F:84:78:68:7C:57:AD:E8:21:D6 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 0F30 Signing time: Tue 14 May 2024 18:17:19 +0000 Manifest this update: Tue 14 May 2024 18:17:18 +0000 Manifest next update: Tue 21 May 2024 18:17:18 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: MbT3HIrNoVa0li6eHJ94vPgPX9Fmo4Sr1+s3NBGcG9Y=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: mlji510395Oygfniyac8KKWq0dtqfkqm0EekbIqX4BU=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: 5O8DYgHc79V6KcmKNVHeX4W4dMmoUEhQnrmExgSqPEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: May 14 18:17:18 2024 GMT Not After : May 21 18:17:18 2024 GMT Subject: CN=6643aaae-58ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:36:b3:57:d4:01:00:38:8a:c4:74:84:70: ba:46:4e:b8:75:96:63:67:3d:fb:ac:ec:8b:2c:96: 31:88:15:19:27:b5:65:7d:b8:07:95:1c:68:c1:65: eb:1a:ec:20:e4:ea:97:a6:5b:99:4e:ac:6e:58:25: 34:d8:f0:53:9c:e8:64:d6:b2:41:a0:8a:36:45:32: cb:50:67:8e:c4:51:c9:18:11:d1:2c:10:05:e5:87: 2e:af:2d:46:2c:08:41:3a:bf:42:51:01:51:c0:38: 9a:c9:eb:d4:32:c5:5d:d3:89:b2:14:ab:69:3f:33: aa:6d:25:cb:f3:40:f3:f5:47:9b:f9:a0:7e:07:67: 96:f1:bd:82:a0:e1:41:f1:7a:9c:55:95:db:1b:41: ff:f6:5d:93:27:c9:06:ad:93:69:51:05:e5:df:22: 76:34:36:3c:10:b0:1c:ba:79:ab:35:97:45:9e:94: 3f:4c:f0:c2:a7:76:56:ef:75:5b:03:7d:4b:93:10: f9:8f:08:2d:b1:9e:93:7b:37:fe:78:85:91:7a:a0: 75:b7:40:fa:9d:05:89:02:bc:87:da:ba:a6:4c:67: 84:7c:c8:e4:2d:0c:6a:e7:8d:5f:cf:10:56:36:14: 38:ee:76:12:01:ea:6d:02:10:f4:db:74:d3:02:e0: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:03:70:33:62:BC:FD:B7:17:3F:84:78:68:7C:57:AD:E8:21:D6 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b3:be:c3:ff:e4:cf:64:c7:32:9f:bb:15:64:d4:db:15:a1: 1a:56:d9:ac:e4:f9:10:77:fa:29:d9:2d:13:5f:74:f5:9c:ab: 36:fc:df:07:f1:64:f5:14:50:94:7f:0b:93:9e:ad:77:ff:ab: 43:69:2d:69:61:88:5f:96:df:cc:82:33:47:1b:ee:fc:f2:c2: fb:a9:d6:c6:7d:4f:b5:70:33:c6:f7:4b:27:c8:30:46:5f:a8: 42:9f:ef:6c:fc:6a:2d:ef:8d:86:08:49:51:31:53:d4:b8:4a: d6:6c:8b:42:96:d1:f5:05:bc:ad:1c:be:66:46:99:1c:33:51: 56:f4:0b:24:e5:2b:d1:a6:a1:95:39:99:c4:59:fe:56:94:f0: 94:9c:08:59:9b:99:2b:8e:e6:f6:d3:f2:da:fe:62:82:78:42: a1:04:e7:0a:57:4d:4e:c8:7e:9a:d1:06:dd:85:48:40:4d:0d: e8:97:d6:0a:24:38:bd:bf:fd:18:97:fc:c2:97:68:ce:9d:a3: be:ad:54:fd:f0:12:f4:0d:66:94:8a:02:85:5c:29:15:ad:ab: 1b:41:76:d5:3b:c9:6d:05:8c:11:21:6d:bc:31:b8:87:f4:d2: 6e:cd:78:54:1d:fa:74:82:01:35:4e:75:25:b0:1a:07:43:23: 4a:48:40:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjQwNTE0MTgxNzE4WhcNMjQwNTIxMTgxNzE4WjAYMRYwFAYD VQQDEw02NjQzYWFhZS01OGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q02s1fUAQA4isR0hHC6Rk64dZZjZz37rOyLLJYxiBUZJ7VlfbgHlRxowWXr Guwg5OqXpluZTqxuWCU02PBTnOhk1rJBoIo2RTLLUGeOxFHJGBHRLBAF5Ycury1G LAhBOr9CUQFRwDiayevUMsVd04myFKtpPzOqbSXL80Dz9Ueb+aB+B2eW8b2CoOFB 8XqcVZXbG0H/9l2TJ8kGrZNpUQXl3yJ2NDY8ELAcunmrNZdFnpQ/TPDCp3ZW73Vb A31LkxD5jwgtsZ6Tezf+eIWReqB1t0D6nQWJAryH2rqmTGeEfMjkLQxq541fzxBW NhQ47nYSAeptAhD023TTAuBsGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmfA3Az Yrz9txc/hHhofFet6CHWMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZs77D/+TPZMcyn7sVZNTbFaEaVtms5PkQd/op2S0TX3T1nKs2/N8H 8WT1FFCUfwuTnq13/6tDaS1pYYhflt/MgjNHG+788sL7qdbGfU+1cDPG90snyDBG X6hCn+9s/Got742GCElRMVPUuErWbItCltH1BbytHL5mRpkcM1FW9Ask5SvRpqGV OZnEWf5WlPCUnAhZm5krjub20/La/mKCeEKhBOcKV01OyH6a0QbdhUhATQ3ol9YK JDi9v/0Yl/zCl2jOnaO+rVT98BL0DWaUigKFXCkVrasbQXbVO8ltBYwRIW28MbiH 9NJuzXhUHfp0ggE1TnUlsBoHQyNKSEBU -----END CERTIFICATE-----Generated at Tue May 14 19:10:21 2024 by rpki-client on console-ams.rpki-client.org