$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: 8dHEgNB0sShaYha80QgLiTHqhNb8oSsZcYhOfDrwB1s= Subject key identifier: 85:CA:31:B3:35:76:63:E9:D7:31:1B:E1:5A:AE:6D:55:4A:BC:A3:64 Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 043C Signing time: Fri 03 May 2024 02:03:36 +0000 Manifest this update: Fri 03 May 2024 02:03:36 +0000 Manifest next update: Fri 10 May 2024 02:03:36 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: JtpA74vzwo0khGT6IbREXkhIz5D7G+Q7JgX81JJ5bRU=) 2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: cHNaznrXTmiJqba+iHQeSWh9M4ibe/txr0GFchiLiag=) 3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: 2lZgSJf5MYUgZTLkxHvCm5+lrVlmIHxkmDmgsm9hjQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: May 3 02:03:36 2024 GMT Not After : May 10 02:03:36 2024 GMT Subject: CN=663445f8-de03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:d5:d4:10:f2:2a:63:16:ca:12:6b:ca:b7: b3:82:3a:e8:5f:d4:39:98:92:97:a3:56:52:1f:7c: cd:c7:a6:f0:be:77:b1:97:d6:30:24:9b:9d:19:33: 87:0e:9e:49:41:a1:a9:ee:4e:30:d0:b6:18:0d:ed: 6a:a9:44:05:19:a3:f9:37:c8:38:d0:a5:eb:94:c3: 50:92:02:52:8d:05:04:64:38:b1:35:6b:7e:63:f1: ec:13:4c:62:61:74:cf:b7:cf:f4:f5:3a:f4:92:eb: 2b:70:0e:8d:c5:85:49:ef:48:ed:29:31:09:38:3f: 27:60:4d:f9:b1:ed:17:7b:8f:1a:75:63:ad:04:a3: 6b:97:01:d3:61:7d:d0:27:b9:4e:cd:a0:26:6c:a0: 19:b2:8c:88:cc:61:50:0f:d4:c2:cd:29:09:a1:a2: 93:37:0a:1b:0c:21:48:b7:e8:a1:c3:3f:d0:43:78: 15:d4:de:5e:ad:63:1d:93:61:36:5e:ed:9d:18:4e: 5e:96:c4:a9:75:30:ce:f9:d6:b9:45:da:45:22:a6: 68:ef:82:c9:af:06:cd:57:8d:cd:49:12:05:93:ca: 4f:3d:e6:7c:1b:90:11:91:28:7b:a6:02:d1:8f:d7: 3c:30:3a:d2:93:f8:05:82:ae:b0:a8:83:3c:e1:06: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:31:B3:35:76:63:E9:D7:31:1B:E1:5A:AE:6D:55:4A:BC:A3:64 X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:35:31:ca:fd:92:60:7a:a4:76:03:d4:39:95:98:c2:1e:a7: 1b:bd:a5:1c:2f:c8:74:23:f0:50:b2:ed:a0:4f:3f:7b:2d:d2: 63:f6:aa:5c:20:e8:65:6e:5a:34:12:a0:6c:93:c3:f0:cd:8f: 17:e2:3e:c0:b7:0a:65:1a:3c:bd:b2:a5:71:5b:c0:ae:e3:ff: 97:94:20:e8:84:8b:64:4d:5e:bc:7b:31:7b:98:7f:b0:43:46: 1e:26:22:9f:52:4d:1d:13:dd:bb:90:c9:13:7e:b8:9a:cd:d1: d6:2a:b2:b4:ac:42:5e:3d:29:8f:69:99:c0:96:4f:67:e5:e1: d0:b1:f0:df:fc:c1:70:ce:83:ae:00:30:02:48:e7:fb:90:d5: 91:0e:48:38:f5:f5:30:89:74:26:33:57:79:16:93:4d:6a:eb: 21:cc:3c:fb:59:b4:52:98:02:22:8d:e6:44:09:e8:70:b1:70: a2:3b:06:e8:25:e9:12:d0:d2:bd:3c:39:fa:e7:52:35:2d:fb: 8e:96:7e:11:01:6c:b8:21:f9:fe:d4:37:d2:c4:8a:86:71:26: 36:c9:dd:35:2e:69:0a:d9:cc:54:d2:42:66:d4:61:0e:74:b6: 75:ab:8e:51:00:09:1d:1e:c8:11:da:60:e4:ac:fc:de:d2:1c: fd:7b:8c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjQwNTAzMDIwMzM2WhcNMjQwNTEwMDIwMzM2WjAYMRYwFAYD VQQDEw02NjM0NDVmOC1kZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w3V1BDyKmMWyhJryrezgjroX9Q5mJKXo1ZSH3zNx6bwvnexl9YwJJudGTOH Dp5JQaGp7k4w0LYYDe1qqUQFGaP5N8g40KXrlMNQkgJSjQUEZDixNWt+Y/HsE0xi YXTPt8/09Tr0kusrcA6NxYVJ70jtKTEJOD8nYE35se0Xe48adWOtBKNrlwHTYX3Q J7lOzaAmbKAZsoyIzGFQD9TCzSkJoaKTNwobDCFIt+ihwz/QQ3gV1N5erWMdk2E2 Xu2dGE5elsSpdTDO+da5RdpFIqZo74LJrwbNV43NSRIFk8pPPeZ8G5ARkSh7pgLR j9c8MDrSk/gFgq6wqIM84QZM4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXKMbM1 dmPp1zEb4VqubVVKvKNkMB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENTHK/ZJgeqR2A9Q5lZjCHqcbvaUcL8h0I/BQsu2gTz97LdJj9qpc IOhlblo0EqBsk8PwzY8X4j7AtwplGjy9sqVxW8Cu4/+XlCDohItkTV68ezF7mH+w Q0YeJiKfUk0dE927kMkTfriazdHWKrK0rEJePSmPaZnAlk9n5eHQsfDf/MFwzoOu ADACSOf7kNWRDkg49fUwiXQmM1d5FpNNaushzDz7WbRSmAIijeZECehwsXCiOwbo JekS0NK9PDn651I1LfuOln4RAWy4Ifn+1DfSxIqGcSY2yd01LmkK2cxU0kJm1GEO dLZ1q45RAAkdHsgR2mDkrPze0hz9e4wK -----END CERTIFICATE-----Generated at Fri May 3 03:10:55 2024 by rpki-client on console-ams.rpki-client.org