$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: KX/iRv4GuF/ofgTrBkhruQkL2okz9wonowB2i+RdJd0= Subject key identifier: D2:14:6B:16:3D:5C:66:8B:EC:C3:A6:38:2E:B4:80:D5:BB:6E:12:B6 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 7D Signing time: Wed 15 May 2024 07:18:47 +0000 Manifest this update: Wed 15 May 2024 07:18:47 +0000 Manifest next update: Wed 22 May 2024 07:18:47 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: /3JD5zgxEFYKBtcS0+uiE0e99q2MBnBjUywfJeXg678=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: jL0xKd4lahRRT3auwPuJ+cZTDIcKc8m7R6bkczIhonM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: May 15 07:18:47 2024 GMT Not After : May 22 07:18:47 2024 GMT Subject: CN=664461d7-9b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:87:62:64:6f:23:fe:1b:21:99:e7:9f:8b: 48:68:ef:33:56:22:c7:35:9d:26:95:d2:c1:9a:c0: 8a:08:43:e1:e3:7a:97:3e:64:17:5f:8c:ec:20:4e: 39:8d:f0:1a:84:7b:41:94:e0:1e:03:b2:e2:d7:72: 83:5d:5c:da:38:40:38:00:a6:76:1e:e1:84:cc:56: 6c:21:b3:b2:57:5d:f1:71:2b:93:f8:ec:cf:80:a7: 71:c8:19:d5:1f:fa:14:e7:ef:70:03:af:82:4f:25: ac:2d:8d:14:15:45:98:93:cb:d1:d8:2b:e3:ed:52: 51:52:62:05:a3:4e:c4:50:67:34:61:d5:80:97:7d: ee:45:1c:75:9e:d7:18:9f:b9:98:bb:11:b8:33:fb: c1:b4:80:c6:60:84:6b:09:50:67:bf:38:c2:30:9e: ad:52:b7:44:5e:24:3b:78:3b:3d:ba:fb:7a:c8:98: 7b:29:03:4a:41:d4:99:4c:b2:48:ad:e4:63:4d:5b: ea:6b:cf:76:29:99:87:e6:38:8e:47:16:f1:fb:30: 80:96:37:3d:f4:2a:f9:01:8e:f9:e3:4d:54:b3:c4: 0a:83:34:48:76:c5:98:f1:48:7a:d5:46:4f:48:ae: b9:04:bd:50:5c:42:ed:fa:3d:13:4c:3f:40:ef:22: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:6B:16:3D:5C:66:8B:EC:C3:A6:38:2E:B4:80:D5:BB:6E:12:B6 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a1:1c:7d:b9:85:7b:9a:aa:25:e5:33:8f:46:44:90:6e:5b: 4d:35:1d:ea:23:a3:5c:fa:bb:fa:94:b9:2c:6c:1c:f0:5d:15: 6d:60:06:90:00:c8:f5:92:32:32:a5:f1:ff:77:c8:48:be:41: 69:b1:64:48:68:d7:c6:35:fe:d8:26:56:be:8d:ff:f5:cc:a7: 81:33:d1:aa:e3:a0:03:45:dd:6f:3d:8d:5c:ee:fe:2b:16:5c: cd:36:80:37:8c:9d:51:18:29:46:30:c8:7d:50:9e:7a:aa:9a: 3d:ab:4a:f2:9b:8d:18:01:4c:61:4b:67:db:1d:1d:a8:6c:b7: 0f:a2:1c:d3:c5:cc:3c:d6:7d:00:ff:2b:03:af:7c:1b:2d:ad: 47:ee:45:6f:a6:d7:21:b4:9c:1a:d8:38:d0:e1:23:54:08:40: 89:ec:7b:d1:c4:5f:79:28:e9:89:3f:97:75:93:eb:30:54:9a: 30:04:ce:c7:66:43:f7:e5:d5:06:2b:83:f3:25:fd:6d:9d:9f: 3f:d5:90:24:df:43:04:a8:12:d8:14:26:04:32:38:aa:66:67: 3c:74:18:50:f1:aa:7b:40:50:52:ca:3c:01:00:ee:21:dc:85: ac:c0:99:7d:65:96:11:ea:56:65:03:2b:6e:55:ac:b7:2c:59: 03:d2:58:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUFFRTExMC8GA1UEBRMoMjhDMDYwN0Q5NjgzMUEzRDE4MDkzMzQ1QjM3MjU4RUUz QkQ3RjNFNzAeFw0yNDA1MTUwNzE4NDdaFw0yNDA1MjIwNzE4NDdaMBgxFjAUBgNV BAMTDTY2NDQ2MWQ3LTliOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqWodiZG8j/hshmeefi0ho7zNWIsc1nSaV0sGawIoIQ+Hjepc+ZBdfjOwgTjmN 8BqEe0GU4B4DsuLXcoNdXNo4QDgApnYe4YTMVmwhs7JXXfFxK5P47M+Ap3HIGdUf +hTn73ADr4JPJawtjRQVRZiTy9HYK+PtUlFSYgWjTsRQZzRh1YCXfe5FHHWe1xif uZi7Ebgz+8G0gMZghGsJUGe/OMIwnq1St0ReJDt4Oz26+3rImHspA0pB1JlMskit 5GNNW+prz3YpmYfmOI5HFvH7MICWNz30KvkBjvnjTVSzxAqDNEh2xZjxSHrVRk9I rrkEvVBcQu36PRNMP0DvIisbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0hRrFj1c Zovsw6Y4LrSA1btuErYwHwYDVR0jBBgwFoAUKMBgfZaDGj0YCTNFs3JY7jvX8+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1QUVFLzNFMzkwMUYyNTIw NzExRUVCNTdCNTg3N0M0RjlBRTAyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS01CZ2ZaYURHajBZQ1RORnMzSlk3anZYOC1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 QUVFLzNFMzkwMUYyNTIwNzExRUVCNTdCNTg3N0M0RjlBRTAyL0tNQmdmWmFER2ow WUNUTkZzM0pZN2p2WDgtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEqhHH25hXuaqiXlM49GRJBuW001Heojo1z6u/qUuSxsHPBdFW1gBpAA yPWSMjKl8f93yEi+QWmxZEho18Y1/tgmVr6N//XMp4Ez0arjoANF3W89jVzu/isW XM02gDeMnVEYKUYwyH1Qnnqqmj2rSvKbjRgBTGFLZ9sdHahstw+iHNPFzDzWfQD/ KwOvfBstrUfuRW+m1yG0nBrYONDhI1QIQInse9HEX3ko6Yk/l3WT6zBUmjAEzsdm Q/fl1QYrg/Ml/W2dnz/VkCTfQwSoEtgUJgQyOKpmZzx0GFDxqntAUFLKPAEA7iHc hazAmX1llhHqVmUDK25VrLcsWQPSWH4= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org