$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: HfniRAiZ+68e+9+Roel6qG7PHtJeTH1AotSmgOx0L4w= Subject key identifier: D1:FA:FC:C1:30:5F:74:9A:55:8E:BB:2D:CC:7E:78:AE:48:F8:1D:08 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 33C7 Signing time: Sun 02 Jun 2024 15:36:54 +0000 Manifest this update: Sun 02 Jun 2024 15:36:53 +0000 Manifest next update: Sun 09 Jun 2024 15:36:53 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: JlMQTArmVwfvFIyzpi3H9LUZkOBq1mtC08Q0giTgSrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 15:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Jun 2 15:36:53 2024 GMT Not After : Jun 9 15:36:53 2024 GMT Subject: CN=665c9196-ddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:7d:cf:bf:61:fb:02:26:8b:1f:20:df:6d: 91:28:b1:f7:3f:ab:13:3f:e9:98:0c:2e:f1:bf:7e: 71:b2:a0:fb:53:12:76:18:e0:78:87:2d:8d:15:60: d2:9f:33:68:29:91:5a:da:d3:df:a7:e9:0a:33:5c: 9b:80:02:92:a3:04:b9:bc:27:62:52:0c:03:18:6d: 31:12:62:ba:23:7c:8b:b8:eb:04:4c:52:a0:a3:ab: b1:f2:91:d2:a2:ac:4e:b8:9c:bb:71:86:2e:55:82: e7:bb:d1:8b:47:4d:47:bb:50:9c:b8:16:6a:b6:21: ea:cc:d3:ad:d7:95:c4:7d:a9:92:e4:fc:03:f5:23: 8d:2c:c6:e9:0e:2c:3f:84:a5:a9:68:0b:0f:98:17: c9:d1:e5:8b:cb:8a:a5:b9:e8:ca:d8:5d:68:81:d2: 4d:1c:0f:f8:98:bf:d6:cc:44:4e:6b:f1:3a:88:6f: ab:4f:e8:f4:34:f8:cf:8e:e7:67:4f:98:2e:1d:9d: b9:e1:4d:6d:0c:70:61:ac:aa:79:be:73:90:42:da: 42:27:0a:ea:43:67:b1:a6:62:fc:02:db:38:80:58: 35:56:43:1d:6f:b1:dc:7e:79:0a:24:fa:a4:0e:8f: 96:4e:ad:90:82:42:53:cb:cd:27:57:10:d3:e5:df: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:FC:C1:30:5F:74:9A:55:8E:BB:2D:CC:7E:78:AE:48:F8:1D:08 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:57:03:96:cc:62:1d:f1:50:e4:09:f0:ac:d7:63:9d:85:a2: fb:c6:71:e4:59:74:08:36:09:20:60:d6:e6:2f:25:c0:30:d4: c5:df:bd:ad:1a:e8:17:7a:00:23:e2:15:20:17:69:50:c6:fd: 84:39:69:72:87:93:a6:2f:ea:e3:e2:4b:9d:30:93:8e:00:c9: 58:af:cf:05:f5:0c:91:83:02:a3:5e:87:86:34:d7:d7:88:13: 39:ab:c5:53:4f:56:2b:4c:f3:ab:6b:83:40:4c:5d:6f:ba:b5: bd:8b:93:58:d6:b2:b8:6e:d9:92:29:3e:ce:7e:d3:07:16:a9: 77:b0:ce:a2:7b:9c:8d:e8:e1:1c:1d:99:d9:63:fb:4b:e4:fa: e7:4f:84:0b:4f:17:e6:75:2e:b0:54:68:b2:cb:de:51:9e:06: b1:6d:eb:b1:c5:30:96:4e:eb:c5:c9:0f:c4:ab:1f:ae:ca:3d: 21:c8:4e:16:07:fa:88:7d:a6:3d:b5:1d:9a:b0:66:5a:ad:57: 95:c0:eb:dd:59:b6:df:28:df:de:6b:6d:02:07:eb:64:44:15: d2:1c:ff:5e:9c:55:91:40:22:3b:e4:b2:7e:9a:df:90:9a:31: 34:bd:c6:70:63:db:a4:9a:d6:f0:f6:65:b8:50:13:fd:70:70: 14:bf:fc:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjQwNjAyMTUzNjUzWhcNMjQwNjA5MTUzNjUzWjAYMRYwFAYD VQQDEw02NjVjOTE5Ni1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDh9z79h+wImix8g322RKLH3P6sTP+mYDC7xv35xsqD7UxJ2GOB4hy2NFWDS nzNoKZFa2tPfp+kKM1ybgAKSowS5vCdiUgwDGG0xEmK6I3yLuOsETFKgo6ux8pHS oqxOuJy7cYYuVYLnu9GLR01Hu1CcuBZqtiHqzNOt15XEfamS5PwD9SONLMbpDiw/ hKWpaAsPmBfJ0eWLy4qluejK2F1ogdJNHA/4mL/WzEROa/E6iG+rT+j0NPjPjudn T5guHZ254U1tDHBhrKp5vnOQQtpCJwrqQ2expmL8Ats4gFg1VkMdb7HcfnkKJPqk Do+WTq2QgkJTy80nVxDT5d9lXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH6/MEw X3SaVY67Lcx+eK5I+B0IMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VwOWzGId8VDkCfCs12OdhaL7xnHkWXQINgkgYNbmLyXAMNTF372t GugXegAj4hUgF2lQxv2EOWlyh5OmL+rj4kudMJOOAMlYr88F9QyRgwKjXoeGNNfX iBM5q8VTT1YrTPOra4NATF1vurW9i5NY1rK4btmSKT7OftMHFql3sM6ie5yN6OEc HZnZY/tL5PrnT4QLTxfmdS6wVGiyy95RngaxbeuxxTCWTuvFyQ/Eqx+uyj0hyE4W B/qIfaY9tR2asGZarVeVwOvdWbbfKN/ea20CB+tkRBXSHP9enFWRQCI75LJ+mt+Q mjE0vcZwY9ukmtbw9mW4UBP9cHAUv/yp -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:45 2024 by rpki-client on console-fra.rpki-client.org