$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: UEAHKiwiD4OMdDQO2M02lvJuv6INFhNGcge5IkHtFRQ= Subject key identifier: 9E:11:D9:B7:7A:38:EA:02:C0:9B:9E:55:5E:52:58:0E:C4:3B:92:81 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0BF7 Signing time: Mon 06 May 2024 19:06:56 +0000 Manifest this update: Mon 06 May 2024 19:06:55 +0000 Manifest next update: Mon 13 May 2024 19:06:55 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: jD+mmT7/u1mfootbL4wGOmYOYxvhmpVhNAYwG5TW6vg=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: l70W9C7sKwAcMsRhEuSt7Uvtsib+WwKJgxVKjnT8swQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: May 6 19:06:55 2024 GMT Not After : May 13 19:06:55 2024 GMT Subject: CN=66392a50-a2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:17:19:c2:ed:c8:47:d4:83:96:09:b2:0c: fc:bf:a4:a5:e3:50:17:00:47:80:12:3a:8e:9a:92: ba:25:1e:20:65:8f:44:10:19:40:1d:11:17:51:79: 0b:81:b2:ac:76:6e:2d:ab:0e:ed:68:74:14:8b:e5: 04:59:98:ec:ac:a1:8b:eb:d0:81:3b:99:36:8d:73: 9b:d0:2d:1d:85:a6:a4:a1:a2:6a:0a:d5:9f:89:9a: 24:0f:bb:2c:4d:7f:73:47:53:dc:26:24:89:ea:86: d6:17:dd:48:f1:7d:31:fa:03:b1:92:c9:d6:10:0c: 0b:87:f0:7f:33:5c:0b:d7:c8:49:d0:5e:6d:4f:c8: 4d:13:4f:ee:18:7a:f1:b8:aa:bc:6a:53:6f:53:3d: a8:58:80:25:28:0b:63:ab:3a:31:12:57:32:75:f7: d3:b9:cf:44:da:e5:88:8a:21:21:b6:45:4c:00:d6: af:2a:6d:fa:4e:d2:ad:7e:01:51:28:8d:82:34:09: 7b:17:c8:3f:ae:7d:87:b6:9c:59:16:ef:74:93:e4: ce:7c:b7:75:7c:60:c6:4d:40:db:6b:d4:0d:0c:5b: 6d:38:47:64:7a:e6:35:67:be:4f:a4:dc:2d:42:d8: 07:ed:aa:a3:bb:2c:64:21:cb:7e:a3:3c:35:5d:b0: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:D9:B7:7A:38:EA:02:C0:9B:9E:55:5E:52:58:0E:C4:3B:92:81 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4a:72:d1:da:61:a8:0b:e5:4e:ba:b2:74:e1:d0:0c:19:a1: ef:22:5c:cf:c2:da:0d:7b:f1:72:45:44:78:09:f7:43:db:0c: 55:4d:2b:84:b4:06:5e:67:e6:0f:7c:6a:15:57:6f:64:10:20: e5:a7:92:97:18:8b:35:5a:72:0f:28:71:dd:7e:ac:59:71:37: 6c:5b:ef:47:ca:c7:76:21:cd:bc:2d:b8:e4:f8:5d:bf:0e:ba: d7:2f:3d:f0:61:bb:12:07:25:bc:5c:92:88:fc:1b:e9:0a:28: ac:6a:a2:97:3b:be:c1:ca:b3:5e:70:89:af:dd:19:c3:bc:81: 2c:12:5c:7a:4c:89:61:d0:bf:49:b4:7a:4a:ae:93:60:08:57: 33:13:ce:54:4c:83:37:dd:38:c7:99:8b:8e:3f:e4:a7:4c:82: d2:66:b8:7c:f0:6b:70:e5:f5:e6:58:e5:f3:6e:fa:db:a2:47: 69:15:fb:2e:bd:c8:05:b1:a7:d5:66:07:40:f9:b2:9c:15:d5: 50:31:99:3e:c1:c7:f6:3b:5f:a4:11:d5:8f:b2:8a:28:24:b7: e1:1d:9a:52:60:8c:55:55:e1:0c:b1:ab:e9:1c:b0:fd:38:28: 9e:de:f3:54:d4:51:09:e3:4d:6d:1b:6e:32:a0:a2:7c:31:06: e2:37:5d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjQwNTA2MTkwNjU1WhcNMjQwNTEzMTkwNjU1WjAYMRYwFAYD VQQDEw02NjM5MmE1MC1hMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplUXGcLtyEfUg5YJsgz8v6Sl41AXAEeAEjqOmpK6JR4gZY9EEBlAHREXUXkL gbKsdm4tqw7taHQUi+UEWZjsrKGL69CBO5k2jXOb0C0dhaakoaJqCtWfiZokD7ss TX9zR1PcJiSJ6obWF91I8X0x+gOxksnWEAwLh/B/M1wL18hJ0F5tT8hNE0/uGHrx uKq8alNvUz2oWIAlKAtjqzoxElcydffTuc9E2uWIiiEhtkVMANavKm36TtKtfgFR KI2CNAl7F8g/rn2HtpxZFu90k+TOfLd1fGDGTUDba9QNDFttOEdkeuY1Z75PpNwt QtgH7aqjuyxkIct+ozw1XbBbnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4R2bd6 OOoCwJueVV5SWA7EO5KBMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbSnLR2mGoC+VOurJ04dAMGaHvIlzPwtoNe/FyRUR4CfdD2wxVTSuE tAZeZ+YPfGoVV29kECDlp5KXGIs1WnIPKHHdfqxZcTdsW+9Hysd2Ic28Lbjk+F2/ DrrXLz3wYbsSByW8XJKI/BvpCiisaqKXO77ByrNecImv3RnDvIEsElx6TIlh0L9J tHpKrpNgCFczE85UTIM33TjHmYuOP+SnTILSZrh88Gtw5fXmWOXzbvrbokdpFfsu vcgFsafVZgdA+bKcFdVQMZk+wcf2O1+kEdWPsoooJLfhHZpSYIxVVeEMsavpHLD9 OCie3vNU1FEJ401tG24yoKJ8MQbiN10z -----END CERTIFICATE-----Generated at Mon May 6 20:19:20 2024 by rpki-client on console-fra.rpki-client.org