$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: hi9JbYRVWv0ucXAVMlvUVsCHlnNjpJ+/8tU3CF04pc4= Subject key identifier: CB:F4:24:B0:C4:75:BC:63:18:76:BB:4B:1B:5A:04:F3:FC:43:13:D1 Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: 41 Signing time: Fri 17 May 2024 08:18:08 +0000 Manifest this update: Fri 17 May 2024 08:18:08 +0000 Manifest next update: Fri 24 May 2024 08:18:08 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: +5cir5dvOuUyth//g3DgmP/YO9chozC1Q12rxyLkbF0=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: 8bgWpkcwwSpnHyrkYsdyUAYCC4K6G1edvEayFTb1/1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: May 17 08:18:08 2024 GMT Not After : May 24 08:18:08 2024 GMT Subject: CN=664712c0-fab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:51:05:f8:ce:32:d9:7a:5e:c0:bd:3f:98: f2:71:09:9c:c2:35:88:f7:6e:b1:e5:c6:5a:2c:35: 26:7a:e8:27:80:74:80:d3:45:f4:8d:53:9b:ce:bd: c3:1c:31:7d:7e:83:4e:60:d6:c5:f6:97:2f:3c:87: 25:6c:2a:a4:72:0e:98:df:c9:88:4c:de:41:43:22: 00:5c:55:5c:ca:20:bb:84:73:1b:15:4a:d8:97:09: a5:f3:b4:9c:a1:50:66:69:20:ea:28:6b:84:f5:09: 58:bb:67:f7:4c:13:cf:4a:f5:96:df:1c:8b:9f:17: 6c:36:f8:38:ec:80:7e:a4:2f:0c:a9:a2:9e:3c:e0: 54:eb:52:a7:30:7f:ea:a1:dd:1c:a1:78:6d:48:c2: 00:82:8f:b6:4b:d9:61:99:31:63:b2:51:e2:1b:0e: af:c3:2d:2b:6f:73:5a:b7:69:9c:d0:db:16:96:78: a7:45:75:cf:6c:57:f2:62:e1:b4:bf:9d:57:ef:b7: b7:29:cc:c2:18:e2:94:6f:68:13:06:c0:c6:45:e7: 08:66:4c:9e:32:82:ec:69:5f:61:1a:73:b0:aa:41: 99:b8:b8:85:fc:73:a9:b6:8e:19:40:cc:32:1c:74: 79:df:37:4d:02:d6:de:b5:6d:d9:b2:ea:af:0a:26: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:24:B0:C4:75:BC:63:18:76:BB:4B:1B:5A:04:F3:FC:43:13:D1 X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:34:5c:f4:28:6e:15:8e:2b:51:c8:9f:4f:0a:2f:f5:5b:1c: 6d:96:d5:72:c8:61:17:f5:cc:1d:61:db:92:09:96:d4:e9:85: a9:d8:4d:01:b6:6e:7f:00:0f:88:23:ef:8c:cc:25:e1:2d:b8: ca:df:5b:48:45:1e:3c:53:20:00:2b:af:24:c0:11:57:2f:c7: f0:b2:84:8b:58:60:d1:65:8b:1d:e8:16:d0:fe:82:ee:cf:5f: 15:e6:f6:d0:55:07:93:b1:89:cf:ab:a1:74:ea:67:e0:fe:97: 89:12:54:85:e7:4e:9d:1a:36:af:dd:91:c0:4e:d8:2c:f9:12: 13:5b:58:16:84:6c:22:fe:55:0e:74:9b:48:80:21:d5:bc:84: 79:6d:d8:84:b7:75:36:ba:99:ad:73:a8:fa:64:89:53:ca:59: d5:9e:37:46:dd:3d:49:fb:9d:c2:84:aa:eb:7d:00:6f:54:c3: dd:70:d7:68:07:f9:8a:5a:12:5a:6c:5a:4a:d5:fe:0a:ed:d9: 89:e1:2c:53:05:88:be:b8:40:e3:4a:0e:e0:b6:8a:c4:6e:84: ea:2e:2c:df:7e:52:9c:c0:b4:1a:62:8d:3d:13:a8:e0:b7:4f: ee:e4:1f:81:50:21:ff:24:f8:53:44:07:fd:f1:9f:44:b0:ba: 7d:66:e0:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDRGRTExMC8GA1UEBRMoMjg4Mzc0MUIwRjVCQ0E3NjRGNEQzQzgzRDNFRDZBMEYy N0NEMjI5ODAeFw0yNDA1MTcwODE4MDhaFw0yNDA1MjQwODE4MDhaMBgxFjAUBgNV BAMTDTY2NDcxMmMwLWZhYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/JVEF+M4y2XpewL0/mPJxCZzCNYj3brHlxlosNSZ66CeAdIDTRfSNU5vOvcMc MX1+g05g1sX2ly88hyVsKqRyDpjfyYhM3kFDIgBcVVzKILuEcxsVStiXCaXztJyh UGZpIOooa4T1CVi7Z/dME89K9ZbfHIufF2w2+DjsgH6kLwypop484FTrUqcwf+qh 3RyheG1IwgCCj7ZL2WGZMWOyUeIbDq/DLStvc1q3aZzQ2xaWeKdFdc9sV/Ji4bS/ nVfvt7cpzMIY4pRvaBMGwMZF5whmTJ4yguxpX2Eac7CqQZm4uIX8c6m2jhlAzDIc dHnfN00C1t61bdmy6q8KJoU5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy/QksMR1 vGMYdrtLG1oE8/xDE9EwHwYDVR0jBBgwFoAUKIN0Gw9bynZPTTyD0+1qDyfNIpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNEZFLzg2QTZGNjU0Qjcz RjExRUVBRjEyQjg3QkM0RjlBRTAyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0lOMEd3OWJ5blpQVFR5RDAtMXFEeWZOSXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NEZFLzg2QTZGNjU0QjczRjExRUVBRjEyQjg3QkM0RjlBRTAyL0tJTjBHdzlieW5a UFRUeUQwLTFxRHlmTklwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANg0XPQobhWOK1HIn08KL/VbHG2W1XLIYRf1zB1h25IJltTphanYTQG2 bn8AD4gj74zMJeEtuMrfW0hFHjxTIAArryTAEVcvx/CyhItYYNFlix3oFtD+gu7P XxXm9tBVB5Oxic+roXTqZ+D+l4kSVIXnTp0aNq/dkcBO2Cz5EhNbWBaEbCL+VQ50 m0iAIdW8hHlt2IS3dTa6ma1zqPpkiVPKWdWeN0bdPUn7ncKEqut9AG9Uw91w12gH +YpaElpsWkrV/grt2YnhLFMFiL64QONKDuC2isRuhOouLN9+UpzAtBpijT0TqOC3 T+7kH4FQIf8k+FNEB/3xn0Swun1m4Cg= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org