$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: JS+NHVdmbmKAA9La3FH00qhXMpWVNs8JVry6YAXo5RU= Subject key identifier: F5:17:3E:55:A7:52:97:7C:4B:67:D8:63:CE:22:6F:06:A7:14:60:88 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0A86 Signing time: Mon 06 May 2024 20:21:08 +0000 Manifest this update: Mon 06 May 2024 20:21:07 +0000 Manifest next update: Mon 13 May 2024 20:21:07 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: i2AqkzVu9UuISisAqDhd53Z2b4xj1evLJ6Fx0A2Ggas=) 2: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: x3Xod+tEcwAdcLZi2ebHVsvCXbzUOYa2UDAp51s/ijQ=) 3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: ITxGtpJMGLzo1gd+Qs4P7ZXvo5hPI/fgGafqF2S8U/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2707 (0xa93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: May 6 20:21:07 2024 GMT Not After : May 13 20:21:07 2024 GMT Subject: CN=66393bb4-9823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:29:81:c9:22:15:89:24:12:fd:79:af:a4: 22:33:0c:54:06:f9:2b:8a:b8:bf:68:9c:97:68:ef: 08:65:6b:9d:37:63:6b:90:ab:80:cc:c7:41:9e:92: 87:c2:8a:da:56:46:31:6b:b2:64:23:7c:d1:c8:1e: 3b:45:64:05:be:0c:bc:fa:c9:c0:55:4b:c9:53:77: 66:08:74:34:ab:3f:d7:4d:89:63:3f:3f:1a:01:8f: b4:fb:77:87:4f:39:6e:67:26:0f:85:5e:1e:d5:07: ff:ac:61:0f:1d:10:93:73:88:da:23:38:eb:33:01: 21:70:a4:fc:10:1e:30:8d:93:21:15:a5:99:70:6e: 00:ea:c4:10:be:36:85:17:bd:40:d7:9f:e2:69:8c: 6b:b5:8a:71:75:4b:86:09:a1:11:0d:dc:c8:a0:1e: 74:a4:c8:da:57:34:ba:3c:03:b4:9c:55:c2:ba:3b: 52:72:dd:02:bf:88:2d:89:5b:0c:db:03:1c:28:90: 3c:7a:58:f1:48:f1:1c:47:57:5b:96:e1:ad:d9:e5: f8:e0:a3:55:10:43:5c:45:74:c3:aa:ba:e5:58:8a: e6:cd:bb:fe:3e:39:84:cf:ca:51:1b:1f:7e:2b:97: ba:31:4e:17:31:26:e2:97:d9:4c:3c:24:dd:34:bc: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:17:3E:55:A7:52:97:7C:4B:67:D8:63:CE:22:6F:06:A7:14:60:88 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0f:4f:4a:02:f1:d0:86:30:6c:2d:68:cd:41:2c:79:41:25: 63:b8:37:8d:c6:19:65:64:1d:f7:3c:bd:d3:3a:39:3e:94:81: 69:49:b7:09:98:87:d3:6e:6f:8d:d3:9d:18:ff:18:96:26:9a: 31:59:72:78:f7:82:2a:41:5e:11:ed:55:03:b9:43:0d:90:a5: 46:82:a6:e7:32:7f:7e:83:d2:15:0c:4b:9d:76:00:fd:45:98: ff:12:49:25:f0:50:00:c9:4d:53:b8:3c:ff:42:29:5a:fc:97: c0:66:11:3b:af:fa:da:6c:9b:3f:e1:8d:7c:ce:51:00:1f:70: 9b:e4:82:d7:bc:25:7b:97:3e:af:e4:92:b2:68:fe:bb:d2:4d: 4b:98:69:c2:e0:d5:58:4b:d0:b9:ea:6b:ba:fb:58:14:73:7f: 67:78:4b:53:7d:13:3a:1b:31:98:b9:48:0e:61:b4:16:b5:75: f2:2b:b5:df:98:5f:b5:09:a3:21:8e:1d:21:b4:dc:74:da:ea: 66:2b:b7:7f:fc:21:e3:27:c2:eb:4d:08:68:3b:9d:24:d1:18: 97:f8:1e:34:d7:fc:7f:fd:16:c5:2f:aa:a7:00:2c:d7:b6:fa: e7:c1:ca:5e:ab:d2:db:6b:c8:81:ea:af:78:e1:e0:9d:90:35: ba:7c:b9:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjQwNTA2MjAyMTA3WhcNMjQwNTEzMjAyMTA3WjAYMRYwFAYD VQQDEw02NjM5M2JiNC05ODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+ApgckiFYkkEv15r6QiMwxUBvkriri/aJyXaO8IZWudN2NrkKuAzMdBnpKH woraVkYxa7JkI3zRyB47RWQFvgy8+snAVUvJU3dmCHQ0qz/XTYljPz8aAY+0+3eH TzluZyYPhV4e1Qf/rGEPHRCTc4jaIzjrMwEhcKT8EB4wjZMhFaWZcG4A6sQQvjaF F71A15/iaYxrtYpxdUuGCaERDdzIoB50pMjaVzS6PAO0nFXCujtSct0Cv4gtiVsM 2wMcKJA8eljxSPEcR1dbluGt2eX44KNVEENcRXTDqrrlWIrmzbv+PjmEz8pRGx9+ K5e6MU4XMSbil9lMPCTdNLwR+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUXPlWn Upd8S2fYY84ibwanFGCIMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRD09KAvHQhjBsLWjNQSx5QSVjuDeNxhllZB33PL3TOjk+lIFpSbcJ mIfTbm+N050Y/xiWJpoxWXJ494IqQV4R7VUDuUMNkKVGgqbnMn9+g9IVDEuddgD9 RZj/Ekkl8FAAyU1TuDz/Qila/JfAZhE7r/rabJs/4Y18zlEAH3Cb5ILXvCV7lz6v 5JKyaP670k1LmGnC4NVYS9C56mu6+1gUc39neEtTfRM6GzGYuUgOYbQWtXXyK7Xf mF+1CaMhjh0htNx02upmK7d//CHjJ8LrTQhoO50k0RiX+B401/x//RbFL6qnACzX tvrnwcpeq9Lba8iB6q944eCdkDW6fLk8 -----END CERTIFICATE-----Generated at Mon May 6 23:05:52 2024 by rpki-client on console-fra.rpki-client.org