$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: ldjtCPqCpZKwXlm/9F0z5tPbMavsaaxGZqcsa+QDq+g= Subject key identifier: C9:0A:DA:7D:AC:E2:70:4B:5E:3A:38:D2:6D:A6:16:82:8C:05:70:88 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 52 Signing time: Fri 17 May 2024 08:02:53 +0000 Manifest this update: Fri 17 May 2024 08:02:53 +0000 Manifest next update: Fri 24 May 2024 08:02:53 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: +yYc70i3eTZpC9LYq3yAhV8yGAY8E0HunOb6LzDg07E=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: rw3mF1kHVwPA57QAQF/xTH8uLt+cmuP9Gixunh3VrxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: May 17 08:02:53 2024 GMT Not After : May 24 08:02:53 2024 GMT Subject: CN=66470f2d-877d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:a0:26:42:5b:0b:1e:bb:40:6c:b2:f7:c5: a6:57:64:6a:52:58:6f:b8:4b:71:86:fa:78:7f:3e: cd:a1:61:f3:a1:c6:c0:97:3a:3d:13:db:42:20:67: a1:36:a9:0a:8d:92:09:5f:1b:bb:6b:c5:1f:22:aa: ac:ad:92:82:bf:cf:87:99:f8:4d:d3:11:90:d3:94: fb:c7:bb:70:e5:f7:d0:4c:b5:91:3d:7c:66:b4:a2: 22:b5:23:c2:57:8a:2f:55:7a:27:13:d9:1c:e1:9a: 60:ec:4d:cd:e0:92:bb:49:9c:0d:40:38:8a:75:4f: 26:b7:51:7f:98:bc:64:23:2c:78:d8:09:b2:98:ed: 12:29:67:20:c6:4e:b4:39:8c:6e:e8:2c:00:1a:c6: 59:d3:b3:6f:29:be:4d:9a:f0:29:e1:9e:85:bf:11: 19:1d:30:ae:2c:4d:f4:7d:70:e6:f4:3d:6b:80:9d: 1f:1f:c8:59:c7:e0:df:c7:0a:f9:87:f8:5b:e7:5e: b6:82:73:78:9e:93:c4:1a:7f:ee:fe:6e:8a:62:e7: 4b:67:15:e8:71:e1:60:0c:bb:75:a2:df:6c:eb:0a: 0e:14:94:8e:ca:2c:24:fd:3a:43:7e:63:e0:34:77: fb:66:b1:98:cc:09:25:48:51:71:aa:3d:3e:70:2c: bd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:DA:7D:AC:E2:70:4B:5E:3A:38:D2:6D:A6:16:82:8C:05:70:88 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:63:36:80:93:9d:e1:f3:45:5b:f5:81:35:63:6e:60:fb:37: de:ce:f1:d7:25:c8:aa:e5:f2:ab:81:68:a3:89:69:03:0f:c0: 21:3c:97:3a:cf:a2:be:5a:3f:61:56:b1:18:0b:de:aa:9c:5e: 9a:45:d1:04:4d:3a:b5:f0:a0:f5:a5:17:be:11:6e:7f:3d:e7: 36:73:48:3c:5a:d1:31:cb:08:9e:57:77:fa:21:07:a7:6e:61: 67:94:77:e0:9d:88:98:e9:eb:a5:2b:32:33:70:2b:f4:a7:96: 39:7b:c7:98:9d:c7:a6:b1:a5:e5:16:26:18:88:d8:00:6c:37: 0c:a0:19:3a:60:a8:01:46:79:eb:f5:a9:57:81:74:a6:1a:ae: ac:dd:f8:a2:26:35:6f:36:ff:95:d8:6e:fb:28:2f:5d:23:6b: ed:d8:55:ba:a1:df:24:c0:29:49:25:46:fe:f7:8a:fe:b2:dd: e7:71:48:dc:0d:e5:9f:d4:67:09:5f:9d:ff:1c:09:ae:ad:82: 64:ae:f9:1e:7d:47:f6:ed:30:8f:24:eb:08:e2:02:33:34:9b: 59:f4:5c:86:67:a5:95:42:b1:8c:21:e6:4c:62:b6:ab:96:87: 77:af:6b:3d:a4:67:e0:97:f9:47:7e:d1:91:d6:f6:7d:0d:d9: 41:cf:56:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDQ2OTExMC8GA1UEBRMoMjhCQTZFNjg3RjFGQkQ4MzNCOUExM0FBRDhDMTQyQUQ4 RkFGQkNBODAeFw0yNDA1MTcwODAyNTNaFw0yNDA1MjQwODAyNTNaMBgxFjAUBgNV BAMTDTY2NDcwZjJkLTg3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmiKAmQlsLHrtAbLL3xaZXZGpSWG+4S3GG+nh/Ps2hYfOhxsCXOj0T20IgZ6E2 qQqNkglfG7trxR8iqqytkoK/z4eZ+E3TEZDTlPvHu3Dl99BMtZE9fGa0oiK1I8JX ii9VeicT2RzhmmDsTc3gkrtJnA1AOIp1Tya3UX+YvGQjLHjYCbKY7RIpZyDGTrQ5 jG7oLAAaxlnTs28pvk2a8CnhnoW/ERkdMK4sTfR9cOb0PWuAnR8fyFnH4N/HCvmH +FvnXraCc3iek8Qaf+7+bopi50tnFehx4WAMu3Wi32zrCg4UlI7KLCT9OkN+Y+A0 d/tmsZjMCSVIUXGqPT5wLL27AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyQrafazi cEteOjjSbaYWgowFcIgwHwYDVR0jBBgwFoAUKLpuaH8fvYM7mhOq2MFCrY+vvKgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENDY5Lzk3REU3QTdFOUND MjExRUVCMzAyRTA2MUM0RjlBRTAyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZL Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0xwdWFIOGZ2WU03bWhPcTJNRkNyWS12dktnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NDY5Lzk3REU3QTdFOUNDMjExRUVCMzAyRTA2MUM0RjlBRTAyL0tMcHVhSDhmdllN N21oT3EyTUZDclktdnZLZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJRjNoCTneHzRVv1gTVjbmD7N97O8dclyKrl8quBaKOJaQMPwCE8lzrP or5aP2FWsRgL3qqcXppF0QRNOrXwoPWlF74Rbn895zZzSDxa0THLCJ5Xd/ohB6du YWeUd+CdiJjp66UrMjNwK/Snljl7x5idx6axpeUWJhiI2ABsNwygGTpgqAFGeev1 qVeBdKYarqzd+KImNW82/5XYbvsoL10ja+3YVbqh3yTAKUklRv73iv6y3edxSNwN 5Z/UZwlfnf8cCa6tgmSu+R59R/btMI8k6wjiAjM0m1n0XIZnpZVCsYwh5kxitquW h3evaz2kZ+CX+Ud+0ZHW9n0N2UHPVrc= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org