$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: DC6/skGDq8KyrYJs8xJYz2/B1G+kvqpiWeP45bUqqT8= Subject key identifier: 28:22:5E:A5:95:17:5D:C4:8E:4D:26:A9:B5:E3:F4:71:91:87:97:63 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 117F Signing time: Mon 06 May 2024 20:40:02 +0000 Manifest this update: Mon 06 May 2024 20:40:01 +0000 Manifest next update: Mon 13 May 2024 20:40:01 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: Z0rlbkLm6n+dL2BG1aNIzirqfSTAF7toUBIR5idOvoQ=) 2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: A98xQV0hpY7nffWC2yCxp0IJLB7RMbyr6IXQBDA8UO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: May 6 20:40:01 2024 GMT Not After : May 13 20:40:01 2024 GMT Subject: CN=66394021-32dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:c1:59:1b:e9:df:32:b9:d6:33:cf:b8:b3: 80:95:3a:ea:47:1e:5c:ab:1e:48:ef:4d:34:da:e1: e7:a7:93:2c:f0:b1:72:77:83:0c:16:ff:c0:70:fc: f9:8b:bb:24:87:15:87:cf:ce:ff:65:a3:65:18:04: d4:22:d9:3a:2e:01:73:c3:a6:21:a4:1c:9b:37:3a: d7:b8:34:ec:9b:a1:cc:aa:46:f2:4b:91:75:30:b2: c5:91:ca:19:87:8c:0b:63:6a:1d:a3:40:30:e2:e4: 65:66:47:51:ce:6f:f0:5a:24:03:dd:ba:e5:a1:a2: a7:18:8b:d0:83:87:14:6b:42:05:33:c3:ef:8e:77: 91:e0:a6:cc:82:50:8a:8c:5a:ed:29:a1:33:57:75: 4a:74:62:21:f3:f5:2c:5b:4a:d3:3e:7c:8f:e9:26: 0c:36:8e:9c:69:64:35:48:88:1c:2a:64:62:da:01: 95:cb:40:95:e3:e3:c8:a9:e6:88:e6:a7:fa:11:dc: af:3f:48:b4:13:42:a4:c5:58:68:79:0b:bb:06:74: 07:65:7f:9c:71:98:50:9e:28:eb:94:d7:67:ed:fb: bc:c8:27:a3:5a:b0:1d:06:c2:15:07:3e:eb:1e:08: e8:31:48:cc:e4:51:f5:b6:cd:32:8b:f0:5c:a5:88: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:22:5E:A5:95:17:5D:C4:8E:4D:26:A9:B5:E3:F4:71:91:87:97:63 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fd:08:81:95:dd:dc:e6:e3:d5:3f:d1:cf:6c:67:9a:ac:cb: 2e:db:08:bc:e2:b1:01:35:47:b5:12:2a:51:6f:3a:ab:03:e5: 63:32:ba:36:b3:e1:05:1c:1f:e0:5f:db:e8:0b:74:9f:22:3e: 0d:4c:86:86:e6:9d:e3:d1:da:62:54:1b:0c:2a:af:66:0c:13: 04:db:31:77:aa:85:e3:f8:77:b2:e7:31:af:56:d1:56:7a:a4: 86:e0:21:ff:3f:18:0d:3e:96:c0:30:fe:7b:fd:c6:5c:c3:ce: 0e:f7:33:f1:df:56:e3:08:9c:75:75:9c:80:d7:e3:d9:4f:e3: bd:6c:19:47:c2:7d:93:ec:4d:70:16:c1:46:45:7b:f2:61:d6: 44:e0:7d:ba:9a:38:2c:d4:12:3c:38:e4:6e:2e:b8:91:f7:24: 8a:68:68:59:0c:dc:13:80:56:2b:89:5a:4e:ee:a3:d9:a2:17: 08:33:78:7d:90:62:42:34:64:76:5b:45:98:ba:d9:04:33:11: ef:ad:30:5d:2d:8c:a2:b5:24:81:22:8d:59:ef:3e:68:88:42: 7d:65:ab:85:b8:5e:f0:41:c8:e0:c1:f9:40:c8:93:e3:57:a7: 9c:a1:cb:ae:b0:76:ca:5e:6b:82:b0:71:56:8c:75:7c:41:1a: 96:fd:49:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjQwNTA2MjA0MDAxWhcNMjQwNTEzMjA0MDAxWjAYMRYwFAYD VQQDEw02NjM5NDAyMS0zMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uvBWRvp3zK51jPPuLOAlTrqRx5cqx5I70002uHnp5Ms8LFyd4MMFv/AcPz5 i7skhxWHz87/ZaNlGATUItk6LgFzw6YhpBybNzrXuDTsm6HMqkbyS5F1MLLFkcoZ h4wLY2odo0Aw4uRlZkdRzm/wWiQD3brloaKnGIvQg4cUa0IFM8PvjneR4KbMglCK jFrtKaEzV3VKdGIh8/UsW0rTPnyP6SYMNo6caWQ1SIgcKmRi2gGVy0CV4+PIqeaI 5qf6EdyvP0i0E0KkxVhoeQu7BnQHZX+ccZhQnijrlNdn7fu8yCejWrAdBsIVBz7r HgjoMUjM5FH1ts0yi/BcpYgVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgiXqWV F13Ejk0mqbXj9HGRh5djMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc/QiBld3c5uPVP9HPbGearMsu2wi84rEBNUe1EipRbzqrA+VjMro2 s+EFHB/gX9voC3SfIj4NTIaG5p3j0dpiVBsMKq9mDBME2zF3qoXj+Hey5zGvVtFW eqSG4CH/PxgNPpbAMP57/cZcw84O9zPx31bjCJx1dZyA1+PZT+O9bBlHwn2T7E1w FsFGRXvyYdZE4H26mjgs1BI8OORuLriR9ySKaGhZDNwTgFYriVpO7qPZohcIM3h9 kGJCNGR2W0WYutkEMxHvrTBdLYyitSSBIo1Z7z5oiEJ9ZauFuF7wQcjgwflAyJPj V6ecocuusHbKXmuCsHFWjHV8QRqW/Un7 -----END CERTIFICATE-----Generated at Mon May 6 23:05:52 2024 by rpki-client on console-fra.rpki-client.org