$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: 32bj/1GHJactjfNtgvvoLpfrVCTM4j0kuptT7X/81cs= Subject key identifier: 10:E5:15:DE:D0:79:26:58:5D:D7:55:CC:62:C2:12:AF:B4:1E:33:7A Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 15E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 15CE Signing time: Thu 02 May 2024 17:17:45 +0000 Manifest this update: Thu 02 May 2024 17:17:44 +0000 Manifest next update: Thu 09 May 2024 17:17:44 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: fA9OwqUsoD2rdNazcbWqealKYtF0Kv1cuudAQ9x4yyk=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5603 (0x15e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: May 2 17:17:44 2024 GMT Not After : May 9 17:17:44 2024 GMT Subject: CN=6633cab8-ce9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:14:77:45:61:0f:f9:76:ce:a0:89:89:b7: e3:e0:fd:79:b2:77:cf:86:d7:10:bf:3d:79:d6:21: b5:b8:78:8d:42:30:93:4b:e8:4f:c6:ba:fc:8b:3e: 41:33:6f:fa:af:4b:a8:79:44:ca:e8:f5:1a:9a:0c: 59:64:aa:8d:46:8d:04:9d:2e:b0:61:56:a3:5e:e0: 2c:55:ce:60:10:70:47:77:c4:87:29:75:a2:19:94: a2:50:49:e3:db:11:bd:39:ca:be:b1:12:a8:7c:fe: a2:b4:77:ad:e4:fd:d1:e3:c2:f4:6f:d6:8f:60:0e: 95:ba:31:d8:ce:5f:cb:e2:25:7a:a4:25:da:db:2c: 3e:57:29:d9:64:18:ea:eb:87:3d:70:49:fe:11:06: e1:86:bb:89:af:51:b4:24:e3:f0:ea:61:8c:7c:c5: 2c:b5:a2:d2:34:64:52:97:7b:92:09:52:67:20:a4: 20:3a:21:69:e0:db:a4:3a:f2:2f:cb:1c:23:37:16: c4:1e:40:e8:43:51:56:19:be:e4:2e:4a:a6:32:1b: ab:fd:f1:16:f2:83:66:8a:2d:6a:17:92:77:87:e5: 35:6f:1c:ea:2d:60:46:3b:9a:fc:de:33:7f:ac:03: 78:0d:cb:33:9a:fc:e7:c9:cb:a7:82:d2:a4:9e:79: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:15:DE:D0:79:26:58:5D:D7:55:CC:62:C2:12:AF:B4:1E:33:7A X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:38:ef:47:c6:5e:39:20:68:70:09:5e:c9:71:01:2b:3b:48: 4c:f8:f9:de:40:9f:ec:1e:c6:01:47:59:3d:f5:cc:df:78:8c: d1:37:07:5a:74:05:5c:22:24:c9:00:b6:86:35:14:63:80:ba: a4:12:a9:8e:60:f0:30:0e:af:3c:28:c8:1d:80:e5:39:54:b3: 06:5b:23:15:50:2c:f8:1e:e2:23:3c:ed:93:d1:09:24:f0:7d: 16:41:30:7e:0a:83:7e:e4:54:9c:e6:d9:61:06:47:30:e8:b1: 21:f6:e3:b4:95:4c:16:27:5b:c6:36:c3:5b:dd:4f:41:8e:2c: a3:1a:c3:35:09:96:79:c0:7d:67:2a:40:b9:eb:00:ac:2a:da: d7:10:42:3b:5a:3a:f6:93:32:3b:45:56:d7:9a:00:80:11:b4: 6c:7e:77:53:90:0c:9e:47:4a:d7:e5:f1:2f:c2:aa:9c:b1:cb: 73:f3:ea:0c:c6:fe:11:dd:c0:96:28:59:e8:f6:da:90:50:06: af:f4:af:02:d8:86:51:14:fd:8b:96:6e:e1:65:97:b0:88:3f: 15:56:4e:fd:96:c8:bf:d6:1b:d9:49:89:f1:cf:ec:c3:01:68: 16:62:01:55:b7:a9:71:cc:b2:f3:3d:04:f7:06:e9:59:0d:76: 82:dc:62:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjQwNTAyMTcxNzQ0WhcNMjQwNTA5MTcxNzQ0WjAYMRYwFAYD VQQDEw02NjMzY2FiOC1jZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9aMUd0VhD/l2zqCJibfj4P15snfPhtcQvz151iG1uHiNQjCTS+hPxrr8iz5B M2/6r0uoeUTK6PUamgxZZKqNRo0EnS6wYVajXuAsVc5gEHBHd8SHKXWiGZSiUEnj 2xG9Ocq+sRKofP6itHet5P3R48L0b9aPYA6VujHYzl/L4iV6pCXa2yw+VynZZBjq 64c9cEn+EQbhhruJr1G0JOPw6mGMfMUstaLSNGRSl3uSCVJnIKQgOiFp4NukOvIv yxwjNxbEHkDoQ1FWGb7kLkqmMhur/fEW8oNmii1qF5J3h+U1bxzqLWBGO5r83jN/ rAN4DcszmvznycungtKknnn2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDlFd7Q eSZYXddVzGLCEq+0HjN6MB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoOO9Hxl45IGhwCV7JcQErO0hM+PneQJ/sHsYBR1k99czfeIzRNwda dAVcIiTJALaGNRRjgLqkEqmOYPAwDq88KMgdgOU5VLMGWyMVUCz4HuIjPO2T0Qkk 8H0WQTB+CoN+5FSc5tlhBkcw6LEh9uO0lUwWJ1vGNsNb3U9BjiyjGsM1CZZ5wH1n KkC56wCsKtrXEEI7Wjr2kzI7RVbXmgCAEbRsfndTkAyeR0rX5fEvwqqcsctz8+oM xv4R3cCWKFno9tqQUAav9K8C2IZRFP2Llm7hZZewiD8VVk79lsi/1hvZSYnxz+zD AWgWYgFVt6lxzLLzPQT3BulZDXaC3GJR -----END CERTIFICATE-----Generated at Thu May 2 20:05:01 2024 by rpki-client on console-ams.rpki-client.org