$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: vEhf5g0/vyXlqQFvop+W4xVZrVkS9IT/GUO7EJp4yVQ= Subject key identifier: 6F:72:51:C5:15:E4:E0:47:14:67:E1:64:09:7E:E0:84:B1:CE:7E:41 Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 33EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 33DF Signing time: Thu 02 May 2024 14:24:53 +0000 Manifest this update: Thu 02 May 2024 14:24:52 +0000 Manifest next update: Thu 09 May 2024 14:24:52 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: x7j/X6j8SavyV8zyXaldKOZ9ThKjPH4kbCRHCJ3AJ20=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: xtQcs+98fIke2X8WowLjSFx0nv2MEIv06a7KRnKWNEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13294 (0x33ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: May 2 14:24:52 2024 GMT Not After : May 9 14:24:52 2024 GMT Subject: CN=6633a234-31f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ac:90:84:dc:21:71:7e:e4:1b:e6:18:b0:af: ad:68:48:91:87:12:29:b4:29:c5:a1:fd:a7:2a:98: 7b:a6:30:d3:4b:7a:0a:f3:56:f0:20:86:b6:b8:57: 48:35:74:5d:e9:4b:65:28:4e:71:a9:fb:0b:37:20: 70:e9:59:6c:79:9d:03:2e:94:35:82:a2:c9:f3:86: 75:b2:c4:8f:63:96:4e:72:0b:f0:2c:9c:16:64:df: 8a:88:5d:0c:49:b5:93:f5:99:a8:bf:a4:ac:b6:83: 00:4d:9b:27:2f:de:82:e4:a1:ca:d3:9d:7a:43:35: 3e:80:8d:86:a3:0e:68:6d:80:7c:71:e5:71:74:f7: 3f:9a:46:e8:d5:2f:28:73:4b:18:c1:2a:4d:b1:da: d8:b0:12:7a:00:a7:ef:66:8e:64:74:2d:92:3c:d6: e8:ff:da:bb:5c:38:8e:8c:fb:32:c6:ba:af:29:30: da:73:31:28:6f:2f:15:1e:d1:b2:ee:c3:13:e1:2d: ae:9a:bc:2f:a2:30:34:83:c0:29:1b:ba:95:16:b0: 75:81:a1:83:bb:a0:56:56:6b:48:c2:0d:ae:60:b9: 45:8d:66:ea:46:5b:4f:a5:fc:51:a6:6a:af:6f:0e: b3:ef:f1:0b:09:f8:03:94:3f:97:7b:fb:51:fa:f4: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:51:C5:15:E4:E0:47:14:67:E1:64:09:7E:E0:84:B1:CE:7E:41 X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:79:3b:ec:c1:da:af:92:26:ce:c2:2d:42:dd:07:03:95:4b: 4c:2d:e3:ca:f3:d3:19:0f:c0:c7:26:1e:02:97:1d:2b:81:22: fb:c5:05:9a:d6:49:65:64:2a:d3:1d:1b:3b:a4:29:bc:0f:ab: 1d:3b:9d:06:25:8e:cb:60:07:bc:5f:ac:8c:4f:5a:cf:38:c0: b0:95:ee:ea:41:79:c3:68:16:23:91:0e:ab:ba:1d:81:b3:4e: fc:87:4d:dd:a6:fe:84:ba:66:d8:93:03:a8:83:f3:1d:f5:ca: 1d:8b:aa:48:40:6b:d3:87:b1:1b:14:61:e8:b3:a3:b2:0f:92: ff:1f:49:ea:1d:1f:58:75:5a:fb:46:b1:3e:d6:92:55:6a:47: 70:80:7f:7c:12:43:58:cf:41:0f:ae:52:50:0b:2e:9a:16:fa: f3:05:0a:6d:0a:4c:3e:02:6b:d4:36:72:a0:ff:54:f0:a8:ef: a1:6a:dd:ec:bc:85:07:8e:61:62:61:ae:c9:5d:35:e8:5f:21: 93:21:84:ef:48:b4:cd:87:86:ff:ff:62:b9:3b:9a:cf:ca:be: b3:64:d0:4a:38:88:ba:ba:54:f3:3e:62:c7:9d:61:71:f0:3c: 7a:f1:a4:04:6b:0c:f7:ba:be:85:26:c9:41:28:78:66:7b:09: b8:d9:5c:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjQwNTAyMTQyNDUyWhcNMjQwNTA5MTQyNDUyWjAYMRYwFAYD VQQDEw02NjMzYTIzNC0zMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qyQhNwhcX7kG+YYsK+taEiRhxIptCnFof2nKph7pjDTS3oK81bwIIa2uFdI NXRd6UtlKE5xqfsLNyBw6VlseZ0DLpQ1gqLJ84Z1ssSPY5ZOcgvwLJwWZN+KiF0M SbWT9Zmov6SstoMATZsnL96C5KHK0516QzU+gI2Gow5obYB8ceVxdPc/mkbo1S8o c0sYwSpNsdrYsBJ6AKfvZo5kdC2SPNbo/9q7XDiOjPsyxrqvKTDaczEoby8VHtGy 7sMT4S2umrwvojA0g8ApG7qVFrB1gaGDu6BWVmtIwg2uYLlFjWbqRltPpfxRpmqv bw6z7/ELCfgDlD+Xe/tR+vS+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9yUcUV 5OBHFGfhZAl+4ISxzn5BMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCseTvswdqvkibOwi1C3QcDlUtMLePK89MZD8DHJh4Clx0rgSL7xQWa 1kllZCrTHRs7pCm8D6sdO50GJY7LYAe8X6yMT1rPOMCwle7qQXnDaBYjkQ6ruh2B s078h03dpv6EumbYkwOog/Md9codi6pIQGvTh7EbFGHos6OyD5L/H0nqHR9YdVr7 RrE+1pJVakdwgH98EkNYz0EPrlJQCy6aFvrzBQptCkw+AmvUNnKg/1TwqO+hat3s vIUHjmFiYa7JXTXoXyGTIYTvSLTNh4b//2K5O5rPyr6zZNBKOIi6ulTzPmLHnWFx 8Dx68aQEawz3ur6FJslBKHhmewm42VzQ -----END CERTIFICATE-----Generated at Thu May 2 17:18:58 2024 by rpki-client on console-ams.rpki-client.org