$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: DLN3q+kPoXFvEQwvI48XK5dQut524rRNgKP814MysbI= Subject key identifier: B4:48:99:FB:43:A6:9B:0F:27:79:6A:CA:E8:A5:53:F7:49:61:6E:EF Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 052C Signing time: Mon 06 May 2024 16:31:11 +0000 Manifest this update: Mon 06 May 2024 16:31:10 +0000 Manifest next update: Mon 13 May 2024 16:31:10 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: QIAXBzGZot59kMjFEtfPVGmueWN4APALUanhe3VnqGc=) 2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yA8CM+8H6xwJ9pHyZOsdjkVreDkVa8Z4fxWdAhNQOeQ=) 3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: 11JUyeS619BZBLeVnX8WZB3KLzR+wUBPMH71l/dsZsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: May 6 16:31:10 2024 GMT Not After : May 13 16:31:10 2024 GMT Subject: CN=663905cf-cb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:f0:c8:03:1b:02:88:f4:54:7b:79:d2:6e: f3:1e:e0:f1:eb:74:83:91:35:5a:c9:d7:f3:ca:c1: 50:15:91:27:57:04:ff:0d:9c:8a:cf:5e:a6:03:08: c0:a9:19:47:2f:9e:83:d8:d4:ee:73:52:f1:8b:35: 55:36:11:bc:e0:bf:2e:7d:d5:59:64:f8:80:02:5e: 2d:e1:b1:aa:15:cb:9a:5d:3a:cc:b3:b1:57:86:5e: d4:4f:07:af:03:d3:2f:d2:97:0b:46:69:15:89:d6: 0e:9f:f0:93:eb:02:bb:a2:bf:4f:ae:90:29:2d:b9: fb:a7:dd:c0:ef:69:87:be:88:7b:04:0b:45:48:49: 18:0e:fe:01:01:2c:8e:ff:10:fa:7a:cd:88:ff:81: 84:96:eb:74:74:3f:60:b4:15:6c:82:04:5d:31:1b: 54:7c:ff:03:4a:ce:1f:07:63:7c:3a:2f:23:e3:3c: 3b:c0:58:ea:7c:44:4d:5d:5e:4a:72:db:08:58:2c: 77:c0:51:de:0b:90:61:71:37:5c:60:1e:84:d3:53: 78:21:b7:58:1a:96:d9:5f:64:2e:5d:eb:31:7f:cf: 6d:99:6e:3a:74:90:1f:7d:69:b4:72:bb:2c:1d:9d: 61:c5:e0:2b:d2:8b:89:69:1c:5e:aa:cd:7e:23:79: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:99:FB:43:A6:9B:0F:27:79:6A:CA:E8:A5:53:F7:49:61:6E:EF X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a8:fd:a7:3b:1e:c6:53:2b:f7:82:59:c4:a5:83:20:eb:ac: 57:a4:13:47:c6:53:fc:8a:0e:3a:f0:31:79:ac:73:19:3e:87: 30:04:fa:f4:7a:53:8c:72:be:32:b3:93:df:3e:25:66:73:eb: de:3d:0b:76:95:1d:0f:62:1f:8e:eb:bf:e2:67:75:be:87:91: b6:4b:50:a0:67:18:5a:46:d2:d3:54:9c:04:89:75:3c:21:1d: 89:89:03:9b:72:57:d0:40:37:ba:6f:78:8d:04:18:4b:ba:63: c3:ed:92:db:dc:ee:9c:f3:4b:de:dd:41:0f:42:11:06:45:66: 9e:cd:b4:e2:85:a8:31:60:b6:64:a2:8d:73:15:f9:b8:8d:c1: 5d:4e:d7:0f:f7:e2:c2:0d:9d:09:9f:9c:22:ed:e2:f5:17:5b: 50:f3:b9:de:78:20:a4:27:64:37:15:d0:8f:67:cb:42:33:71: 1c:e8:de:f1:71:a5:77:82:e6:db:11:f9:77:41:e1:b8:23:b7: 62:ef:9b:69:ed:4a:fc:e7:26:74:42:f5:00:af:53:41:31:07: bf:91:43:16:b6:41:65:10:bb:a4:17:7c:ed:fe:3f:68:74:af: 11:da:9b:c2:48:50:20:64:48:c1:65:d6:c4:ce:2f:d3:8e:83: e0:bb:09:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjQwNTA2MTYzMTEwWhcNMjQwNTEzMTYzMTEwWjAYMRYwFAYD VQQDEw02NjM5MDVjZi1jYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgTwyAMbAoj0VHt50m7zHuDx63SDkTVaydfzysFQFZEnVwT/DZyKz16mAwjA qRlHL56D2NTuc1LxizVVNhG84L8ufdVZZPiAAl4t4bGqFcuaXTrMs7FXhl7UTwev A9Mv0pcLRmkVidYOn/CT6wK7or9PrpApLbn7p93A72mHvoh7BAtFSEkYDv4BASyO /xD6es2I/4GElut0dD9gtBVsggRdMRtUfP8DSs4fB2N8Oi8j4zw7wFjqfERNXV5K ctsIWCx3wFHeC5BhcTdcYB6E01N4IbdYGpbZX2QuXesxf89tmW46dJAffWm0crss HZ1hxeAr0ouJaRxeqs1+I3nlMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRImftD ppsPJ3lqyuilU/dJYW7vMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqP2nOx7GUyv3glnEpYMg66xXpBNHxlP8ig468DF5rHMZPocwBPr0 elOMcr4ys5PfPiVmc+vePQt2lR0PYh+O67/iZ3W+h5G2S1CgZxhaRtLTVJwEiXU8 IR2JiQObclfQQDe6b3iNBBhLumPD7ZLb3O6c80ve3UEPQhEGRWaezbTihagxYLZk oo1zFfm4jcFdTtcP9+LCDZ0Jn5wi7eL1F1tQ87neeCCkJ2Q3FdCPZ8tCM3Ec6N7x caV3gubbEfl3QeG4I7di75tp7Ur85yZ0QvUAr1NBMQe/kUMWtkFlELukF3zt/j9o dK8R2pvCSFAgZEjBZdbEzi/TjoPguwnz -----END CERTIFICATE-----Generated at Mon May 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org