$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: lu5n0eQrVPbmQ8Wxxe/6g7eGSoG7I4ZIM+7Lly/JaBI= Subject key identifier: B3:7D:92:74:02:BD:0F:21:3C:54:62:19:3C:40:5B:AB:62:98:10:9F Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 02D4 Signing time: Tue 07 May 2024 03:20:57 +0000 Manifest this update: Tue 07 May 2024 03:20:57 +0000 Manifest next update: Tue 14 May 2024 03:20:57 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: xKHcL9UzTQmqh2pOh3Bc/WCRcHQowFyevISyaQDoiZQ=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: KLkyJO51KF0HES3orpiv2hLgmmOTv1bEcegw4/Yurj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: May 7 03:20:57 2024 GMT Not After : May 14 03:20:57 2024 GMT Subject: CN=66399e19-0d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:8b:7b:f6:5e:88:79:f7:0b:d8:ed:55:89: ce:73:65:f9:6b:e6:e3:7b:91:0d:39:57:39:b1:4c: 55:fb:7a:a5:f3:ef:47:9f:94:be:b2:93:20:ba:0a: 76:07:29:b8:8b:e3:30:43:f0:3f:02:d4:f8:b5:cc: ab:04:c2:03:79:18:80:19:35:78:62:56:ea:76:5a: e3:c8:b5:5a:13:60:7d:92:6f:29:51:02:c8:2c:17: 52:bd:3f:1b:f2:d3:68:4a:5b:1a:1a:4e:55:d3:b7: 4c:00:3c:11:2e:a1:42:39:4a:e3:31:69:2e:40:19: b1:ec:9e:b1:13:90:e5:00:6d:69:77:a4:f2:60:c1: 83:46:30:2d:e8:15:3e:ac:f0:51:0e:64:28:5d:fc: fb:05:10:a2:03:44:d1:a8:d2:3e:4f:8d:9a:05:67: 9d:8b:6a:34:f0:46:e7:b0:d0:b4:47:4e:08:0c:d6: f6:8b:45:9e:6d:ac:d6:8a:01:d0:78:7a:9f:90:5e: 57:89:34:16:26:13:da:4b:dd:47:98:bc:fd:4f:a2: 18:97:41:bb:ba:5c:1e:f5:f0:26:d4:1a:c6:74:57: b9:ed:11:40:b1:95:c4:13:28:a5:e5:fa:7c:cf:f9: f4:03:ba:53:47:2c:ce:e7:b8:7e:2c:e1:a1:86:d7: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:92:74:02:BD:0F:21:3C:54:62:19:3C:40:5B:AB:62:98:10:9F X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:a8:20:9f:01:74:20:94:8f:a8:5a:e6:3e:93:ce:71:54: 41:4d:fc:89:4d:4d:5a:4c:eb:f4:fb:62:f4:ab:1d:e5:94:2b: c9:ce:b3:1b:f8:f1:21:97:9c:cb:e8:2e:ad:53:9b:10:f0:8f: e9:e9:20:7f:0a:51:8e:64:f6:e2:8f:6d:03:79:77:54:45:58: a5:3b:bc:ee:3e:0a:9b:9a:0e:75:6b:e5:98:93:f0:12:cc:cb: 50:70:09:e3:8c:ef:b3:fa:53:af:d9:24:2b:3f:92:df:ac:28: f1:3c:4d:47:e6:5c:9f:57:fa:dc:3e:a2:3b:35:3d:42:29:4f: 74:05:a7:51:b2:46:d9:9e:22:85:82:3d:86:7d:54:a2:a1:c6: d8:78:1c:0b:ce:b1:64:9f:9f:15:a8:6a:29:c4:e1:48:53:4a: 0e:bc:56:e8:c2:76:48:b3:8e:76:c5:7f:95:ae:33:23:f3:58: 21:75:d4:55:29:57:47:14:48:c4:25:bf:72:d4:c5:5a:33:ab: 67:cb:dd:a4:04:4b:67:f1:0a:a2:5b:78:38:4b:4e:19:8c:7a: 49:36:ae:a2:fd:0e:69:98:db:6a:34:d6:0f:4c:10:ce:1d:cf: 17:62:20:a5:03:4e:b8:67:82:b3:d1:6b:e2:b3:b0:a3:bb:6e: cc:61:2d:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjQwNTA3MDMyMDU3WhcNMjQwNTE0MDMyMDU3WjAYMRYwFAYD VQQDEw02NjM5OWUxOS0wZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DmLe/ZeiHn3C9jtVYnOc2X5a+bje5ENOVc5sUxV+3ql8+9Hn5S+spMgugp2 Bym4i+MwQ/A/AtT4tcyrBMIDeRiAGTV4YlbqdlrjyLVaE2B9km8pUQLILBdSvT8b 8tNoSlsaGk5V07dMADwRLqFCOUrjMWkuQBmx7J6xE5DlAG1pd6TyYMGDRjAt6BU+ rPBRDmQoXfz7BRCiA0TRqNI+T42aBWedi2o08EbnsNC0R04IDNb2i0WebazWigHQ eHqfkF5XiTQWJhPaS91HmLz9T6IYl0G7ulwe9fAm1BrGdFe57RFAsZXEEyil5fp8 z/n0A7pTRyzO57h+LOGhhte/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN9knQC vQ8hPFRiGTxAW6timBCfMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoVKggnwF0IJSPqFrmPpPOcVRBTfyJTU1aTOv0+2L0qx3llCvJzrMb +PEhl5zL6C6tU5sQ8I/p6SB/ClGOZPbij20DeXdURVilO7zuPgqbmg51a+WYk/AS zMtQcAnjjO+z+lOv2SQrP5LfrCjxPE1H5lyfV/rcPqI7NT1CKU90BadRskbZniKF gj2GfVSiocbYeBwLzrFkn58VqGopxOFIU0oOvFbownZIs452xX+VrjMj81ghddRV KVdHFEjEJb9y1MVaM6tny92kBEtn8QqiW3g4S04ZjHpJNq6i/Q5pmNtqNNYPTBDO Hc8XYiClA064Z4Kz0Wvis7Cju27MYS32 -----END CERTIFICATE-----Generated at Tue May 7 03:53:41 2024 by rpki-client on console-fra.rpki-client.org