$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft File: kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json) Hash identifier: VLTwNKgGI52LdwdpAcz2qcKiOmyNCLoT40nwvTR2aSc= Subject key identifier: A7:0F:D4:C0:8E:5D:64:59:57:86:BB:36:01:B1:09:74:A3:17:AB:B3 Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 Certificate issuer: /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft Manifest number: 01CE Signing time: Fri 31 May 2024 05:03:35 +0000 Manifest this update: Fri 31 May 2024 05:03:34 +0000 Manifest next update: Fri 07 Jun 2024 05:03:34 +0000 Files and hashes: 1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: PuFxi49P60iXjs+DqQA1jzTBWu5jl1qIkKUxu6bnSJc=) 2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: XpGKna3Ys3eJ7IujestgyZU0+h8bkOMncEnuBeYCD/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Validity Not Before: May 31 05:03:34 2024 GMT Not After : Jun 7 05:03:34 2024 GMT Subject: CN=66595a26-c677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:30:f4:3c:44:3a:e9:a6:55:54:db:eb:a4: 30:a8:0b:69:c6:18:2c:e8:be:04:01:5e:fc:6b:e7: 83:81:07:20:79:75:95:6c:28:7c:c1:d9:4a:75:87: c2:fd:7b:16:9c:3e:ef:db:e9:7f:3c:de:5b:ce:3f: 01:04:8c:f2:93:28:eb:50:6b:37:88:80:36:32:75: 38:07:bb:97:8f:36:cf:cf:03:eb:0c:fe:62:02:ea: b6:aa:98:96:5a:82:90:34:3f:a1:a9:e0:11:f9:30: 33:f8:54:18:d6:e8:da:be:a1:f4:14:4f:9f:bc:bb: 62:b8:20:f7:86:6e:74:99:23:9c:bc:98:b9:a4:99: d8:37:6f:33:e0:06:8b:21:30:2f:ff:36:de:fe:b3: 45:cc:01:fe:1a:71:28:4d:59:20:45:2a:73:d1:fe: b2:2e:d6:d5:4c:5d:cb:5f:de:33:f0:a8:16:95:15: ea:42:71:c4:70:45:43:17:60:8a:f8:7f:36:00:ef: 22:f6:c1:5f:93:12:e9:ef:bc:b6:17:16:88:9d:19: 3f:a1:3a:6e:91:72:fd:7f:69:94:0c:0c:5f:58:9a: c5:9e:e9:73:97:d5:50:08:3a:6d:7b:4b:5d:10:2e: bf:eb:14:af:20:06:b7:c2:7b:44:4a:ff:18:38:11: 04:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:D4:C0:8E:5D:64:59:57:86:BB:36:01:B1:09:74:A3:17:AB:B3 X509v3 Authority Key Identifier: keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:ac:41:5e:1a:06:e4:5d:02:87:7c:93:a8:32:2e:1e:04: ce:07:f5:52:27:2e:7a:43:de:06:6e:91:03:e7:1f:f2:b0:09: c0:88:fb:47:98:52:d1:cf:e9:31:b1:12:88:08:9e:44:65:7b: eb:8a:01:ce:b9:81:31:cd:ae:91:b2:d7:f6:b6:ca:85:b4:8b: c8:d3:eb:20:16:3d:e0:cb:b7:15:ce:6c:f1:b7:7d:54:fa:f3: 3a:ea:3e:ed:10:ce:12:14:62:a0:cf:5a:1a:e5:91:9d:00:f5: f1:78:55:d9:21:bd:7a:28:70:6e:a9:23:4f:18:42:cc:57:f5: 1c:e2:26:a0:60:90:d8:76:e4:4c:92:32:40:30:fb:2e:6a:cf: aa:ee:4f:72:e8:1d:52:4b:17:d8:54:af:73:91:08:fd:cc:27: 2c:4c:53:45:79:60:aa:02:96:82:4b:37:aa:ad:21:39:c0:d0: 04:23:55:31:71:cf:58:cf:73:1c:1d:db:b9:52:67:c0:96:dd: 96:ab:90:b4:3a:8e:00:41:e9:ab:ca:e0:f2:e0:0e:7e:0d:a6: 0e:9b:a9:3e:3a:55:23:0d:a6:62:f5:07:93:97:ee:12:28:7a: 59:4f:47:94:68:cf:ad:d2:15:00:49:a0:00:04:1a:cc:c2:29: a1:4b:7f:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3OUMxMTAvBgNVBAUTKDkzMkJGNjM5MzFDMzQ3RTc2QkM5MDg5RDQxQkUyNEY2 MzcwRjI1ODIwHhcNMjQwNTMxMDUwMzM0WhcNMjQwNjA3MDUwMzM0WjAYMRYwFAYD VQQDEw02NjU5NWEyNi1jNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDYw9DxEOummVVTb66QwqAtpxhgs6L4EAV78a+eDgQcgeXWVbCh8wdlKdYfC /XsWnD7v2+l/PN5bzj8BBIzykyjrUGs3iIA2MnU4B7uXjzbPzwPrDP5iAuq2qpiW WoKQND+hqeAR+TAz+FQY1ujavqH0FE+fvLtiuCD3hm50mSOcvJi5pJnYN28z4AaL ITAv/zbe/rNFzAH+GnEoTVkgRSpz0f6yLtbVTF3LX94z8KgWlRXqQnHEcEVDF2CK +H82AO8i9sFfkxLp77y2FxaInRk/oTpukXL9f2mUDAxfWJrFnulzl9VQCDpte0td EC6/6xSvIAa3wntESv8YOBEELwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcP1MCO XWRZV4a7NgGxCXSjF6uzMB8GA1UdIwQYMBaAFJMr9jkxw0fna8kInUG+JPY3DyWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc5Qy9FMUQyMDI5MjA3 MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFItZHJ5UWlkUWI0azlqY1BK WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5djJPVEhEUi1kcnlRaWRRYjRrOWpjUEpZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc5Qy9FMUQyMDI5MjA3MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFIt ZHJ5UWlkUWI0azlqY1BKWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIX6xBXhoG5F0Ch3yTqDIuHgTOB/VSJy56Q94GbpED5x/ysAnAiPtH mFLRz+kxsRKICJ5EZXvrigHOuYExza6Rstf2tsqFtIvI0+sgFj3gy7cVzmzxt31U +vM66j7tEM4SFGKgz1oa5ZGdAPXxeFXZIb16KHBuqSNPGELMV/Uc4iagYJDYduRM kjJAMPsuas+q7k9y6B1SSxfYVK9zkQj9zCcsTFNFeWCqApaCSzeqrSE5wNAEI1Ux cc9Yz3McHdu5UmfAlt2Wq5C0Oo4AQemryuDy4A5+DaYOm6k+OlUjDaZi9QeTl+4S KHpZT0eUaM+t0hUASaAABBrMwimhS39a -----END CERTIFICATE-----Generated at Fri May 31 05:53:52 2024 by rpki-client on console-fra.rpki-client.org