$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json) Hash identifier: H3Zdlqt7m+x86o8gD2Ptj5NEj36ZSNK7wTlPmxDGWgY= Subject key identifier: 0C:22:59:DD:77:1C:7C:7B:A0:B7:3B:9E:4E:4C:AD:0F:32:11:FE:B6 Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft Manifest number: 0374 Signing time: Sun 19 May 2024 02:52:08 +0000 Manifest this update: Sun 19 May 2024 02:52:07 +0000 Manifest next update: Sun 26 May 2024 02:52:07 +0000 Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: hGLHt70e33xUHC/doqqX7Uuqysbdb5+LbverJz9H1yk=) 2: E29E31F47B4211EEAEE2281DC4F9AE02.roa (hash: CMBklRgoWBAI9bBrQOFA+/x7621FWfVfV0EFm23ww7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Validity Not Before: May 19 02:52:07 2024 GMT Not After : May 26 02:52:07 2024 GMT Subject: CN=66496958-81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:3a:47:f9:cd:69:ea:d6:c7:3b:c7:61:6a: c8:15:55:b1:11:5c:ab:ea:6f:b6:f0:7f:9a:11:f9: 21:d7:26:12:df:1b:4f:95:f5:0d:22:93:e9:26:1d: 12:70:6a:0c:33:e1:9b:67:6b:cb:1f:d8:be:7d:a1: 48:9f:07:64:e9:81:bf:d2:69:4c:f4:a2:dd:35:5d: e5:dd:60:31:9f:40:7f:84:9f:3c:db:74:5e:fe:6b: e9:bc:74:36:77:64:88:19:10:a7:c8:2e:e7:50:a5: 81:f1:15:fa:2d:60:c0:f5:16:b3:06:97:d7:16:bd: 64:72:43:39:4b:fd:e1:2a:1f:ce:e4:3e:32:3b:d6: 68:e6:b1:72:05:4c:29:97:fa:84:c6:a0:3c:dc:0c: dd:02:9b:e0:52:5f:e9:11:3b:63:c9:23:20:21:61: ca:6d:a4:45:b3:a1:10:03:81:ce:e2:6a:9a:8d:2f: 28:b7:51:98:93:af:2c:db:4b:bb:ca:dc:68:35:9e: 94:b5:11:7d:18:c9:95:c0:af:44:49:e0:c5:ab:42: 6f:f1:68:02:78:06:26:72:e3:c6:60:3e:97:78:dd: 20:bc:a5:66:02:03:f9:fb:94:31:b1:ea:e6:f8:e9: f9:09:f6:3f:c3:8f:b3:ff:ac:ac:b6:3b:a6:5b:cf: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:59:DD:77:1C:7C:7B:A0:B7:3B:9E:4E:4C:AD:0F:32:11:FE:B6 X509v3 Authority Key Identifier: keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:68:ba:34:e9:c6:8f:06:70:a9:f3:99:90:ff:9c:ec:8e: db:5f:d4:e9:ef:f2:c6:e0:6e:53:3e:bd:19:19:58:1c:0f:5d: 11:a0:49:2f:9c:dc:9b:5d:7e:52:13:f3:d9:50:1a:26:ac:5e: 01:15:37:db:2f:8a:1c:c5:a4:16:66:4c:db:1c:4e:c0:21:6d: bd:c7:77:a4:3b:c8:b1:87:93:3c:08:ab:57:de:dc:ea:f9:f7: 3d:c3:c1:b7:27:c7:c4:c9:41:e7:3a:f6:61:24:6f:7a:4c:27: 1b:4b:59:14:4d:4a:dd:38:af:d9:e3:9b:38:36:58:b3:7c:d4: 22:4a:ac:6a:3e:cd:46:08:67:2b:97:f6:ad:47:93:02:8d:d0: ca:a0:89:99:65:69:7c:ff:c7:78:35:08:39:b4:b2:fb:f1:0c: 0c:e1:01:0f:38:d4:f0:2a:6f:ed:a7:2d:d8:bc:d2:34:8c:22: 5a:b8:16:7a:7f:c7:b4:3d:ba:57:5b:96:0f:d7:36:92:1f:d0: e1:e9:81:ee:01:03:e6:ca:4a:10:a2:e8:0b:76:d7:9e:30:b1: 58:a0:a5:4e:ac:f5:c3:fc:cb:8e:9e:0e:1a:b6:2f:1b:17:7a: 29:ff:e3:13:90:4f:2e:96:7a:c6:1d:06:da:5c:6b:53:d3:ac: 85:9a:8d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0 RDFCNTI3NUYwHhcNMjQwNTE5MDI1MjA3WhcNMjQwNTI2MDI1MjA3WjAYMRYwFAYD VQQDEw02NjQ5Njk1OC04MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp46R/nNaerWxzvHYWrIFVWxEVyr6m+28H+aEfkh1yYS3xtPlfUNIpPpJh0S cGoMM+GbZ2vLH9i+faFInwdk6YG/0mlM9KLdNV3l3WAxn0B/hJ8823Re/mvpvHQ2 d2SIGRCnyC7nUKWB8RX6LWDA9RazBpfXFr1kckM5S/3hKh/O5D4yO9Zo5rFyBUwp l/qExqA83AzdApvgUl/pETtjySMgIWHKbaRFs6EQA4HO4mqajS8ot1GYk68s20u7 ytxoNZ6UtRF9GMmVwK9ESeDFq0Jv8WgCeAYmcuPGYD6XeN0gvKVmAgP5+5Qxserm +On5CfY/w4+z/6ystjumW8++cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwiWd13 HHx7oLc7nk5MrQ8yEf62MB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0 Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA1Qi85ODE3RDI3MjY0Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0 em5PQ0dLbmlJSVZORzFKMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxSmi6NOnGjwZwqfOZkP+c7I7bX9Tp7/LG4G5TPr0ZGVgcD10RoEkv nNybXX5SE/PZUBomrF4BFTfbL4ocxaQWZkzbHE7AIW29x3ekO8ixh5M8CKtX3tzq +fc9w8G3J8fEyUHnOvZhJG96TCcbS1kUTUrdOK/Z45s4NlizfNQiSqxqPs1GCGcr l/atR5MCjdDKoImZZWl8/8d4NQg5tLL78QwM4QEPONTwKm/tpy3YvNI0jCJauBZ6 f8e0PbpXW5YP1zaSH9Dh6YHuAQPmykoQougLdteeMLFYoKVOrPXD/MuOng4ati8b F3op/+MTkE8ulnrGHQbaXGtT06yFmo20 -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org