$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: F8jhkRbMX8cTthe0F282G1TC8eRIu1ViXWfT72QGN9A= Subject key identifier: AA:D8:FF:FC:B7:09:94:AC:C9:3D:5E:6A:E5:35:DF:C5:84:85:F5:7C Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0BC6 Signing time: Fri 22 Nov 2024 18:31:51 +0000 Manifest this update: Fri 22 Nov 2024 18:31:50 +0000 Manifest next update: Fri 29 Nov 2024 18:31:50 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: b+diDVmuPsmdrX6cLuH+DyqtvaA70By4eAmAEAcuaLw=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: oFYr2yy9dMefE9Z1wzHmLqOiXmS6OATdYeTX4qCFAV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: Nov 22 18:31:50 2024 GMT Not After : Nov 29 18:31:50 2024 GMT Subject: CN=6740ce17-8b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:a9:75:98:36:81:88:2a:6c:71:ef:8c:07: e0:37:bf:7a:76:71:d1:ba:b4:60:94:45:e4:9a:e6: b1:90:a0:7a:7c:0f:a0:c7:05:5a:3e:0a:18:1d:b8: 6e:e5:fa:f9:47:b5:ca:80:b0:5b:67:73:fb:81:42: a1:4b:11:7f:26:a6:87:41:dd:77:fd:b4:04:68:99: c5:21:ee:ec:99:f6:d1:1f:e6:a3:8a:db:18:76:91: 17:3b:ce:8f:42:79:af:df:ef:8f:d7:6d:cb:03:8e: 9b:f5:14:3e:8c:33:d9:ec:bf:25:ec:0c:cc:31:5e: f0:64:82:41:52:e8:a6:8c:58:29:e0:56:98:5e:61: 7a:ef:22:01:97:44:7d:18:f1:d0:e8:c2:d4:d2:9f: 5d:97:b4:57:09:b7:58:be:04:1d:fa:4c:26:65:8b: 28:58:85:3a:ef:62:95:1c:27:80:f0:96:e9:ae:de: 18:29:42:d2:0b:e8:09:11:b1:b5:82:b7:4f:6d:4e: c4:1a:d3:8b:27:b9:27:ef:97:3f:06:99:52:59:50: 0d:e2:1e:a5:e5:ea:62:82:23:ac:70:47:f5:a6:d9: ba:fc:c8:04:af:d6:f1:2f:bb:11:66:4c:44:f1:7b: db:b0:b4:1a:e4:19:3f:65:07:72:66:87:0c:34:2f: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:FF:FC:B7:09:94:AC:C9:3D:5E:6A:E5:35:DF:C5:84:85:F5:7C X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d0:f3:b2:50:50:94:f9:f5:62:ab:7f:ad:ae:6e:92:87:b2: 83:00:a4:69:42:26:ae:1e:f3:f6:93:d8:1e:a2:0d:22:51:e3: 4b:9e:6d:f7:07:2c:c5:bd:34:34:90:d0:c6:fb:21:6c:02:e4: 54:ca:09:8c:16:37:74:92:84:04:e3:39:f8:19:b1:7e:61:d3: d3:4e:13:8f:9a:98:88:5b:46:d6:4b:27:58:1f:ad:e0:cf:6f: 10:d2:5d:13:89:51:77:42:0f:78:ff:00:2c:1c:a9:6a:47:4a: 2b:c6:7f:45:0d:53:d0:d3:cc:32:d9:cc:f7:cf:96:50:37:7c: c4:ec:11:a3:88:b9:64:2c:e1:6f:87:3d:ea:dc:e3:bd:71:2a: fe:c4:a3:1f:f0:6d:c2:a8:48:a4:00:06:fb:be:f2:5c:d5:e2: ab:43:a4:aa:6c:f3:fb:40:2c:fb:5c:67:5f:3d:b4:90:e2:b4: f6:c1:73:58:d9:50:cc:2e:d4:17:e3:04:cc:f3:eb:af:76:b9: 3f:8f:a9:33:c0:e9:41:b6:ea:3d:7f:ce:b1:6a:bb:6f:5b:42: 0d:e2:e8:28:5e:cc:64:f1:52:ef:5a:58:79:d2:52:6b:86:b2: 42:0f:2a:e9:86:e8:9e:cd:10:ac:7b:4d:be:89:8a:ae:de:b1: d6:93:5c:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjQxMTIyMTgzMTUwWhcNMjQxMTI5MTgzMTUwWjAYMRYwFAYD VQQDEw02NzQwY2UxNy04YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NmpdZg2gYgqbHHvjAfgN796dnHRurRglEXkmuaxkKB6fA+gxwVaPgoYHbhu 5fr5R7XKgLBbZ3P7gUKhSxF/JqaHQd13/bQEaJnFIe7smfbRH+ajitsYdpEXO86P Qnmv3++P123LA46b9RQ+jDPZ7L8l7AzMMV7wZIJBUuimjFgp4FaYXmF67yIBl0R9 GPHQ6MLU0p9dl7RXCbdYvgQd+kwmZYsoWIU672KVHCeA8Jbprt4YKULSC+gJEbG1 grdPbU7EGtOLJ7kn75c/BplSWVAN4h6l5epigiOscEf1ptm6/MgEr9bxL7sRZkxE 8XvbsLQa5Bk/ZQdyZocMNC+SnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrY//y3 CZSsyT1eauU138WEhfV8MB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs0POyUFCU+fViq3+trm6Sh7KDAKRpQiauHvP2k9geog0iUeNLnm33 ByzFvTQ0kNDG+yFsAuRUygmMFjd0koQE4zn4GbF+YdPTThOPmpiIW0bWSydYH63g z28Q0l0TiVF3Qg94/wAsHKlqR0orxn9FDVPQ08wy2cz3z5ZQN3zE7BGjiLlkLOFv hz3q3OO9cSr+xKMf8G3CqEikAAb7vvJc1eKrQ6SqbPP7QCz7XGdfPbSQ4rT2wXNY 2VDMLtQX4wTM8+uvdrk/j6kzwOlBtuo9f86xartvW0IN4ugoXsxk8VLvWlh50lJr hrJCDyrphuiezRCse02+iYqu3rHWk1xW -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org