$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: 65u/wEiKKrY30Whw+1MT8XhrX9c9/m1MCXr7Bprpc/U= Subject key identifier: 5D:F1:66:7B:96:48:06:5F:62:9B:FF:37:06:5B:29:B0:22:7D:6A:DE Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0B5F Signing time: Thu 02 May 2024 19:37:13 +0000 Manifest this update: Thu 02 May 2024 19:37:12 +0000 Manifest next update: Thu 09 May 2024 19:37:12 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: LtPeNBmXRstIt9WHp/gmcN5SxcSWNHaiLL3y1ZXUyPM=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: oFYr2yy9dMefE9Z1wzHmLqOiXmS6OATdYeTX4qCFAV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: May 2 19:37:12 2024 GMT Not After : May 9 19:37:12 2024 GMT Subject: CN=6633eb69-8c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:db:85:e5:fe:00:23:67:52:46:9f:ed:c6: e4:33:4a:32:c0:92:08:5d:11:4d:6a:f4:32:69:31: 9c:ae:c0:56:c7:0e:41:d5:d7:c3:4b:06:2c:6a:59: 80:9e:4a:8e:27:cb:20:bd:d6:4c:eb:8c:06:ce:74: b9:57:45:88:bd:c0:22:12:38:e5:4f:d9:6a:68:d3: 6f:0e:7f:a0:bd:b3:7b:e5:f9:85:f3:5e:41:e6:bc: 13:e9:33:46:61:71:72:90:a2:3a:f2:26:56:59:8d: 1d:f7:66:60:fd:9e:98:97:a3:bb:9e:d5:18:b8:98: 47:d0:99:c6:e6:51:9a:c5:42:32:38:8a:43:fb:2a: 06:7d:a9:cd:99:ef:e8:f3:46:ae:60:b2:43:81:f3: 50:00:12:ce:8c:a5:d5:67:50:ea:41:38:28:85:89: ef:e4:e0:3f:e6:45:e9:55:e4:76:6f:e4:06:af:4f: b8:e3:fa:99:7d:07:ae:13:c8:4c:ea:7a:a1:f6:00: 1b:31:8e:7a:f4:18:7f:2b:dd:0f:75:f9:55:1e:4d: cb:c9:df:36:8f:b5:55:0e:88:23:c1:ff:9f:9d:a1: ea:38:57:59:95:69:77:51:8d:47:8d:e7:c1:ab:8a: ca:1b:a6:c2:bb:2c:02:2e:fb:7f:9e:d9:26:44:b0: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:66:7B:96:48:06:5F:62:9B:FF:37:06:5B:29:B0:22:7D:6A:DE X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:f9:12:74:ba:48:47:d2:21:c5:20:9c:06:5e:bf:ec:6c: e5:60:8c:e1:7c:eb:14:60:e3:a9:d6:02:d9:23:cd:f9:89:c1: e5:ed:6c:cc:0d:31:c4:c8:f1:6a:63:d9:07:cf:70:39:c3:05: 53:39:0b:bb:2e:58:89:51:a0:d3:ce:6a:22:ff:d2:b2:aa:e0: 81:84:35:e0:80:0d:e1:cc:53:f7:ca:e6:fe:94:17:9b:b0:07: e5:b5:73:9c:1d:92:91:e0:08:53:3d:5b:22:64:73:c2:9d:6f: c3:56:db:44:ef:1c:98:88:e2:18:04:ff:72:c7:c5:2b:1a:25: c0:01:aa:62:50:fc:4a:13:5d:7b:db:1f:35:ee:a0:01:d2:e1: 3c:7f:06:65:01:44:1b:80:2a:d3:c5:58:9b:f1:c2:03:61:a7: 99:7b:a2:7d:7b:80:3a:76:6c:f8:d7:d6:00:02:5a:97:cc:b4: 89:b6:b5:76:00:3b:7a:8a:d4:6e:f3:69:51:4a:04:b9:a0:39: cf:f1:8f:e6:3c:ac:c8:51:e4:8f:9d:e1:84:9d:6b:42:8f:6f: 02:d2:25:2b:29:a9:03:44:c7:cf:77:7b:58:99:5b:20:0e:42: a8:a4:b1:80:1e:76:19:e0:a6:5d:01:2c:e6:65:22:41:fa:46: 2c:29:bd:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjQwNTAyMTkzNzEyWhcNMjQwNTA5MTkzNzEyWjAYMRYwFAYD VQQDEw02NjMzZWI2OS04YzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rrbheX+ACNnUkaf7cbkM0oywJIIXRFNavQyaTGcrsBWxw5B1dfDSwYsalmA nkqOJ8sgvdZM64wGznS5V0WIvcAiEjjlT9lqaNNvDn+gvbN75fmF815B5rwT6TNG YXFykKI68iZWWY0d92Zg/Z6Yl6O7ntUYuJhH0JnG5lGaxUIyOIpD+yoGfanNme/o 80auYLJDgfNQABLOjKXVZ1DqQTgohYnv5OA/5kXpVeR2b+QGr0+44/qZfQeuE8hM 6nqh9gAbMY569Bh/K90PdflVHk3Lyd82j7VVDogjwf+fnaHqOFdZlWl3UY1HjefB q4rKG6bCuywCLvt/ntkmRLDd+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3xZnuW SAZfYpv/NwZbKbAifWreMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcT/kSdLpIR9IhxSCcBl6/7GzlYIzhfOsUYOOp1gLZI835icHl7WzM DTHEyPFqY9kHz3A5wwVTOQu7LliJUaDTzmoi/9KyquCBhDXggA3hzFP3yub+lBeb sAfltXOcHZKR4AhTPVsiZHPCnW/DVttE7xyYiOIYBP9yx8UrGiXAAapiUPxKE117 2x817qAB0uE8fwZlAUQbgCrTxVib8cIDYaeZe6J9e4A6dmz419YAAlqXzLSJtrV2 ADt6itRu82lRSgS5oDnP8Y/mPKzIUeSPneGEnWtCj28C0iUrKakDRMfPd3tYmVsg DkKopLGAHnYZ4KZdASzmZSJB+kYsKb0g -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org