$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft File: KPut8cC1pCW10h189FxAyqRO3OE.mft (raw, json) Hash identifier: skTkU2CbB7T2vdpH0uDuhm165II+yTDnxbv0gxcyRBU= Subject key identifier: A6:20:43:D1:19:DD:A1:D6:64:EF:8A:62:A5:9B:3C:ED:11:6A:E9:B8 Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1 Certificate issuer: /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1 Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft Manifest number: 0BD4 Signing time: Fri 26 Apr 2024 19:03:58 +0000 Manifest this update: Fri 26 Apr 2024 19:03:57 +0000 Manifest next update: Fri 03 May 2024 19:03:57 +0000 Files and hashes: 1: KPut8cC1pCW10h189FxAyqRO3OE.crl (hash: /s7z9GJ7+h/ZbK+mfpPlqiuTHqCMvrxRmKSXNPN3qV8=) 2: E8803B90F27411E99E67A342C4F9AE02.roa (hash: kYBuYcKPKBp85+i7Uj2fjGVl7YIsW3/imIoGdYeNAvo=) 3: E73FF93CF27411E99E67A342C4F9AE02.roa (hash: HTuKrOXo2Ww1fzisrGMVtViC8UEXYANAgC/2a/ph0C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1 Validity Not Before: Apr 26 19:03:57 2024 GMT Not After : May 3 19:03:57 2024 GMT Subject: CN=662bfa9d-1ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ba:e9:a0:18:37:74:71:c8:2b:64:96:1a:d7: 41:1b:9a:1c:ad:20:ef:8f:b6:be:0a:0d:9d:ea:c8: c4:4c:02:8f:5f:5c:53:86:ae:76:95:6b:c4:8f:d2: 09:91:f5:1e:9c:07:38:cb:76:1c:42:5a:94:54:3b: a2:8d:ec:88:57:3f:24:b0:ab:46:b4:31:38:84:b3: b3:fe:0d:36:5f:6e:99:8f:e4:b0:8b:4e:2a:43:7e: d8:cc:67:43:9f:9e:bf:72:25:1b:6a:f5:21:1f:01: 28:ba:14:7f:40:6c:44:88:8e:b9:58:a9:b6:d4:21: 61:9c:d0:21:73:6f:0d:ff:4c:6e:0b:2c:a7:d3:71: 6b:a8:04:11:35:1e:ec:00:9f:9d:43:d5:8b:af:18: f9:35:65:6a:bb:e3:ed:bc:b4:f8:3e:67:04:5a:4c: 05:4a:2d:c9:e3:08:ea:ed:f9:af:72:04:99:45:24: a3:8e:61:e2:2b:6f:18:5d:67:51:00:d4:e9:32:9c: 4e:d9:6d:27:bc:ac:1c:96:2c:13:33:20:2d:fa:89: f3:5a:91:2c:c8:9f:56:fa:96:6b:39:dc:f8:ac:5b: ba:84:32:e3:92:3e:9f:77:4d:3f:94:0f:75:2f:81: f3:d2:e8:16:83:d1:b5:4c:ae:d3:57:2b:36:f1:69: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:43:D1:19:DD:A1:D6:64:EF:8A:62:A5:9B:3C:ED:11:6A:E9:B8 X509v3 Authority Key Identifier: keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:7c:7f:80:a0:89:fc:61:90:96:aa:71:7e:12:45:c2:f2: 56:ae:bc:39:b0:33:b3:6d:1e:d8:bf:67:d7:04:a2:ae:cd:71: b3:52:52:61:71:0d:b1:48:04:f9:b7:d0:23:d2:54:cf:91:9b: 4e:94:20:72:b3:69:11:30:20:0d:5d:03:ba:9c:fa:5b:f1:1d: 07:d7:d2:c5:24:c9:b5:6e:0c:06:22:9d:bf:87:ef:cc:0f:a1: 3f:9f:b5:0d:41:db:14:5b:a4:1d:15:db:aa:56:07:44:8b:14: a4:1f:99:ec:80:29:f8:50:a2:f6:60:75:68:98:40:b5:43:cd: f5:7c:51:6b:ef:8d:2c:39:bc:40:d2:91:f3:5c:e5:3d:77:b8: e8:7e:c1:e7:6c:42:81:fe:a6:53:a7:5a:0c:f3:81:a5:84:93: 81:66:52:04:5c:40:1b:45:47:76:34:19:4b:cc:37:ed:ed:95: 9a:44:20:26:86:e7:e0:90:55:64:71:00:4d:2c:3f:16:08:37: 5f:68:2d:22:0c:f9:06:01:67:92:ff:e9:44:fc:87:a7:dd:47: 4a:24:b9:8d:59:1d:b8:56:09:0c:77:c1:c9:04:85:ef:74:f7: 85:33:ed:30:08:c5:d5:80:71:bc:60:cf:02:89:39:2d:6d:cb: bc:4b:38:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBRjcxMTAvBgNVBAUTKDI4RkJBREYxQzBCNUE0MjVCNUQyMUQ3Q0Y0NUM0MENB QTQ0RURDRTEwHhcNMjQwNDI2MTkwMzU3WhcNMjQwNTAzMTkwMzU3WjAYMRYwFAYD VQQDEw02NjJiZmE5ZC0xYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rrpoBg3dHHIK2SWGtdBG5ocrSDvj7a+Cg2d6sjETAKPX1xThq52lWvEj9IJ kfUenAc4y3YcQlqUVDuijeyIVz8ksKtGtDE4hLOz/g02X26Zj+Swi04qQ37YzGdD n56/ciUbavUhHwEouhR/QGxEiI65WKm21CFhnNAhc28N/0xuCyyn03FrqAQRNR7s AJ+dQ9WLrxj5NWVqu+PtvLT4PmcEWkwFSi3J4wjq7fmvcgSZRSSjjmHiK28YXWdR ANTpMpxO2W0nvKwcliwTMyAt+onzWpEsyJ9W+pZrOdz4rFu6hDLjkj6fd00/lA91 L4Hz0ugWg9G1TK7TVys28WksCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYgQ9EZ 3aHWZO+KYqWbPO0Raum4MB8GA1UdIwQYMBaAFCj7rfHAtaQltdIdfPRcQMqkTtzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkFGNy83QjBCNkY3MkYy NzMxMUU5QUUyNTc2NDBDNEY5QUUwMi9LUHV0OGNDMXBDVzEwaDE4OUZ4QXlxUk8z T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQdXQ4Y0MxcENXMTBoMTg5RnhBeXFSTzNPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkFGNy83QjBCNkY3MkYyNzMxMUU5QUUyNTc2NDBDNEY5QUUwMi9LUHV0OGNDMXBD VzEwaDE4OUZ4QXlxUk8zT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCnx/gKCJ/GGQlqpxfhJFwvJWrrw5sDOzbR7Yv2fXBKKuzXGzUlJh cQ2xSAT5t9Aj0lTPkZtOlCBys2kRMCANXQO6nPpb8R0H19LFJMm1bgwGIp2/h+/M D6E/n7UNQdsUW6QdFduqVgdEixSkH5nsgCn4UKL2YHVomEC1Q831fFFr740sObxA 0pHzXOU9d7jofsHnbEKB/qZTp1oM84GlhJOBZlIEXEAbRUd2NBlLzDft7ZWaRCAm hufgkFVkcQBNLD8WCDdfaC0iDPkGAWeS/+lE/Ien3UdKJLmNWR24VgkMd8HJBIXv dPeFM+0wCMXVgHG8YM8CiTktbcu8Szio -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:40 2024 by rpki-client on console-ams.rpki-client.org