$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: MQqIb93xepN5adrfXYD5PiY5Vy9UVi/t0kUGNgNBdFU= Subject key identifier: 4E:92:BB:E9:A9:8B:85:91:6D:0B:AB:A6:EA:BB:33:85:18:9C:05:12 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 07E8 Signing time: Sat 04 May 2024 22:07:50 +0000 Manifest this update: Sat 04 May 2024 22:07:50 +0000 Manifest next update: Sat 11 May 2024 22:07:50 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: j8+mVl/AOQoY3lzmeC9s4UQGnYqOHtnRVX6Eesbnkx4=) 2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: fkTQUrTtwywfRqcpHbaMj+/J7ntmsAtL9R8O5ggJucw=) 3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: km2r5J8TWUHVX9z/U+fk8L55UNojVaJGrvCuztNnNQw=) 4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: HbHv4qWw7Bi3HD3DwV6S1QogbBnD5z6n90sQhMS982k=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: tJgnvhjfqszWIbz7KiTI8tGxv6b+hvyNX6FX0CZAyQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: May 4 22:07:50 2024 GMT Not After : May 11 22:07:50 2024 GMT Subject: CN=6636b1b6-9a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:6a:d7:e1:0a:eb:e9:09:d2:ab:ab:90:f7: ad:64:4d:b4:84:37:6d:10:96:55:63:86:f5:53:89: 28:04:7d:11:04:3f:4e:19:2a:af:b6:76:74:0a:b8: ba:2a:31:31:7f:ee:b3:bf:3c:6a:1c:c7:70:05:74: 7d:54:3c:31:30:5b:0e:bf:6c:ad:13:a4:15:66:e8: 7c:a3:02:70:b7:22:01:21:f6:31:84:b0:13:62:e3: 7c:27:b3:bb:dd:01:0e:7b:46:2d:49:51:13:49:f5: 44:79:59:ca:9c:39:52:f4:20:4f:84:ab:28:ce:33: 98:be:4d:09:bb:5f:30:20:8f:ba:fb:c7:c2:2f:03: 39:a8:d9:45:b1:44:4e:50:3c:44:53:5a:9a:7e:99: ee:36:42:bc:4c:09:e9:b9:cb:2f:d2:af:b4:f8:b2: 7f:99:40:ce:31:01:40:c4:3d:4f:d2:74:ff:c7:7d: ba:a7:52:21:c6:09:fa:30:97:b5:ea:a7:4b:03:25: ef:7d:98:bb:70:23:c3:fa:f2:50:d8:f3:e0:dc:1e: 0d:4f:20:e9:53:92:9c:b1:3f:c7:51:23:66:00:db: fc:99:a0:e8:b5:0b:79:d4:43:cb:9c:08:de:b5:9a: f9:d3:d9:68:f1:ce:bd:c7:ea:b8:ad:55:6f:b9:11: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:BB:E9:A9:8B:85:91:6D:0B:AB:A6:EA:BB:33:85:18:9C:05:12 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:81:a3:45:ad:52:ea:46:45:f3:6b:6a:b5:e3:5a:b9:4b: a1:61:3b:33:71:7e:44:20:c0:ed:17:22:e4:b8:19:80:8a:2a: 55:f7:ff:f1:7d:7d:56:be:47:d0:0c:08:6a:01:06:97:af:58: 0f:60:2b:9a:b8:60:e7:91:28:84:bf:e6:cb:9b:37:fc:93:26: ec:c1:a5:85:3a:16:08:47:80:94:a7:ae:1d:11:ea:8f:ae:82: 99:4f:52:54:8d:db:95:aa:cb:3c:fa:a9:ed:1e:26:7f:05:45: f5:80:e1:4e:79:3e:a8:86:14:d6:12:ad:9f:ae:c0:f8:c6:ab: a6:01:b1:ae:b7:12:9f:b6:4b:dd:3e:4a:bb:39:38:26:a3:0d: d5:b2:40:cc:ba:8f:45:a1:37:82:47:b2:7f:d9:cc:43:87:90: 54:75:25:b2:61:16:ff:1b:b1:cf:79:8a:7c:8e:ed:eb:e7:68: ad:70:a5:d1:6f:86:89:84:20:32:e1:73:5a:61:a0:20:85:6c: 93:15:81:46:bc:3f:e8:e5:aa:69:bc:44:c9:d8:de:b0:8a:81: e0:96:ba:f8:9a:31:fc:b2:47:a9:b5:48:db:6e:d8:d3:5e:d2: 48:67:0f:57:23:fc:2e:fe:80:68:9b:04:f1:d5:f4:d4:52:76: da:24:30:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjQwNTA0MjIwNzUwWhcNMjQwNTExMjIwNzUwWjAYMRYwFAYD VQQDEw02NjM2YjFiNi05YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcBq1+EK6+kJ0qurkPetZE20hDdtEJZVY4b1U4koBH0RBD9OGSqvtnZ0Cri6 KjExf+6zvzxqHMdwBXR9VDwxMFsOv2ytE6QVZuh8owJwtyIBIfYxhLATYuN8J7O7 3QEOe0YtSVETSfVEeVnKnDlS9CBPhKsozjOYvk0Ju18wII+6+8fCLwM5qNlFsURO UDxEU1qafpnuNkK8TAnpucsv0q+0+LJ/mUDOMQFAxD1P0nT/x326p1Ihxgn6MJe1 6qdLAyXvfZi7cCPD+vJQ2PPg3B4NTyDpU5KcsT/HUSNmANv8maDotQt51EPLnAje tZr509lo8c69x+q4rVVvuRFNAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6Su+mp i4WRbQurpuq7M4UYnAUSMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmoGjRa1S6kZF82tqteNauUuhYTszcX5EIMDtFyLkuBmAiipV9//x fX1WvkfQDAhqAQaXr1gPYCuauGDnkSiEv+bLmzf8kybswaWFOhYIR4CUp64dEeqP roKZT1JUjduVqss8+qntHiZ/BUX1gOFOeT6ohhTWEq2frsD4xqumAbGutxKftkvd Pkq7OTgmow3VskDMuo9FoTeCR7J/2cxDh5BUdSWyYRb/G7HPeYp8ju3r52itcKXR b4aJhCAy4XNaYaAghWyTFYFGvD/o5appvETJ2N6wioHglrr4mjH8skeptUjbbtjT XtJIZw9XI/wu/oBomwTx1fTUUnbaJDCO -----END CERTIFICATE-----Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org