$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: jzxd0yiYJbbedFjOB38Xi3yN6nRmw6otuE9VGlyV1Dg= Subject key identifier: 7F:F2:F1:26:5C:41:E3:7F:A9:2E:95:BA:0A:E2:58:D2:4F:EE:22:13 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 41 Signing time: Sat 01 Jun 2024 09:38:17 +0000 Manifest this update: Sat 01 Jun 2024 09:38:17 +0000 Manifest next update: Sat 08 Jun 2024 09:38:17 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: sG2cBb7IzGNrNMOU+jW/Po6cn6Rrckz2W9WHqaVA9/0=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: qTZhpHJCRQ13DNUyXqIoDQjBjuUIgvaF3XVdmuG/v/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Jun 1 09:38:17 2024 GMT Not After : Jun 8 09:38:17 2024 GMT Subject: CN=665aec09-285f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:bc:b1:1c:ce:c3:4b:d6:e2:bf:f1:84:76: 45:0c:87:64:a9:ae:2a:bb:d7:23:a6:f0:7c:39:44: 14:f1:25:ab:50:05:bc:7d:30:e1:f1:a1:0a:8d:ed: e8:56:3c:00:1c:8b:06:84:22:de:ec:5a:dd:d4:19: bf:82:1b:5f:e9:ce:b2:27:d3:25:34:57:72:74:aa: a2:fd:4a:f5:e5:4a:9a:f2:5e:7c:7e:e4:51:4b:16: 34:f0:3d:68:d0:31:4e:88:0d:6a:e6:08:39:7d:9a: 30:e9:47:4d:c0:e3:93:49:50:0a:3c:bf:15:56:11: b0:e8:b0:ae:d8:b7:04:a1:62:39:70:ca:f4:e5:61: 13:92:80:a2:eb:d0:26:92:be:29:25:b7:2b:b6:df: da:31:71:ca:49:c3:f6:64:64:59:47:cd:76:53:f9: 11:af:c9:71:c1:af:c4:2d:b1:f9:21:1f:8b:06:ba: 80:bb:d6:fa:e6:c1:0b:cf:72:8e:9c:19:b7:ea:3f: f7:6e:56:71:b6:ea:e9:34:55:cc:76:09:de:96:a7: 22:a8:b5:aa:3a:32:ec:6c:98:48:b7:05:74:6e:c8: 17:1b:80:1e:ef:2c:50:73:dc:af:14:aa:ee:94:54: 71:9d:91:db:d3:8e:69:68:3c:26:7a:83:2a:d0:02: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:F1:26:5C:41:E3:7F:A9:2E:95:BA:0A:E2:58:D2:4F:EE:22:13 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:78:f7:63:d1:23:70:b8:7c:5c:1f:b7:2a:c4:1d:0c:63:ec: 97:18:66:c4:9e:5f:a6:6f:90:9f:9b:8e:16:86:44:20:de:96: 3b:42:28:64:74:f5:6b:a1:aa:50:c6:fb:b6:0c:f4:37:4c:0a: b8:b0:08:89:0d:59:ad:92:f9:2e:26:e5:52:be:83:6c:ad:d8: 34:0a:cc:19:9d:cc:eb:12:a3:2a:0b:73:7b:bd:f6:78:a2:c6: 83:ab:a0:08:58:3e:0d:13:f4:3f:cd:47:e6:d8:99:b2:74:89: f4:36:e9:5a:7c:cb:5b:23:9b:cd:80:aa:dc:fc:a3:d1:ae:d7: f6:17:d4:ab:2b:43:96:05:80:51:b0:62:a8:34:07:67:8c:e9: 02:3d:0b:b5:82:2d:23:9d:66:97:94:f8:3c:b4:fe:5f:ff:bb: 21:6e:95:ba:36:b3:35:89:1b:e5:85:3d:a0:82:f4:0b:8a:ec: fc:7e:58:b1:51:c6:ed:e2:8b:56:d0:47:28:4f:70:f4:14:69: 96:40:4e:61:d2:66:24:ba:6d:01:08:d8:a5:09:90:e2:9c:22: a0:1c:73:bf:93:09:80:14:a0:a5:ee:12:b7:0c:7d:bb:64:e2: 3b:c7:28:27:7f:ba:90:6c:47:a7:5e:31:84:50:23:38:a5:33: 85:4c:16:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0U4RDExMC8GA1UEBRMoRkNFMDMwRUIzMDIwM0E1MTBDREJDRjlDN0MzQTQzMDAz QkJERkE2MjAeFw0yNDA2MDEwOTM4MTdaFw0yNDA2MDgwOTM4MTdaMBgxFjAUBgNV BAMTDTY2NWFlYzA5LTI4NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH5ryxHM7DS9biv/GEdkUMh2Spriq71yOm8Hw5RBTxJatQBbx9MOHxoQqN7ehW PAAciwaEIt7sWt3UGb+CG1/pzrIn0yU0V3J0qqL9SvXlSpryXnx+5FFLFjTwPWjQ MU6IDWrmCDl9mjDpR03A45NJUAo8vxVWEbDosK7YtwShYjlwyvTlYROSgKLr0CaS vikltyu239oxccpJw/ZkZFlHzXZT+RGvyXHBr8QtsfkhH4sGuoC71vrmwQvPco6c GbfqP/duVnG26uk0Vcx2Cd6WpyKotao6MuxsmEi3BXRuyBcbgB7vLFBz3K8Uqu6U VHGdkdvTjmloPCZ6gyrQAmxxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf/LxJlxB 43+pLpW6CuJY0k/uIhMwHwYDVR0jBBgwFoAU/OAw6zAgOlEM28+cfDpDADu9+mIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RThELzY0QjE2QTk4QkY0 NjExRUVCMUIzRDc2NEM0RjlBRTAyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX09BdzZ6QWdPbEVNMjgtY2ZEcERBRHU5LW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RThELzY0QjE2QTk4QkY0NjExRUVCMUIzRDc2NEM0RjlBRTAyL19PQXc2ekFnT2xF TTI4LWNmRHBEQUR1OS1tSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGN492PRI3C4fFwftyrEHQxj7JcYZsSeX6ZvkJ+bjhaGRCDeljtCKGR0 9WuhqlDG+7YM9DdMCriwCIkNWa2S+S4m5VK+g2yt2DQKzBmdzOsSoyoLc3u99nii xoOroAhYPg0T9D/NR+bYmbJ0ifQ26Vp8y1sjm82Aqtz8o9Gu1/YX1KsrQ5YFgFGw Yqg0B2eM6QI9C7WCLSOdZpeU+Dy0/l//uyFulbo2szWJG+WFPaCC9AuK7Px+WLFR xu3ii1bQRyhPcPQUaZZATmHSZiS6bQEI2KUJkOKcIqAcc7+TCYAUoKXuErcMfbtk 4jvHKCd/upBsR6deMYRQIzilM4VMFlY= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:26 2024 by rpki-client on console-fra.rpki-client.org