$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: wYyHRyTm7ramkvFxYVEtk7IBI1Hs0CAsGxHrxcncvjw= Subject key identifier: E6:BB:66:ED:14:CB:25:F1:2B:BE:31:20:C6:13:87:C4:36:90:A6:EA Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 02B5 Signing time: Sat 01 Jun 2024 04:49:08 +0000 Manifest this update: Sat 01 Jun 2024 04:49:07 +0000 Manifest next update: Sat 08 Jun 2024 04:49:07 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: stFJDwEsd+L8kNNJdN7L5G13SNLh8OfoToVmfBAvbdY=) 2: AAFD824CBCFA11EDAD328D3AC4F9AE02.roa (hash: bAefQD+i2DUr5zX++CqMyYJLlTVBnnX0/82YDtmfqOM=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: oDrhzyW7lkRnV2JdbCV+XPs93kiucplQyCNzYwjrpJw=) 5: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=) 6: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: pU1vPEKHKX3MOYQLTe0KME/abi6a4AV9Hhdy4Bzh3YM=) 7: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Jun 1 04:49:07 2024 GMT Not After : Jun 8 04:49:07 2024 GMT Subject: CN=665aa844-db6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:fc:c5:07:c0:c4:41:e6:90:e2:de:e1:ae: 7a:ff:08:4c:17:f5:64:9b:2d:62:4e:d6:5d:e4:43: ea:cf:25:ec:bf:fb:a7:4b:5e:7a:36:95:03:bf:3b: 5c:12:44:53:b9:29:ea:8a:9f:4a:74:a9:e7:7b:2b: cf:c9:ff:5e:6b:ff:e5:2a:0e:94:bc:f1:a3:e2:d2: 76:1a:19:30:82:3d:29:5d:2c:7b:1d:52:5f:89:d3: 60:a8:a4:11:af:f1:a0:35:a4:1d:72:ba:cb:aa:1c: 9d:cc:4a:5c:a4:86:fe:58:6b:89:5e:80:53:18:dc: 58:84:f2:b2:50:57:a2:15:80:8e:65:bd:eb:10:4d: 5e:4a:9d:50:7c:3d:07:c9:11:c0:61:92:27:b2:9c: 0c:36:13:4a:2f:eb:12:ba:f5:ba:31:ab:c3:c8:6b: fc:1d:00:64:e7:c7:f7:32:a4:37:fb:19:49:31:0a: c0:69:a1:23:7f:8e:c7:d3:1e:01:63:f7:2b:34:0c: c0:64:8c:7e:c4:06:41:49:a9:39:75:be:31:4c:d0: 36:bc:71:77:2a:6e:10:92:00:4b:44:73:d3:1c:d5: 5c:d5:78:45:c1:a7:f1:42:b3:3f:e9:3b:66:27:5f: d9:d1:08:cc:dc:cc:63:bf:b3:07:e8:f8:5a:77:5e: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BB:66:ED:14:CB:25:F1:2B:BE:31:20:C6:13:87:C4:36:90:A6:EA X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:bb:31:c2:fb:10:3b:ed:22:bc:2c:99:36:17:a6:83:c3: 1b:c7:32:d3:8d:21:3c:c2:f5:d4:a4:25:49:37:92:8f:f8:c9: 4f:16:82:37:be:6d:cc:64:bf:c9:82:b3:3a:86:a2:be:2c:6c: 6b:d1:9b:1c:1b:a1:eb:77:1c:39:fd:72:b5:bb:ed:2b:52:fb: 86:03:b9:36:3b:ee:6b:97:fb:55:3a:7a:3c:58:47:4b:43:d3: 62:bd:20:24:db:48:e8:4f:46:a4:c4:ea:ce:80:72:24:17:80: 4c:8d:62:3b:03:c7:b5:5b:e5:8d:47:62:bc:46:2c:40:24:16: 8d:4c:5e:e6:25:20:0b:5a:c1:53:b2:34:0b:6c:d0:a0:9a:d1: 7a:e6:14:f7:b8:9c:da:fb:89:e3:c4:f8:0e:1a:5b:e3:44:d2: 3c:d5:e4:9b:49:02:00:a6:57:05:cc:7d:35:d5:58:9e:fd:a0: 1d:f0:55:b0:6c:04:e0:d7:a7:4a:8d:ab:a7:f3:2e:59:37:50: 73:e5:f2:61:d4:e5:44:eb:21:a6:b3:aa:fb:27:e9:d2:4a:df: 88:e7:01:a1:92:62:fa:9b:c1:84:a6:72:81:54:18:1e:d2:71: 2b:ab:8d:16:71:c9:7f:f9:dc:d3:5e:49:3f:16:da:90:1f:70: 7d:cd:84:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjQwNjAxMDQ0OTA3WhcNMjQwNjA4MDQ0OTA3WjAYMRYwFAYD VQQDEw02NjVhYTg0NC1kYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssT8xQfAxEHmkOLe4a56/whMF/Vkmy1iTtZd5EPqzyXsv/unS156NpUDvztc EkRTuSnqip9KdKnneyvPyf9ea//lKg6UvPGj4tJ2Ghkwgj0pXSx7HVJfidNgqKQR r/GgNaQdcrrLqhydzEpcpIb+WGuJXoBTGNxYhPKyUFeiFYCOZb3rEE1eSp1QfD0H yRHAYZInspwMNhNKL+sSuvW6MavDyGv8HQBk58f3MqQ3+xlJMQrAaaEjf47H0x4B Y/crNAzAZIx+xAZBSak5db4xTNA2vHF3Km4QkgBLRHPTHNVc1XhFwafxQrM/6Ttm J1/Z0QjM3Mxjv7MH6Phad142fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOa7Zu0U yyXxK74xIMYTh8Q2kKbqMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWSLsxwvsQO+0ivCyZNhemg8MbxzLTjSE8wvXUpCVJN5KP+MlPFoI3 vm3MZL/JgrM6hqK+LGxr0ZscG6Hrdxw5/XK1u+0rUvuGA7k2O+5rl/tVOno8WEdL Q9NivSAk20joT0akxOrOgHIkF4BMjWI7A8e1W+WNR2K8RixAJBaNTF7mJSALWsFT sjQLbNCgmtF65hT3uJza+4njxPgOGlvjRNI81eSbSQIAplcFzH011Vie/aAd8FWw bATg16dKjaun8y5ZN1Bz5fJh1OVE6yGms6r7J+nSSt+I5wGhkmL6m8GEpnKBVBge 0nErq40Wccl/+dzTXkk/FtqQH3B9zYRB -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:12 2024 by rpki-client on console-ams.rpki-client.org