$ rpki-client -vvf rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft File: oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft (raw, json) Hash identifier: rR/0ml1Dl27F6QpxNDPkVIIl1sjrnV5QYjzuvF0P29o= Subject key identifier: D7:D8:54:B8:BE:A6:87:EA:7C:D0:D0:73:C0:9C:5E:83:60:61:AA:42 Authority key identifier: A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44 Certificate issuer: /CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft Manifest number: 0B2C Signing time: Sat 18 May 2024 19:50:27 +0000 Manifest this update: Sat 18 May 2024 19:50:27 +0000 Manifest next update: Sat 25 May 2024 19:50:27 +0000 Files and hashes: 1: oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl (hash: 5XcQr3MpQ2dQDlBPxKmUrtynd1zdA/sNUeMm43tgU/U=) 2: 0D00266818BA11EABAA29187C4F9AE02.roa (hash: 2ekbhQ9plvWKVtSxuNUxlcaY6szxwsQf8yVr8FNYsNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544 Validity Not Before: May 18 19:50:27 2024 GMT Not After : May 25 19:50:27 2024 GMT Subject: CN=66490683-1b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:ea:65:48:bc:e0:99:f9:65:bc:5c:00:dd: 5c:f7:6e:6d:67:a9:a4:54:0e:aa:62:07:62:fe:38: 96:55:e9:a9:6b:b9:de:c7:e7:81:0a:5f:c4:18:35: 9b:16:f0:e9:5a:24:57:fa:35:60:e7:81:29:f3:f9: c3:ba:ed:ab:0d:cc:d8:54:cd:d4:1f:f9:3d:28:cc: 73:49:db:36:85:10:aa:fd:b1:c5:53:12:a9:c1:a3: 28:f6:e7:3d:f5:6f:38:24:17:31:a7:9d:9c:ad:34: b2:a0:85:e3:d8:19:e1:bc:d8:6b:20:b1:e9:c3:b1: 5c:45:6b:85:03:ea:2b:d8:ba:3d:90:f5:a5:ef:62: 06:96:03:47:6a:c9:a4:cf:1f:48:41:32:91:50:73: 06:d1:70:ca:a8:24:a1:2f:fa:03:ac:92:8b:00:04: 1d:34:e5:bb:49:00:6e:b1:e9:c9:34:ea:b5:0f:c1: c0:8c:5c:22:6f:03:e5:b5:b0:ee:b9:aa:80:77:59: 78:82:87:a4:82:8b:9f:ce:d8:9e:48:50:0a:17:21: f1:7a:ad:a5:0e:83:d3:39:34:ea:96:6d:19:35:30: bd:ad:9e:72:65:91:36:a6:c5:8b:48:fd:20:11:e0: 4c:bb:dc:f4:7a:93:5f:5d:14:88:a6:7e:b4:e5:40: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:54:B8:BE:A6:87:EA:7C:D0:D0:73:C0:9C:5E:83:60:61:AA:42 X509v3 Authority Key Identifier: keyid:A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:62:95:f5:73:8f:6a:92:60:93:31:8c:f8:1a:1a:b3:53:9c: 22:d7:eb:f4:65:3f:e6:35:ff:20:11:9a:f8:81:53:7a:f2:9b: a5:02:dd:e8:89:8b:0f:10:91:fb:e0:a1:80:99:41:8b:34:2b: c2:40:6a:5d:5d:7b:84:26:f7:c8:54:08:a7:ba:10:f2:d7:06: 46:db:0b:01:b5:a3:3d:83:67:61:42:89:49:45:be:ee:1d:10: a2:59:af:65:73:5d:ca:46:ab:b5:53:9c:81:29:3f:7c:32:60: cc:10:2e:dc:e1:e7:f7:05:b3:85:ab:f9:8a:e6:1f:af:a2:15: ea:ff:66:5d:37:ca:a9:a9:59:33:e7:10:55:f8:c0:d9:6f:d4: f4:4d:9a:51:03:96:97:8e:17:d3:5d:f4:10:50:58:f8:dc:b7: c9:1a:18:36:81:4f:4c:22:6c:ca:c4:9f:45:c1:ce:03:77:ce: 5a:1e:99:d3:8c:e1:02:ad:ef:99:fa:df:66:ce:46:aa:b0:43: 23:68:bc:df:a6:2d:f4:fe:e0:2a:20:16:df:4f:10:f1:0f:a5: 47:6b:48:a8:d1:6c:00:e1:86:76:f7:52:91:60:c3:54:b1:f6: e3:e7:01:97:8b:1d:ef:48:a9:fc:d5:ad:c6:1e:e4:9c:97:f0: 69:c9:10:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUwOTIxMTAvBgNVBAUTKEExODEyNUQxRDNCRTRFNjBDRkQ5QzgyMUZDRjVBQ0NF NEVEQTY1NDQwHhcNMjQwNTE4MTk1MDI3WhcNMjQwNTI1MTk1MDI3WjAYMRYwFAYD VQQDEw02NjQ5MDY4My0xYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC7qZUi84Jn5ZbxcAN1c925tZ6mkVA6qYgdi/jiWVempa7nex+eBCl/EGDWb FvDpWiRX+jVg54Ep8/nDuu2rDczYVM3UH/k9KMxzSds2hRCq/bHFUxKpwaMo9uc9 9W84JBcxp52crTSyoIXj2BnhvNhrILHpw7FcRWuFA+or2Lo9kPWl72IGlgNHasmk zx9IQTKRUHMG0XDKqCShL/oDrJKLAAQdNOW7SQBusenJNOq1D8HAjFwibwPltbDu uaqAd1l4goekgoufztieSFAKFyHxeq2lDoPTOTTqlm0ZNTC9rZ5yZZE2psWLSP0g EeBMu9z0epNfXRSIpn605UBDXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfYVLi+ pofqfNDQc8CcXoNgYapCMB8GA1UdIwQYMBaAFKGBJdHTvk5gz9nIIfz1rM5O2mVE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTA5Mi9ERjIyQjRGQTE4 QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRtRFAyY2doX1BXc3prN2Fa VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZRWwwZE8tVG1EUDJjZ2hfUFdzems3YVpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTA5Mi9ERjIyQjRGQTE4QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRt RFAyY2doX1BXc3prN2FaVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByYpX1c49qkmCTMYz4GhqzU5wi1+v0ZT/mNf8gEZr4gVN68pulAt3o iYsPEJH74KGAmUGLNCvCQGpdXXuEJvfIVAinuhDy1wZG2wsBtaM9g2dhQolJRb7u HRCiWa9lc13KRqu1U5yBKT98MmDMEC7c4ef3BbOFq/mK5h+vohXq/2ZdN8qpqVkz 5xBV+MDZb9T0TZpRA5aXjhfTXfQQUFj43LfJGhg2gU9MImzKxJ9Fwc4Dd85aHpnT jOECre+Z+t9mzkaqsEMjaLzfpi30/uAqIBbfTxDxD6VHa0io0WwA4YZ291KRYMNU sfbj5wGXix3vSKn81a3GHuScl/BpyRBu -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org