$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: Rfze6uChdi6g2THCJsEBkGMzlRTplmA8IBEiI6GcaxQ= Subject key identifier: CF:8A:49:76:8C:40:75:C5:9E:E8:C1:A5:9F:93:5B:9F:A0:D0:6A:96 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0CE2 Signing time: Sat 04 May 2024 18:56:30 +0000 Manifest this update: Sat 04 May 2024 18:56:30 +0000 Manifest next update: Sat 11 May 2024 18:56:30 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: g/sXyKkXyzJ7F98EvxwjPxS9ckabI9zwcUaLvCntc9w=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: +aIJztic4JbrKlc9xRRwNT7mIqNibRE3refWU8LEceQ=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: 3WC0Myyrt/lI4+b8R8F5+KcYn/adMapUqVAAHow9r+4=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: qSVxFIsVr+S/G6SoyCOtDObNV5qE0GWQ+oHE5K9CkD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: May 4 18:56:30 2024 GMT Not After : May 11 18:56:30 2024 GMT Subject: CN=663684de-e989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:ef:04:af:59:7d:d5:b5:46:ed:e6:71:98: 29:c1:a9:d7:34:8a:42:a9:f0:bf:d8:bd:fe:08:8c: 63:43:3c:32:ab:8e:4a:67:48:0d:9b:fc:52:4b:37: ef:9c:fa:92:66:0a:bc:f9:08:33:d2:28:eb:3e:02: b9:30:a8:c3:69:03:c2:94:61:c4:28:f1:fd:71:d1: fd:2a:51:16:a1:65:88:86:2a:07:eb:8a:b1:82:0e: 4b:9a:7e:bb:1d:e1:c6:00:29:3d:47:44:de:a4:ac: 74:78:69:69:48:8b:21:8b:c0:ce:8f:27:3c:dc:7b: 26:0f:93:a8:66:05:da:d2:8d:e6:27:bb:f2:1f:e5: b1:a5:ff:8d:0f:61:64:cb:d8:32:8c:dc:cb:86:a9: 3b:f0:c9:a1:57:32:74:bc:15:d6:11:f1:24:7f:36: 0b:c4:02:3e:f4:e0:83:15:bb:71:fe:3b:2a:93:d2: c4:6e:b4:28:ce:e4:b1:3c:54:24:22:25:4d:c9:2c: e8:f4:03:d3:40:fc:30:40:d3:3d:1e:38:0d:c1:a9: 02:b3:78:a0:89:46:0d:7e:30:05:81:8b:41:75:ff: a3:e1:98:a8:49:1b:41:04:7a:9c:1e:7a:c5:47:9c: 25:fc:5c:7a:96:63:ae:9d:08:c5:79:04:bd:fb:5d: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:49:76:8C:40:75:C5:9E:E8:C1:A5:9F:93:5B:9F:A0:D0:6A:96 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ea:6b:a2:9c:e1:f2:3d:14:4f:c4:20:77:5d:3e:ef:36:c1: 49:70:6c:9f:4a:de:38:b9:70:6d:ed:b4:c0:5e:60:07:bc:cf: d5:04:46:50:fe:e1:a8:f8:b1:cc:cd:ff:7f:77:44:45:b8:33: 84:a4:68:94:5f:1e:0b:c6:16:06:5d:c8:26:40:8f:33:77:d3: a1:85:02:c3:95:77:8e:87:a7:b1:ee:0d:d5:4c:69:66:c6:3d: 54:ad:6e:7b:8d:86:c9:2e:57:b3:d9:b5:57:20:73:e5:dd:b6: b8:ad:01:b2:38:f5:5d:d7:95:1c:da:70:79:43:95:d9:1d:f8: 38:eb:e4:cc:f4:8b:c3:e0:a2:4c:ff:7e:fe:44:15:54:82:53: 7d:11:06:49:8b:a2:88:6e:64:8c:23:8f:dd:76:7d:84:d1:13: bc:c8:65:f7:28:e3:24:e2:7a:d5:e8:5f:b3:02:61:0d:d5:c6: b8:a4:a8:89:04:26:44:fc:35:8c:c5:de:9d:69:d3:e0:35:91: 60:0e:33:7e:f5:cf:fa:c2:86:46:61:f2:b4:93:d1:8a:4d:c0: 29:1f:02:a1:97:cc:51:bf:12:c9:6f:72:58:1b:e0:77:e8:41: 82:98:48:33:f1:0d:f3:f3:f1:c9:14:22:da:92:bf:22:84:fe: 86:f4:ef:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjQwNTA0MTg1NjMwWhcNMjQwNTExMTg1NjMwWjAYMRYwFAYD VQQDEw02NjM2ODRkZS1lOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl/vBK9ZfdW1Ru3mcZgpwanXNIpCqfC/2L3+CIxjQzwyq45KZ0gNm/xSSzfv nPqSZgq8+Qgz0ijrPgK5MKjDaQPClGHEKPH9cdH9KlEWoWWIhioH64qxgg5Lmn67 HeHGACk9R0TepKx0eGlpSIshi8DOjyc83HsmD5OoZgXa0o3mJ7vyH+Wxpf+ND2Fk y9gyjNzLhqk78MmhVzJ0vBXWEfEkfzYLxAI+9OCDFbtx/jsqk9LEbrQozuSxPFQk IiVNySzo9APTQPwwQNM9HjgNwakCs3igiUYNfjAFgYtBdf+j4ZioSRtBBHqcHnrF R5wl/Fx6lmOunQjFeQS9+11EOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+KSXaM QHXFnujBpZ+TW5+g0GqWMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG6muinOHyPRRPxCB3XT7vNsFJcGyfSt44uXBt7bTAXmAHvM/VBEZQ /uGo+LHMzf9/d0RFuDOEpGiUXx4LxhYGXcgmQI8zd9OhhQLDlXeOh6ex7g3VTGlm xj1UrW57jYbJLlez2bVXIHPl3ba4rQGyOPVd15Uc2nB5Q5XZHfg46+TM9IvD4KJM /37+RBVUglN9EQZJi6KIbmSMI4/ddn2E0RO8yGX3KOMk4nrV6F+zAmEN1ca4pKiJ BCZE/DWMxd6dadPgNZFgDjN+9c/6woZGYfK0k9GKTcApHwKhl8xRvxLJb3JYG+B3 6EGCmEgz8Q3z8/HJFCLakr8ihP6G9O/C -----END CERTIFICATE-----Generated at Sat May 4 20:37:06 2024 by rpki-client on console-fra.rpki-client.org