$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: aat/IcYAT84AgtUBbf0pzBo07BT3SSnFhME8/lNBymY= Subject key identifier: 64:6A:99:7E:9E:EE:A4:43:CD:02:D6:41:10:08:3F:EA:03:AF:A4:B8 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0884 Signing time: Sat 18 May 2024 21:35:26 +0000 Manifest this update: Sat 18 May 2024 21:35:26 +0000 Manifest next update: Sat 25 May 2024 21:35:26 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: KZg682j/c4ySsp0PYJchrvdxRQio8Ukxxevrd1PgKFo=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: PNSS4qHOV6MWCSZPIT8uJB3LDv9E0VejUgWz3gabi4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: May 18 21:35:26 2024 GMT Not After : May 25 21:35:26 2024 GMT Subject: CN=66491f1e-b0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:aa:4a:e4:2e:90:57:0f:aa:a3:66:2f:62:2a: 0f:57:91:4a:11:2e:f9:8d:85:b0:6e:dc:66:0e:1e: bb:7e:e4:1c:84:71:36:ad:8a:90:44:40:ab:3a:31: 79:ad:c9:24:5b:aa:f4:94:37:9a:94:89:79:1e:c9: 02:a9:50:0a:ac:aa:c6:d1:aa:08:6a:a8:6f:28:d8: e1:ed:e0:89:77:0d:76:ea:1b:f0:20:42:22:97:be: bf:67:11:80:92:10:12:a9:93:5f:2c:f3:d9:03:dc: d4:ca:d2:e1:2c:fd:df:cc:5c:e6:72:6b:5a:a9:fe: 44:04:f6:1c:f2:3c:f1:a6:00:9e:d1:3a:52:37:79: 4c:28:d2:bc:ee:d2:51:c3:2b:01:dc:b2:1c:c0:e9: 0e:dc:21:82:42:c9:e5:29:b5:9a:a3:bf:64:b7:2b: 4d:1e:94:5b:b7:0e:31:55:fd:2d:5a:e8:40:fe:91: 3f:1c:ea:dd:45:de:94:f4:65:e7:65:84:c3:b5:f8: e3:f9:10:62:62:8f:6d:e2:0d:81:a8:af:09:20:24: 14:7b:77:7d:0c:8d:f9:b3:0d:dc:7e:08:bf:51:bc: 73:08:42:b5:86:34:5e:3d:23:d6:97:4b:a1:d9:b9: 61:8e:44:33:2e:5c:39:e9:14:fb:9d:81:e7:7f:8f: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6A:99:7E:9E:EE:A4:43:CD:02:D6:41:10:08:3F:EA:03:AF:A4:B8 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0e:93:89:9e:3b:7a:c2:87:6a:7f:99:bb:57:e6:fb:7c:eb: 42:81:76:1e:08:71:3b:48:3d:49:56:a1:d0:a3:58:39:fc:48: 18:9b:50:de:75:c5:d4:63:c5:84:e5:31:6e:56:e9:4c:b2:5d: 52:35:24:f3:e8:2b:dc:e3:ee:7a:e3:e3:b5:c2:ca:5d:c5:3e: 03:40:83:6f:a6:81:22:1e:10:89:95:5b:8a:34:96:ab:ca:c2: 60:cb:9c:11:06:f2:df:d9:aa:5c:93:49:0e:94:9b:0f:7e:94: 2f:30:3d:80:cc:45:81:ee:ac:b6:c2:88:6b:40:4f:03:ca:7c: fd:3f:b2:bd:70:42:34:c9:d5:4b:f6:10:7f:36:2d:72:44:2d: bc:81:00:e6:55:8b:81:e4:15:98:f1:e3:3f:66:8a:c2:b2:84: c0:8e:75:5d:12:d6:fd:86:58:7c:4b:d1:2d:f9:f7:19:bd:8b: 4b:72:83:e6:68:22:4b:ec:18:bf:d5:ad:fc:0e:f2:27:83:c5: 17:ce:16:f1:f1:c0:4d:38:36:98:76:84:f4:ed:8a:51:84:ad: 53:c0:73:7f:58:25:1d:93:d3:e5:d1:02:c4:c5:04:38:a4:63: 70:5d:f1:3b:ab:d9:f1:43:b0:16:e9:80:73:90:23:d1:c3:ba: 46:4f:d1:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjQwNTE4MjEzNTI2WhcNMjQwNTI1MjEzNTI2WjAYMRYwFAYD VQQDEw02NjQ5MWYxZS1iMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6apK5C6QVw+qo2YvYioPV5FKES75jYWwbtxmDh67fuQchHE2rYqQRECrOjF5 rckkW6r0lDealIl5HskCqVAKrKrG0aoIaqhvKNjh7eCJdw126hvwIEIil76/ZxGA khASqZNfLPPZA9zUytLhLP3fzFzmcmtaqf5EBPYc8jzxpgCe0TpSN3lMKNK87tJR wysB3LIcwOkO3CGCQsnlKbWao79ktytNHpRbtw4xVf0tWuhA/pE/HOrdRd6U9GXn ZYTDtfjj+RBiYo9t4g2BqK8JICQUe3d9DI35sw3cfgi/UbxzCEK1hjRePSPWl0uh 2blhjkQzLlw56RT7nYHnf49BqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRqmX6e 7qRDzQLWQRAIP+oDr6S4MB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8DpOJnjt6wodqf5m7V+b7fOtCgXYeCHE7SD1JVqHQo1g5/EgYm1De dcXUY8WE5TFuVulMsl1SNSTz6Cvc4+564+O1wspdxT4DQINvpoEiHhCJlVuKNJar ysJgy5wRBvLf2apck0kOlJsPfpQvMD2AzEWB7qy2wohrQE8Dynz9P7K9cEI0ydVL 9hB/Ni1yRC28gQDmVYuB5BWY8eM/ZorCsoTAjnVdEtb9hlh8S9Et+fcZvYtLcoPm aCJL7Bi/1a38DvIng8UXzhbx8cBNODaYdoT07YpRhK1TwHN/WCUdk9Pl0QLExQQ4 pGNwXfE7q9nxQ7AW6YBzkCPRw7pGT9GB -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org