$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: MEjVB+nPOAiZLzZod5aICtBigvgFrYKDBnZa4y0Ongg= Subject key identifier: E9:E0:35:EB:2F:AB:E9:0E:E0:8A:A4:83:9C:F7:B4:05:76:80:F0:29 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0AF9 Signing time: Sat 18 May 2024 19:58:24 +0000 Manifest this update: Sat 18 May 2024 19:58:23 +0000 Manifest next update: Sat 25 May 2024 19:58:23 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: GJ9LS4DRtPv40T/Mup6GjVccs1c9x/kvkBVQwcNh+pQ=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: CB5IE4ksCyHI1WtHUE34hn1yLuHmZuwQKKrDnjirwUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: May 18 19:58:23 2024 GMT Not After : May 25 19:58:23 2024 GMT Subject: CN=66490860-899e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:c2:d7:d8:a6:27:c7:4c:3f:0a:b5:33:0b: 15:a8:cc:47:d4:af:6f:a4:ec:65:8d:af:db:ed:e7: a0:2b:88:75:3b:2b:ff:c6:3d:c3:df:7d:7e:0b:ef: 5b:a0:03:89:4a:4d:dd:c4:af:11:cc:8a:83:e2:72: 34:15:de:83:6b:ac:d5:ff:58:80:d5:10:fa:0e:27: 3d:bd:e6:17:0e:74:5c:31:6f:9d:ea:c6:21:1a:7c: 83:e2:dc:3c:b4:02:9a:61:80:2b:c1:2b:de:92:bb: 90:5c:7f:83:98:81:1d:55:22:ec:82:03:ed:d8:3c: ed:30:00:c6:e9:84:e0:35:b5:c9:7e:55:3b:5a:64: 0b:78:69:db:3e:e9:c6:86:2f:e3:82:55:48:75:e3: 8e:39:e1:95:e7:be:8b:be:8c:1f:54:6c:ee:29:0c: c5:73:73:61:9b:eb:d1:52:46:e5:a6:9d:fe:91:94: fe:1f:11:dc:2f:c6:20:21:e8:8b:1a:8f:b7:88:41: cb:ad:d2:a5:4f:66:d0:8e:33:ce:c1:48:55:97:cc: 67:58:b6:a6:89:3c:4b:6f:42:5a:95:66:a8:9e:b1: 22:a4:a2:d6:c5:7b:d6:05:35:9d:04:20:b3:e8:68: 01:59:f1:87:c1:12:ac:63:1f:22:67:8f:a7:dd:83: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:35:EB:2F:AB:E9:0E:E0:8A:A4:83:9C:F7:B4:05:76:80:F0:29 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:12:17:fa:60:a1:fb:e1:f5:4d:ae:36:ea:07:f1:b7:f3:66: d8:c5:09:2c:62:bc:64:24:a1:8a:c5:ed:0b:fc:b2:97:4d:a3: e8:d2:77:61:fc:8b:58:61:17:6c:e2:11:a3:c3:36:02:24:6a: 4f:03:65:7e:a2:bf:c0:b4:db:a4:75:1d:84:60:0c:32:6f:87: b8:4e:08:5f:69:af:7a:c3:4e:3b:93:33:49:4d:d2:36:9e:d5: 1c:19:3e:04:08:46:54:b9:49:45:7c:c7:7e:de:25:36:7d:ba: 25:ce:75:d3:4c:fd:ec:97:9a:79:9b:ce:b5:c2:0d:7b:5f:70: 04:5d:1e:30:a8:7c:32:d5:a8:99:7b:09:b8:ac:56:88:54:f6: c3:db:93:4e:f0:81:8d:8e:26:b4:a2:ba:17:db:b3:12:ba:ac: 7a:b3:a7:fb:4e:48:81:cc:21:f0:9d:72:a9:ba:31:76:fb:0a: 06:b6:44:9e:07:bf:d0:49:a6:0f:47:cb:e7:69:f3:b9:3c:21: 2e:25:6d:6f:ab:30:a7:3d:0c:97:13:f7:96:70:a1:a6:0c:60: 75:13:3b:a4:d1:4b:d3:08:3c:08:a0:02:00:b2:11:3b:18:d4: 10:28:42:0d:29:1d:b6:59:47:34:c9:c7:86:e1:b4:46:9c:80: f8:b7:43:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjQwNTE4MTk1ODIzWhcNMjQwNTI1MTk1ODIzWjAYMRYwFAYD VQQDEw02NjQ5MDg2MC04OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCPC19imJ8dMPwq1MwsVqMxH1K9vpOxlja/b7eegK4h1Oyv/xj3D331+C+9b oAOJSk3dxK8RzIqD4nI0Fd6Da6zV/1iA1RD6Dic9veYXDnRcMW+d6sYhGnyD4tw8 tAKaYYArwSvekruQXH+DmIEdVSLsggPt2DztMADG6YTgNbXJflU7WmQLeGnbPunG hi/jglVIdeOOOeGV576LvowfVGzuKQzFc3Nhm+vRUkblpp3+kZT+HxHcL8YgIeiL Go+3iEHLrdKlT2bQjjPOwUhVl8xnWLamiTxLb0JalWaonrEipKLWxXvWBTWdBCCz 6GgBWfGHwRKsYx8iZ4+n3YOQrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOngNesv q+kO4Iqkg5z3tAV2gPApMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmEhf6YKH74fVNrjbqB/G382bYxQksYrxkJKGKxe0L/LKXTaPo0ndh /ItYYRds4hGjwzYCJGpPA2V+or/AtNukdR2EYAwyb4e4Tghfaa96w047kzNJTdI2 ntUcGT4ECEZUuUlFfMd+3iU2fbolznXTTP3sl5p5m861wg17X3AEXR4wqHwy1aiZ ewm4rFaIVPbD25NO8IGNjia0oroX27MSuqx6s6f7TkiBzCHwnXKpujF2+woGtkSe B7/QSaYPR8vnafO5PCEuJW1vqzCnPQyXE/eWcKGmDGB1Ezuk0UvTCDwIoAIAshE7 GNQQKEINKR22WUc0yceG4bRGnID4t0OY -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org